Sep 04 2016
- last edited on
May 24 2021
What options are available to perform Journaling within O365 and Exchange Online?
I see that E-Discovery is in the security and compliance portal, but is that only against the exchange online (non-journaled) mailboxes?
What do you recommend for journaling? What can O365 E-Discovery be used again?
Sep 05 2016 12:23 AM
Journaling is available, but you cannot use an O365 mailbox for the target. Any O365 mailbox. The documentation is here: https://technet.microsoft.com/en-us/library/jj898487(v=exchg.150).aspx
Litigation/In-place hold is the preferred method, but it always depends on the requirements.
Sep 05 2016 04:07 PM
I gather by your response that there is no newer update than from Feb 2015?
Is there any "in place" solution to capture all sent / received emails in O365 to use eDiscovery tools on that is in the Security & Compliance portal?
Does the indefinite hold work the same as journaling?
Is the only way to journal with O365 is to pay yet another vendor like Symantec for EV.Cloud, or mimecast?
Sep 15 2016 04:27 AM
You can use either in-place or litigation holds to retain all emails according to a number of different criteria including to/from a particular user. Not quite the same as journalling of course but depending on your requirements, it may be sufficient.
Sep 16 2016 03:17 PM - edited Sep 16 2016 03:24 PMSolution
Although supported in Office 365, Journaling is a legacy feature typically used to capture messages from the transport pipeline and deliver them to an archiving system or service. In Office 365, you can journal messages to an SMTP address, typically an on-premises mailbox or a third-party archiving service. You cannot select an Office 365 mailbox as the journaling (target) mailbox.
The recommended archiving solution is to preserve message in-place using In-Place Hold or Litigation Hold. In Exchange Online, this preserves messages in the user's primary mailbox and archive. See Hold in Office 365 for more info.
If you use unified hold from the Security and Compliance Center, you can preserve data across Exchange Online, SharePoint Online (including OneDrive for Business files) and Skype for Business. Recently announced functionality also allows you to capture social media content from Facebook, LinkedIn and Twitter in Office 365. All archived data is available for eDiscovery.
Feb 10 2019 09:15 AM
I have a continuing question to this. So I guess we don't have to talk about that selecting an OnPrem mailbox is no option. Microsoft is enforcing the companies so vehemently to migrate to O365 that all customers believe that they will have all solutions out-of-the-box. For sure they are planning to deprovision their OnPrem services one by one.
So the only option is a third party service or the legal hold. From my experience a lot of companies have a high auditing acceptability with journaling and a secure (items cannot be deleted by user) archive.
Can I achieve that with the in-place / litigation hold? For a good reason there is the requirement that a user cannot delete emails from the very first second, maybe in his view, but not in the backend.
That would mean after creating a user and assigning the required licenses I would set the in-place hold immediately. What about storage consumption?
Thanks for your help.
Apr 18 2019 03:09 PM - edited Apr 18 2019 03:10 PM
Not sure about your exact scenario and use case, but have you see this recent third party assessment for Exchange online: Use Exchange Online and the Security & Compliance Center to comply with SEC Rule 17a-4