SOLVED
Home

Content Search & Unindexed Items

%3CLINGO-SUB%20id%3D%22lingo-sub-63029%22%20slang%3D%22en-US%22%3EContent%20Search%20%26amp%3B%20Unindexed%20Items%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-63029%22%20slang%3D%22en-US%22%3E%3CP%3ERecently%2C%20Unindexed%20Items%20have%20started%20to%20appear%20in%20our%20content%20searches.%20I%20believe%20these%20are%20most%20likely%20encryted%20documents%3F%20Please%20correct%20if%20I%20am%20mistaken.%20I%20would%20like%20to%20ensure%20that%20the%20Search%20%26amp%3B%20Delete%20process%20outlined%20here%20will%20not%20delete%20these%20messages.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FSearch-for-and-delete-email-messages-in-your-Office-365-organization-Admin-Help-3526fd06-b45f-445b-aed4-5ebd37b3762a%26nbsp%3B%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FSearch-for-and-delete-email-messages-in-your-Office-365-organization-Admin-Help-3526fd06-b45f-445b-aed4-5ebd37b3762a%26nbsp%3B%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EExample%20search%20with%20Unindexed%20Items%20returned%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20435px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F13393i7284D7966FD7DBF1%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22unindexed.png%22%20title%3D%22unindexed.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-64931%22%20slang%3D%22en-US%22%3ERe%3A%20Content%20Search%20%26amp%3B%20Unindexed%20Items%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-64931%22%20slang%3D%22en-US%22%3E%3CP%3EI%20FINALLY%20got%20an%20answer%20from%20MS%20Support.%20The%20purge%20function%20will%20never%20delete%20an%20unindexed%20item.%20They%20also%20have%20removed%20the%20ability%20to%20exlude%20unindexed%20items%20from%20search%20due%20to%20legal%20reasons.%20You%20can%20exclude%20unindexed%20on%20export%2C%20but%20not%20on%20search%20anymore%20like%20you%20used%20to%20be%20able%20to.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3BThe%20following%20resouces%20detail%20the%20changes.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CUL%3E%3CLI%3EUnindexed%20items%20%3A%20%3CA%20href%3D%22https%3A%2F%2Fna01.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fsupport.office.com%252Fen-us%252Farticle%252FUnindexed-items-in-Content-Search-in-Office-365-d1691de4-ca0d-446f-a0d0-373a4fc8487b%26amp%3Bdata%3D02%257C01%257CRobert.Woods%2540TeamKSE.com%257Cc13009b1cefd4507b36008d4890dacd1%257Cab6ed105c0864195b56055de99f5b299%257C0%257C0%257C636284139255722313%26amp%3Bsdata%3D4A%252Bi95ADQcbuyKaRq6d0sQQ6MLL8NH5hUCUw%252FkQfYQk%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FUnindexed-items-in-Content-Search-in-Office-365-d1691de4-ca0d-446f-a0d0-373a4fc8487b%3C%2FA%3E%3C%2FLI%3E%3CLI%3ECreating%20a%20content%20search%20%3A%20%3CA%20href%3D%22https%3A%2F%2Fna01.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fsupport.office.com%252Fen-us%252Farticle%252FRun-a-Content-Search-in-the-Office-365-Security-Compliance-Center-61852fd9-fe8a-4880-a339-cb19ed3bff4a%253Fui%253Den-US%2526rs%253Den-US%2526ad%253DUS%2523create%26amp%3Bdata%3D02%257C01%257CRobert.Woods%2540TeamKSE.com%257Cc13009b1cefd4507b36008d4890dacd1%257Cab6ed105c0864195b56055de99f5b299%257C0%257C0%257C636284139255722313%26amp%3Bsdata%3D0mCmIYijrRFyceGQyjzLqybA%252FMkLP5MQudNk3rErrTw%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FRun-a-Content-Search-in-the-Office-365-Security-Compliance-Center-61852fd9-fe8a-4880-a339-cb19ed3bff4a%3Fui%3Den-US%26amp%3Brs%3Den-US%26amp%3Bad%3DUS%23create%3C%2FA%3E%3C%2FLI%3E%3CLI%3ESearch%20%26amp%3B%20Purge%20%3A%20%3CA%20href%3D%22https%3A%2F%2Fna01.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fsupport.office.com%252Fen-us%252Farticle%252FSearch-for-and-delete-email-messages-in-your-Office-365-organization-Admin-Help-3526fd06-b45f-445b-aed4-5ebd37b3762a%2523moreinfo%26amp%3Bdata%3D02%257C01%257CRobert.Woods%2540TeamKSE.com%257Cc13009b1cefd4507b36008d4890dacd1%257Cab6ed105c0864195b56055de99f5b299%257C0%257C0%257C636284139255722313%26amp%3Bsdata%3Du%252FH5V7QbsqkAIIH0tgmhLRr8ra57NyQ4x545Ex5rAJA%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FSearch-for-and-delete-email-messages-in-your-Office-365-organization-Admin-Help-3526fd06-b45f-445b-aed4-5ebd37b3762a%23moreinfo%3C%2FA%3E%3C%2FLI%3E%3C%2FUL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-63341%22%20slang%3D%22en-US%22%3ERe%3A%20Content%20Search%20%26amp%3B%20Unindexed%20Items%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-63341%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20parameter%20is%20available%20for%20the%20%22action%22%20cmdlets%2C%20not%20the%20generic%20%22search%22%20ones.%20But%20you%20are%20right%2C%20it%20does%20not%20seem%20to%20be%20available%20for%20the%20Purge%20action.