Before we start, please not that if you want to see a table of contents for all the sections of this blog and their various Purview topics, you can locate the in the following link:
This document is not meant to replace any official documentation, including those found at docs.microsoft.com. Those documents are continually updated and maintained by Microsoft Corporation. If there is a discrepancy between this document and what you find in the Compliance User Interface (UI) or inside of a reference in docs.microsoft.com, you should always defer to that official documentation and contact your Microsoft Account team as needed. Links to the docs.microsoft.com data will be referenced both in the document steps as well as in the appendix.
All of the following steps should be done with test data, and where possible, testing should be performed in a test environment. Testing should never be performed against production data.
The Advanced eDiscovery (Aed) section of this blog series is aimed at legal and HR officers who need to understand how to perform a basic investigation.
This document is meant to guide an administrator who is “net new” to Microsoft E5 Compliance through the use of Advanced eDiscovery.
It is presumed that you already data to search inside your tenant.
We will only step through a basic eDiscovery case (see the Use Case section).
This document does not cover any other aspect of Microsoft E5 Compliance, including:
It is presumed that you have a pre-existing of understanding of what Microsoft E5 Compliance does and how to navigate the User Interface (UI).
It is also presumed you are using an existing Information Types (SIT) or a SIT you have created for your testing.
If you wish to set up and test any of the other aspects of Microsoft E5 Compliance, please refer to Part 1 of this blog series (listed in the link below) for the latest entries to this blog. That webpage will be updated with any new walk throughs or Compliance relevant information, as time allows.
There are many use cases for Advanced eDiscovery. For the sake of simplicity, we will use the following: Your organization has a Human Resources investigation against a specific user.
You will understand what a Microsoft Purview Premium eDiscovery Communication is and how to create a communication and what the end user experience is.
You should review the previous parts of this eDiscovery blog series and be sure you have done them.
Before we dig into this tab, let us answer this question – What is Communication in Microsoft Purview Premium eDiscovery?
I explain it like this:
First, it is the process of informing a custodian that they are under investigation, either once or multiple times. Second, if you want the custodian to acknowledge to the organization that they are under investigation, they can do that. Third, you can inform the custodian that they are no longer under investigation and their data has been released from a legal hold.
The official explanation is here:
“A legal hold (also known as a litigation hold) notice is a notification sent from an organization’s legal department to employees, contingent staff, or custodians of data that may be relevant to a legal investigation. These notifications instruct custodians to preserve electronically stored information and any content that may be relevant to an active or impending legal matter. Legal teams must know that each custodian has received, read, understood, and has agreed to comply with the given instructions.”
We covered this in Part 5 – Premium eDiscovery – Overview and Settings. Please refer to that blog entry for information on this.
Let us click on the Communications tab. It is in the middle of the “case” pane.
Here you will see all of the communications/notifications that have been sent out for this case or create a new communication. This will let you see the 1) status, 2) when it was modified, 3) the number of custodians associated with the communication, and 4) the number of custodian Hold acknowledgements.
Here you can create, edit, and delete custodian communications/notifications to be used in this specific Premium eDiscovery Cases. We will walk through creating a notification below.
When the end user receives a communication/notification, what does that experience look like?
They will see something similar to the below in their email. Notice that everything is pre-populated from the steps above. Again, please note my email notification is very generic.
When the custodian clicks on the link “Click here to acknowledge this notice”, they will be taken to your company’s Microsoft Purview acknowledgement website. Here is an example of what they will see.
When the custodian clicks on the link “Go to custodian portal”, they will be taken to Custodian Portal and able to see all the Premium eDiscovery Notifications that they have been sent, when they were sent, when they were due, etc. Here is an example.
We are now done with the Communications tab.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.