ediscovery
135 TopicsPurview eDiscovery’s Big Makeover
eDiscovery is a calling best left to skilled investigators. But Microsoft 365 administrators need to know how to search and how the new Purview eDiscovery works. The new implementation is due by the end of 2024 and is in preview now. It unifies the three existing solutions in the Microsoft 365 eDiscovery space and promises to deliver new functionality. But will it make its dates? Who knows! https://office365itpros.com/2024/09/09/new-purview-ediscovery/134Views0likes0Commentse-discovery search based on meeting appointment start time?
Hi all, I am currently working on an ediscovery case, which requires me to search a particular user mailbox for calendar entries. What I would like to achieve is an export of the mailbox calendar appointments (kind:meeting) based on the actual date of the appointment (i.e. the Start Time), rather than the date on which the appointment was send/received, however going from docs articles, it does not look like this is possible (https://docs.microsoft.com/en-us/microsoft-365/compliance/keyword-queries-and-search-conditions?view=o365-worldwide),which seems like a rather irritating limitation of the O365 SCC. Is anyone aware of how I could achieve my goal?Solved11KViews0likes3CommentsSharePoint Online: "List cannot be deleted while on hold or retention policy."
I am trying to help a client clean up some very old lists and sites. However, whenever I try to delete anything, I get the message above. I've checked for an eDiscovery site, for classification labels/policies, DLP policies, and am finding nothing. Any ideas?Solved104KViews2likes15CommentsNotice: Your Office 365 E3 developer subscription is expiring soon - cannot login
I got an email from Microsoft stating they no longer support Office 365 E3 developer offering - and that I should sign in and delete the subscription for E3 - and when I have deleted it - the Microsoft 365 E5 subscriptionwill start automatically. The problem I have is that when i sign in - I get this message: We're unable to sign you in with this account You can't sign in to the Microsoft 365 Developer Program with your sandbox subscription administrator ID. Please sign in with your Developer Program account. For details, see the FAQ. MS-CorrelationId: 00000000-a228-407b-b67b-b43c54d7e2bf I do not have any other logins assigned to the developer account - when logging into Azure Entra - I can only see one account and one guest account. I have changed the domain associated with the office account - a long time ago - perhaps that is causing problems. Any idea how to proceed?854Views0likes2CommentsE-Discovery Search assistance
Hi All, Legal is requesting I compile a PST file with all emails that were sent or received from 4 different external email addresses. I log into Microsoft 365 compliance and create an e-Discovery content search limiting the scope to just 8 exchange mailboxes in my organization. I then use the participants field where I enter the 4 email addresses we are interested in (these are email addresses outside of my organization). When I review the exported results, I find all kinds of emails that do not have the specific addresses I am looking for (not in to, from, or cc fields) . Some of the results do contain the addresses I want, but not all. Any tips or hints on how I can get better results from my search?609Views0likes2CommentsName & alias mismatch in eDiscovery Premium
Purview eDiscovery Premium manager here. Has anyone in this forum encountered a problem where the display name for one custodian and the email address for another somehow get mixed and one of the metadata fields ends up looking like this? Example Case: Ren v. Stimpy Custodian 1: Ren Hoek <rhoek@companydotcom> Custodian 2: Stimpson J. Cat <sjcat@companydotcom> In the list of possible senders in the review set I find: Ren Hoek <sjcat@companydotcom> This shouldn't be possible. There's no one in the active directory with that display name and email combination. Those are two completely separate accounts. In the actual review set that I'm managing, there are over one hundred appearances of this mismatch. We have a ticket open with Microsoft, but the ticket isn't going anywhere. Microsoft doesn't seem to have an answer for it. We have verbal confirmation from Microsoft that it's just a display issue with Purview and that there are no actual emails going out as "Ren Hoek <sjcat@companydotcom>". But what we don't have is an explanation as to why this happened in Purview and no clear idea how to prevent it or how frequently its happening. Exporting the files that show the mismatch via Purview's export tool shows the proper pairing of name and alias on the native file. No mismatch, so that's good. But, when downloading the files, one by one, you see the mismatch. This is, of course, a problem. Anyone have any insight into this? Can the error be duplicated somehow? Any help would be greatly appreciated. Edit: the only items this affects are calendar invites. All emails, chats, etc. display with the correct display name & alias.922Views0likes1Comment