User Profile
tgraham-legalops
Brass Contributor
Joined 3 years ago
User Widgets
Recent Discussions
Legal Hold Communication Acknowledgment links broken by Welcome pop-up
The acknowledgment link generated by Microsoft in a legal hold communication typically takes users to a Purview page with the message "Thank you! Your acknowledgment has been recorded." But now, the ever-present"Welcome to the new Microsoft Purview portal!" pop-up displays, regardless of the user's permissions, and there's no way to close it or bypass it to reach that "Thank you" page. The "Thank you" page loads in the background, but it's partially obscured by the "Welcome" message. Can we please do something to either get rid of this welcome message or disassociate it from these legal hold acknowledgment links?Solved105Views0likes2CommentsDLP rule - Document Property is: 'ComplianceTag:\0'
Is an expression like the one below supported by the "Document Property Is" condition when setting a DLP Policy in Purview? I'm trying to set a rule that applies a DLP alert to files in SharePoint that do not have a retention label applied to them. Would using the null character regex work for this? Document Property is: 'ComplianceTag:\0' Alternatively, is it possible to set a rule when a document property does NOT contain something?Examples of "subject matches patterns" regular expression when auto-applying sensitivity label
Hello, I'm trying to auto-apply a sensitivity label to Exchange content (a specific user mailbox) where the rule is defined by a "subject matches patterns" condition. Microsoft requires a regular expression here. The emails I'm trying to apply the label to all have the words "Litigation Hold" in the subject line. I've tried to capture these using the following regular expressions but none have worked: (?:Litigation Hold), \bLitigation Hold\b, \sLitigation Hold\s, ^(?:Litigation Hold)$, Litigation Hold. What syntax is Microsoft looking for here? Any help or examples would be appreciated, thank you.SolvedIs there a method to select recipients and send a new communication in an eDiscovery case?
The clunky UI makes it difficult to select recipients for a legal hold communication when working with large custodian lists; while you can search on name or email, you can't sort by name or email. Also, I've noticed that some communications fail to send if more than 100 custodians are selected for a single communication. So I have to break it up into separate communications, making it hard to track which ones have been selected and which haven't. This brings me to Graph, which could potentially enable imports of data from a list or csv, but I don't see a method for accessing and writing to the Legal Hold Communication feature in Purview in the documentation. Does such a method exist? If not, is it on the roadmap?416Views0likes0CommentsAdd "communication summary" column to eDiscovery (Premium) cases page
When viewing all cases, it would be great to see the communication summary displayed as an additional column. As eDiscovery administrator I just want to see the number of notices sent and the number acknowledged displayed for each case without having to click into each one. Just a simple "4/7" to show 4 acknowledged out of 7 sent would be great to see alongside the case number, case name, description columns, etc.245Views0likes0CommentsPossible to change test on Purview comm acknowledgment page?
We'd like to change the text on the page that users see when they acknowledge a communication sent via the Purview eDiscovery communication tool. Is it possible to change? Right now it says "eDiscovery (Premium)" and "Thank you!". Is it possible to change the wording here? Or maybe redirect the users to a different acknowledgment page while still recording the acknowledgment?How to monitor use of MRM personal retention tags?
Hello, I've tried audit log searches, content searches and searching this community to no avail. The question is: when a user applies a personal retention tag to an email or folder in their Outlook, is it possible to track that activity as an admin? We're looking for something similar to what you see in the Data Classification Activity Explorer in the compliance portal, which shows how frequently users are applying retention labels to their SharePoint & OneDrive. For exchange, the Data Classification Activity Explorer only tracks Data Classification labels. It does not track personal retention tags as far as I can tell. I'm aware that there are 3 types of tags, DPT, RPT and Personal Tags. The one we are trying to track is Personal Tags. We have thousands of users and would like to know how frequently this option is being used. Any insight would be appreciated. For reference: https://learn.microsoft.com/en-us/exchange/security-and-compliance/messaging-records-management/retention-tags-and-policies#types-of-retention-tagsWhy does an auto-apply retention policy have to be pushed through powershell weekly?
Our auto-apply retention policy only takes affect when our IT admin pushes it through PowerShell. Once the admin pushes, the policy takes affect the following week. But then it stops applying after that. New files are added, weeks go by, and the policy does not take affect unless we push the policy through PowerShell again. Why is this necessary? Context In Purview, we are using the auto-apply policy to apply a retention label to all files of content type 0x0101* (query = ContentTypeId:0x0101*). (We found this works for all files, whereas, applying something like "ContentType:Document" doesn't work at all.) Any insight or suggestions would be helpful. Thank you.Which searchable unique identifiers do eDiscovery and Content Search have in common, if any?
I can see Immutable ID and Item Identity are a match when comparing exports of overlapping data from eDiscovery against Content Search, but I can't actually search those values to find the exact data set that I need. Here's my use case: we have files that were tagged for hard deletion in an eDiscovery Review Set. I need to find those exact files in a Content Search, but attempts to find emails and their attachments using FileId, FamilyId, ConversationId have all failed. Content Search just ignores those queries and returns the entirety of whatever mailboxes I'm searching on. Email Message Id appears to be unavailable in Content Search and neither Item Identity nor Immutable ID are working either. How can I find the exact files that were tagged? Is there a unique identifier that can be used? We need to do a hard delete of these items, hence the need to pull them into Content Search. Any help or suggestions would be appreciated. So far, the best matching search I've been able to run is on received date (which includes the timestamp) but this is giving me too many results. Given the lack of columns and filtering in Content Search, having too many results is not ideal. Need to get the exact tagged set returned. And what about Compound Path? Which way should the slashes go for Content Search? I can't get it to return anything.
