Journaling Teams to Smarsh for compliance

[Bill Taney]

Is there any way to journal all teams chats to a email journal address for compliance purposes?

[#2]

Hey Bill,

I'm not aware of a way to journal teams chats to an email address but I do know you can use the Security and Compliance Center in Office 365 Admin Portal. These links might help further https://support.office.com/en-us/article/Run-a-Content-Search-in-the-Office-365-Security-Compliance-...

https://support.office.com/en-us/article/Run-a-Content-Search-in-the-Office-365-Security-Compliance-...

[#3]

Yes, we also need to journal all Microsoft Teams chats and other messages to Global Relay. We already journal our Exchange messages and we need to do the same for Microsoft Teams before we can deploy it to our users. This is a compliance requirement. Would you be able to implement that?

[#4]

Teams content is stored in the mailbox and sharepoint site associated with the Team. If you are journalling them then you already have the Teams content.

See https://support.office.com/en-us/article/Run-a-Content-Search-in-the-Office-365-Security-Compliance-...

[#5]

Can you elaborate on that, @Steven Collier? We don't use Exchange Online yet as we still have Exchange 2013 on-premises. We journal all email messages going through Exchange 2013 and they are sent offsite to Global Relay using the journaling rule. How do we journal the Teams content? Where do I put the journaling rule for this to happen?

[#6]

Channel conversations in Teams is stored in a hidden folder of a Shared Mailbox in Exchange Online. 

Person to person Chat is stored in a hidden subfolder of Conversation History each participants Exchange Mailbox. 

From there you can ship that information to Global Relay for compliance or manage it inplace via the Office 365 Security and Compliance Center. Since if you're in the cloud, conversations and chat are retained...FOREVER!!! or as long as your retention policy says you have to.

This all hinges on a minimum configuration of Hybrid Exchange, but the more you have in the cloud, the better audit & compliance you'll have with it.

[#7]

The complianve features of Teams require you to use Exchange Online, see https://support.office.com/en-us/article/Frequently-asked-questions-about-Microsoft-Teams-%25E2%2580...

In Microsoft Teams, security and compliance features like eDiscovery, Content Search, archiving, and legal hold work best in Exchange Online and SharePoint Online environments. For channel conversations, messages are journaled to the group mailbox in Exchange Online, where they're available for eDiscovery. If SharePoint Online and OneDrive for Business (using work or school account) are enabled across the organization and for users, these compliance features are available for all files within Teams as well.
Important: Users who participate in conversations that are part of the Chat list in Microsoft Teams must have an Exchange Online (cloud-based) mailbox in order for an admin to search chat conversations. That's because conversations that are part of the Chat list are stored in the cloud-based mailboxes of the chat participants. If a chat participant doesn't have an Exchange Online mailbox, the admin won't be able to search or place a hold on chat conversations. For example, in an Exchange hybrid deployment, users with on-premises mailboxes might be able to participate in conversations that are part of the Chat list in Microsoft Teams. However, in this case, content from these conversations isn't searchable and can't be placed on hold because the users don't have cloud-based mailboxes. For more details about Content Searches and Microsoft Teams, see Microsoft Teams and Office 365 Groups.

[#8]

You say you can send it to GlobalRelay? Can you elaborate, we use smarsh which is a very similar tool and could use Globnal Relay, I see no way to journal from teams to Smarsh or Global Relay

[#9]

It's a hidden folder inside the Exchange Online Mailbox created to support the Team. You can run O365 eDiscvoery against the mailbox, so it can be surfaced. I don't know enough about how Global Relay or Smarsh pull from Exchange Online to give you details on how to connect. At Microsoft we leave everything in place and use our own tools for audit, compliance, retention and discovery. From the perspective of Teams/EXO, the question is "Does the built in mechinisim meet the regulatory standard?" That I do not know the answer to. 

[#10]

This is the first I have heard that. Both Smarsh and Microsoft have said "they are working on it". Smarsh can ingest things through a native integration as they did with Lync or just through email journaling which is how slack and rocket.chat do it. How would one go about sending every Teams message to a journaling connector (SMTP) to do it the most basic way. All we need is some way for each message to get sent to our journal

Thanks,

Bill

[#11]

Well Teams Chat is stored in a hidden sub folder under Conversation History in Exchange Online, it is not an email, so using SMTP to ship it won't work, hence the 3rd parties working on intengration. The Teams product group may provide vendors with API information and vendors will take it from there. 

[#12]

So the inital statement "From there you can ship that information to Global Relay for compliance or manage it inplace via the Office 365 Security and Compliance Center." is totally incorrect then. There is no support to ship this to Global Relay or any other external services from what you are saying now; only that it is hypothetically possible with development work from both the Teams group and the vendor.

[#13]

Yep, that would be me demostrating my lack of knowledge on how journaling tools work. If they use an EXO API to extract the information, then you should be able to do it because the API is how you do eDiscovery and holds. Sounds like your tools are leaning on a very old protocol that's fine for email, but as I said, Teams Chat in an EXO mailbox isn't email, so you can't use the same method you've always used. So if you want to keep on with business as usual, you'll need to wait for your third party to complete their inegration. That's frustrating because yeah, Teams is an outstanding tool and I've seen some really excellent use cases for Teams in the financial industries. 

[#14]

Currently Global Relay is archiving our "Skype for Business" messages that are also stored in the Exchange folder in Outlook. They are doing it through an API. I believe they should also be able to grab Microsoft Teams messages the same way.

[#15]

Sadly that is not the case.

[#16]

If you really want it and want it expidited, post and up vote over at User Voice https://microsoftteams.uservoice.com/forums/555103-public

[#17]

We are turning off teams at the end of the week, the users love it, but the poor compliance features and lack of journaling is just a non-starter for any financial or regulated company.. Really unfortunate Microsoft has chosen to totally ignore this large sector of potential users. 

[#18]

We are switching to Slack because they support archiving to Global Relay. Goodbye Teams. You just lost 150 users.

[#19]

Yep us too. We turned off teams for 275 users because this appears to be completely stalled.

Bill

[#20]

@Ansuman Acharya do you have any updates on this? Have you seen this thread?