%20Here's%20an%20example%20for%20Export%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENew-CComplianceSearchAction%20-SearchName%20blabla%20-Export%20-Scope%20UnindexedItemsOnly%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-63318%22%20slang%3D%22en-US%22%3ERe%3A%20Content%20Search%20%26amp%3B%20Unindexed%20Items%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-63318%22%20slang%3D%22en-US%22%3E%3CP%3EWow...%20I%20just%20tried%20to%20run%20this%20via%20powershell%20and%20the%20-IncludeUnindexedItems%20switch%20is%20not%20avialable%20there%20either.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPS%20C%3A%5CScripts%26gt%3B%20New-ComplianceSearch%20-Name%20%22deltaphishing2%22%20-ExchangeLocation%20All%20-IncludeUnindexedItemsEnabled%20False%20-WhatIf%3CBR%20%2F%3EA%20parameter%20cannot%20be%20found%20that%20matches%20parameter%20name%20'IncludeUnindexedItemsEnabled'.%3CBR%20%2F%3E%2B%20CategoryInfo%20%3A%20InvalidArgument%3A%20(%3A)%20%5BNew-ComplianceSearch%5D%2C%20ParameterBindingException%3CBR%20%2F%3E%2B%20FullyQualifiedErrorId%20%3A%20NamedParameterNotFound%2CNew-ComplianceSearch%3CBR%20%2F%3E%2B%20PSComputerName%20%3A%20ps.compliance.protection.outlook.com%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20someone%20else%20see%20if%20they%20still%20have%20the%20ability%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F142%22%20target%3D%22_blank%22%3E%40Maddie%20Egan%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-63312%22%20slang%3D%22en-US%22%3ERe%3A%20Content%20Search%20%26amp%3B%20Unindexed%20Items%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-63312%22%20slang%3D%22en-US%22%3E%3CP%3EUnfortunately%20the%20%22Scope%22%20is%20only%20available%20on%20Export%20commands.%20I%20am%20trying%20to%20run%20a%20purge%20command%20and%20it%20wont%20accept%20the%20-Scope%20IndexedItemsOnly%20as%20part%20of%20the%20command.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIll%20redo%20the%20search%20using%20Powershell%20and%20choose%20not%20to%20include%20the%20unindexed%20items.%20I%20dont%20understand%20why%20this%20was%20removed%20from%20the%20GUI.%20I%20remember%20it%20being%20there%20before.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-63162%22%20slang%3D%22en-US%22%3ERe%3A%20Content%20Search%20%26amp%3B%20Unindexed%20Items%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-63162%22%20slang%3D%22en-US%22%3E%3CP%3EWhen%20you%20run%20an%20Action%20against%20Content%20Search%2C%20you%20have%20the%20option%20to%20specify%20whether%20unindexed%20items%20are%20included%20in%20the%20scope.%20If%20you%20are%20doing%20this%20via%20PowerShell%2C%20the%20%22-Scope%20IndexedItemsOnly%22%20parameter%20is%20what%20you%20need.%20More%20info%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Ftechnet.microsoft.com%2FEN-US%2Flibrary%2Fa3a2897c-07a8-41d6-99cd-f2440613fbce(EXCHG.160).aspx%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ftechnet.microsoft.com%2FEN-US%2Flibrary%2Fa3a2897c-07a8-41d6-99cd-f2440613fbce(EXCHG.160).aspx%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlus%2C%20you%20can%20always%20run%20the%20Export%20action%20first%2C%20so%20you%20have%20a%20backup%20copy%20if%20something%20goes%20wrong.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-63076%22%20slang%3D%22en-US%22%3ERe%3A%20Content%20Search%20%26amp%3B%20Unindexed%20Items%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-63076%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3BI%20guess%20the%20problem%20I%20am%20running%20into%20is%20that%20I%20have%20lost%20the%20ability%20to%20exclude%20unindexed%20items%20as%20described%20in%20the%20article%20you%20mentioned.%20Now%20I%20am%20afraid%20to%20run%20the%20powershell%20commands%20to%20remove%20the%20items%20searched%20for%20from%20the%20users%20mailboxes%20because%20I%20do%20not%20want%20to%20remove%20those%20unindexed%20items%20that%20I%20cannot%20exclude%20from%20the%20search.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-63052%22%20slang%3D%22en-US%22%3ERe%3A%20Content%20Search%20%26amp%3B%20Unindexed%20Items%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-63052%22%20slang%3D%22en-US%22%3E%3CP%3EEncrytped%20or%20password-protected%20is%20a%20common%20scenario%2C%20unsupported%20file%20types%20is%20another%20one.%20There's%20a%20detailed%20article%20on%20the%20subject%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FUnindexed-items-in-Content-Search-in-Office-365-d1691de4-ca0d-446f-a0d0-373a4fc8487b%3Fui%3Den-US%26amp%3Brs%3Den-US%26amp%3Bad%3DUS%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FUnindexed-items-in-Content-Search-in-Office-365-d1691de4-ca0d-446f-a0d0-373a4fc8487b%3Fui%3Den-US%26amp%3Brs%3Den-US%26amp%3Bad%3DUS%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Robert Woods
Super Contributor

