How to see audit trial for private 1-1 messages within Teams?

%3CLINGO-SUB%20id%3D%22lingo-sub-2154257%22%20slang%3D%22en-US%22%3EHow%20to%20see%20audit%20trial%20for%20private%201-1%20messages%20within%20Teams%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2154257%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20hybrid%20mode%20of%20exchange%20at%20the%20moment%20i.e.%20sync's%20on%20premise%20and%20Exchange%20is%20online.%3C%2FP%3E%3CP%3EI%20am%20looking%20to%20find%20an%20answer%20on%20how%20we%20can%20see%20all%20private%201-1%20conversations%20done%20by%20users%20for%20audit%20purposes%3F%3C%2FP%3E%3CP%3EI%20know%20we%20can%20set%20user%20mailboxes%20etc%20but%20that%20is%20only%20possible%20with%20exchange%20online%20not%20with%20hybrid%20model%20I%20guess.%20A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESeeking%20advise%20on%20how%20to%20solve%20this%20problem.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2154257%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2154413%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20see%20audit%20trial%20for%20private%201-1%20messages%20within%20Teams%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2154413%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F974047%22%20target%3D%22_blank%22%3E%40Ashwin_Malhotra%3C%2FA%3E%26nbsp%3BFor%20hybrid%20users%20the%20Teams%201-2-1%20chat%2C%26nbsp%3B%20Private%20channel%20chats%20and%20private%20meetings%20are%20stored%20in%20a%20shadow%20Exchange%20online%20mailbox%20so%20the%20content%20is%20searchable%20via%20eDiscovery.%20See%20this%20Microsoft%20article%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fsearch-cloud-based-mailboxes-for-on-premises-users%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESearch%20for%20Teams%20chat%20data%20for%20on-premises%20users%20-%20Microsoft%20365%20Compliance%20%7C%20Microsoft%20Docs%3C%2FA%3E.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlso%20if%20you%20want%20have%20a%20deep%20dive%20into%20where%20content%20is%20stored%20in%20Teams%20I%20have%20just%20written%20a%20blog%20on%20it%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fnikkichapple.com%2Fmicrosoft-teams-where-is-my-data-stored%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3EMicrosoft%20Teams%20-%20Where%20is%20my%20data%20stored%3F%20-%20Nikki%20Chapple%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

We have hybrid mode of exchange at the moment i.e. sync's on premise and Exchange is online.

I am looking to find an answer on how we can see all private 1-1 conversations done by users for audit purposes?

I know we can set user mailboxes etc but that is only possible with exchange online not with hybrid model I guess. A

 

Seeking advise on how to solve this problem.

1 Reply

@Ashwin_Malhotra For hybrid users the Teams 1-2-1 chat,  Private channel chats and private meetings are stored in a shadow Exchange online mailbox so the content is searchable via eDiscovery. See this Microsoft article Search for Teams chat data for on-premises users - Microsoft 365 Compliance | Microsoft Docs.

 

Also if you want have a deep dive into where content is stored in Teams I have just written a blog on it Microsoft Teams - Where is my data stored? - Nikki Chapple