News Categories
Announcement (9) Amy Babinchak (64) Tips (1) SBS 2011 (6) Windows Essentials 2012 (4) Edwin Sarmiento (28) SQL Server (22) SQL Server 2012 (6) SQL Server Clustering (3) SQL Server Disaster Recovery (6) Windows Server 2008 Clustering (1) log shipping (1) Brian Higgins (3) Uncategorized (42) Hyper-V (67) Virtualization (13) Windows 8 (13) Cisco VPN Client (1) Windows Server 2012 (24) Friend of TT (4) Hangout (2) Office365 (4) DNS (8) Jeremy (7) Cliff Galiher (3) Active Directory (12) ClearOS (4) Linux (4) presentations (2) SQL PASS (6) Chris Matthews (4) Printers (2) SharePoint (8) SQL Server Administration (7) Windows PowerShell (3) recovery model (1) sql server databases (1) Dave Shackelford (7) SMB Nation (1) Steve (1) Boon Tee (5) Kevin Royalty (3) Lee Wilbur (2) Philip Elder (10) SMBKitchen Crew (31) Susan Bradley (15) AlwaysOn (1) AlwaysOn Availability Groups (4) readable secondaries (1) row versioning (1) undocumented (1) The Project (2) Webinar (3) Enterprise for SMB Project (9) Security (25) Remote Desktop Connection for Mac (1) Remote Desktop Services (8) Windows Server 2008 (1) Exchange (15) Powershell (6) Microsoft (15) Performance (7) data types (1) Server 2012 (1) monitoring (1) DevTeach (1) SQL Server High Availability and Disaster Recovery (5) Clusters (44) Hyper-V Server 2012 (2) Business Principles (26) Cost of Doing Business (13) DHCP (7) sbs (15) Windows Server (30) SMBKitchen (26) Windows Server 2008 R2 (4) StorageCraft (1) P2V (1) ShadowProtect (6) StorageCraft ShadowProtect (1) VHDs (1) Intel RAID (2) Intel Server System R2208GZ (1) Intel Server Systems (17) RAID (2) SAS (2) SATA (2) Server Hardware (12) Microsoft Licensing (2) OEM (2) System Builder Tips (4) Intel (5) Intel Channel Partner Program (4) Intel Product Support (10) Intel Server Boards (2) Intel Server Manager (2) Cloud (26) IT Solutions (2) On-Premises (20) SMB (9) WIndows Azure (2) StorageSpaces (1) Error (47) Error Fix (35) Intel Desktop Boards (2) Intel SSDs (2) SSD (2) Business Opportunity (17) Data Security (11) Identity Security (7) Information Security (14) Privacy (2) Intel Modular Server (6) Promise (2) Storage Systems (9) Live ID (2) Microsoft ID (4) User Profiles (2) Articles (2) Building Client Relationships (6) DBCC IND (2) DBCC PAGE (2) filtered indexes (2) SQL Server Index Internals (2) training (11) Adobe (3) Internet Street Smart (8) Intel Storage Systems (2) LSI Corp (2) LSI SAS6160 Switch (2) Storage Spaces (7) Firmware Update (2) Product Support (7) Hybrid Cloud Solutions (3) Server Core (2) MAXDOP (1) SharePoint 2013 (1) SharePoint best practices (1) SQL Server Authentication (1) Family (5) Alternatives (1) SBS 2011 Standard (4) Microsoft Small Business Specialist Community (2) Microsoft Surface (2) SBSC (2) Networking (4) Availability Groups (3) CANITPro (1) HA/DR (1) Step-By-Step: Creating a SQL Server 2012 AlwaysOn Availability Group (1) webcast (1) VMWare (2) Conferences (2) Client Focus (2) Disaster Recovery (6) Error Workaround (8) Troubleshooting (4) Logitech (2) Product Review (7) Windows Features (4) XBox Music (2) SBS 2008 All Editions (4) MDOP (2) Microsoft Desktop Optimization Pack (2) Software Assurance (2) W2012E (6) Windows Server 2012 Essentials (6) Internet Explorer (3) USB 3.0 (2) USB Hard Drive (2) Bug Report (2) Microsoft Office 365 (5) sharepoint online (2) BitLocker (2) Windows (2) Microsoft Update (3) Swing Migration (2) Windows Update (4) Outlook (2) Group Policy (9) WS2012e (2) WSUS (3) Office (3) Microsoft Downloads (5) Microsoft Office (3) DRP (3) Virtual Machines (2) Virtual Server Hardware (2) online course (1) SQL Server learning (7) 2 Factor Authentication (2) 2FA (2) PASS Summit 2013 (4) SQLPASS (5) Contest (1) e-learning (1) Udemy (1) smbtechfest (1) backups (2) PASS Summit First Timers (3) IIS (2) RD Gateway (4) RD RemoteApp (2) RDWeb (4) Remote Desktop Connection (2) Remote Web Access (2) Remote Web Workplace (2) Cryptolocker (6) Backup (4) Restore (2) CryptoLocker (1) AuthAnvil (1) SBS 2003 (1) SBS Migration (1) Windows Server 2012 R2 (9) Documentation (1) IE 11 (4) testimonials (11) SQL Server 2008 (1) Best Practices (1) Support (1) Intel Xeon Processor (1) RemoteApp (1) Android (1) iOS (1) Hyper-V Replica (2) PowerShell (2) SBS (3) Break (1) Business Intelligence (1) Excel 2013 (1) Power Map (1) Power Query (1) PowerBI (1) MultiPoint (2) Surface (1) Net Neutrality (1) Opinion (2) ASP (9) HP (2) Scale-Out File Server (8) SOFS (10) Windows Phone (1) Updates (1) Intel NUC (1) Intuit (1) QuickBooks (1) Office364 (1) Intel Server Systems;Hyper-V (1) Firewall (1) Patching (1) Mobile (1) Mobility (1) sharepoint (1) Microsoft Security (1) Beta (1) Storage Replication (1) outlook (1) Hyper-V Setup (3) JBOD (1) Azure (1) PCI (1) PCI DSS (1) PII (1) POS (1) MicroStaff (2) Catherine Barr (2) Third Tier (1) BeTheCloud (1) BrainExplosion (1) LookAWhale (1) Manuel (1) Rayanne (3) SuperSecretNews (1) TechYourBooks (3) Managed Services (1) Training (1) E-mail (1)
RSS Feed
News
Oct
9
Searching Across Mailboxes in Exchange 2010
Posted by Third Tier on 09 October 2014 09:06 AM

