Apr 18 2017 10:56 AM
Apr 18 2017 10:56 AM
Recently, Unindexed Items have started to appear in our content searches. I believe these are most likely encryted documents? Please correct if I am mistaken. I would like to ensure that the Search & Delete process outlined here will not delete these messages.
Example search with Unindexed Items returned:
Apr 18 2017 11:29 AM
Encrytped or password-protected is a common scenario, unsupported file types is another one. There's a detailed article on the subject here: https://support.office.com/en-us/article/Unindexed-items-in-Content-Search-in-Office-365-d1691de4-ca...
Apr 18 2017 12:34 PM
@Vasil Michev I guess the problem I am running into is that I have lost the ability to exclude unindexed items as described in the article you mentioned. Now I am afraid to run the powershell commands to remove the items searched for from the users mailboxes because I do not want to remove those unindexed items that I cannot exclude from the search.
Apr 19 2017 12:01 AM
When you run an Action against Content Search, you have the option to specify whether unindexed items are included in the scope. If you are doing this via PowerShell, the "-Scope IndexedItemsOnly" parameter is what you need. More info here: https://technet.microsoft.com/EN-US/library/a3a2897c-07a8-41d6-99cd-f2440613fbce(EXCHG.160).aspx
Plus, you can always run the Export action first, so you have a backup copy if something goes wrong.
Apr 19 2017 08:27 AM - edited Apr 19 2017 08:28 AM
Unfortunately the "Scope" is only available on Export commands. I am trying to run a purge command and it wont accept the -Scope IndexedItemsOnly as part of the command.
Ill redo the search using Powershell and choose not to include the unindexed items. I dont understand why this was removed from the GUI. I remember it being there before.
Apr 19 2017 08:38 AM - edited Apr 19 2017 08:40 AM
Wow... I just tried to run this via powershell and the -IncludeUnindexedItems switch is not avialable there either.
PS C:\Scripts> New-ComplianceSearch -Name "deltaphishing2" -ExchangeLocation All -IncludeUnindexedItemsEnabled False -WhatIf
A parameter cannot be found that matches parameter name 'IncludeUnindexedItemsEnabled'.
+ CategoryInfo : InvalidArgument: (:) [New-ComplianceSearch], ParameterBindingException
+ FullyQualifiedErrorId : NamedParameterNotFound,New-ComplianceSearch
+ PSComputerName : ps.compliance.protection.outlook.com
Can someone else see if they still have the ability?
Apr 19 2017 10:41 AM
The parameter is available for the "action" cmdlets, not the generic "search" ones. But you are right, it does not seem to be available for the Purge action. Here's an example for Export:
New-CComplianceSearchAction -SearchName blabla -Export -Scope UnindexedItemsOnly
Apr 25 2017 03:46 PMSolution
I FINALLY got an answer from MS Support. The purge function will never delete an unindexed item. They also have removed the ability to exlude unindexed items from search due to legal reasons. You can exclude unindexed on export, but not on search anymore like you used to be able to.
The following resouces detail the changes.