Recently, Unindexed Items have started to appear in our content searches. I believe these are most likely encryted documents? Please correct if I am mistaken. I would like to ensure that the Search & Delete process outlined here will not delete these messages. 

 

 

https://support.office.com/en-us/article/Search-for-and-delete-email-messages-in-your-Office-365-org...

 

Example search with Unindexed Items returned:

 

 

unindexed.png

7 Replies

Encrytped or password-protected is a common scenario, unsupported file types is another one. There's a detailed article on the subject here: https://support.office.com/en-us/article/Unindexed-items-in-Content-Search-in-Office-365-d1691de4-ca...

@Vasil Michev I guess the problem I am running into is that I have lost the ability to exclude unindexed items as described in the article you mentioned. Now I am afraid to run the powershell commands to remove the items searched for from the users mailboxes because I do not want to remove those unindexed items that I cannot exclude from the search. 

When you run an Action against Content Search, you have the option to specify whether unindexed items are included in the scope. If you are doing this via PowerShell, the "-Scope IndexedItemsOnly" parameter is what you need. More info here: https://technet.microsoft.com/EN-US/library/a3a2897c-07a8-41d6-99cd-f2440613fbce(EXCHG.160).aspx

 

Plus, you can always run the Export action first, so you have a backup copy if something goes wrong.

Unfortunately the "Scope" is only available on Export commands. I am trying to run a purge command and it wont accept the -Scope IndexedItemsOnly as part of the command. 

 

Ill redo the search using Powershell and choose not to include the unindexed items. I dont understand why this was removed from the GUI. I remember it being there before. 

Wow... I just tried to run this via powershell and the -IncludeUnindexedItems switch is not avialable there either. 

 

PS C:\Scripts> New-ComplianceSearch -Name "deltaphishing2" -ExchangeLocation All -IncludeUnindexedItemsEnabled False -WhatIf
A parameter cannot be found that matches parameter name 'IncludeUnindexedItemsEnabled'.
+ CategoryInfo : InvalidArgument: (:) [New-ComplianceSearch], ParameterBindingException
+ FullyQualifiedErrorId : NamedParameterNotFound,New-ComplianceSearch
+ PSComputerName : ps.compliance.protection.outlook.com

 

 

Can someone else see if they still have the ability?

 

@Maddie Egan

The parameter is available for the "action" cmdlets, not the generic "search" ones. But you are right, it does not seem to be available for the Purge action. Here's an example for Export:

 

New-CComplianceSearchAction -SearchName blabla -Export -Scope UnindexedItemsOnly

Highlighted
Solution

I FINALLY got an answer from MS Support. The purge function will never delete an unindexed item. They also have removed the ability to exlude unindexed items from search due to legal reasons. You can exclude unindexed on export, but not on search anymore like you used to be able to. 

 The following resouces detail the changes.

 

 

Related Conversations
flashing a white screen while open new tab
cntvertex in Discussions on
13 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
22 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
28 Replies
PacketMon Components are not loading in WAC 1909
HotCakeX in Windows Admin Center on
2 Replies