We are getting more and more requests to perform a search to gather all emails on a particular topic and provide those results to a group of people. From the TechNet article referenced below, these are some of the reasons why you might find a need to search across mailboxes in Exchange.

  • Legal discovery   Complying with legal discovery requests for messaging records is one of the most important tasks for organizations involved in lawsuits. Without a dedicated tool, searching messaging records within several mailboxes that may reside in different mailbox databases can be a time-consuming and resource-intensive task. Using Multi-Mailbox Search, you can search a large volume of e-mail messages stored in mailboxes across one or more Exchange 2010 servers, and possibly in different locations.
  • Internal investigations   Multi-Mailbox Search can help you facilitate requests from managers or legal departments as part of internal investigations.
  • Human Resources monitoring   Multi-Mailbox Search can help you facilitate HR requests, such as standard e-mail monitoring requirements or a specific search.

Exchange has this functionality if you own the Exchange Enterprise CALS for all of the mailboxes on the server. The steps involved are these:

  1. Create a Discovery Search mailbox. This mailbox will hold the search results
  2. Enter your search criteria and run it
  3. Assign Full Mailbox permissions to the people that need to see the results and assist the users in adding the discovery search mailbox to Outlook

The search can get very granular, permissions can get very complex and there are a ton of options with which to run this process. I’m going to show a basic search which is what you will use in most cases. If you’d like to get into the nitty gritty TechNet is your best source. Start here: http://technet.microsoft.com/en-us/library/dd335072(v=exchg.141).aspx

For your ordinary search needs…

1. Create a Discovery Search Mailbox. This is a powershell only item. The command is New-Mailbox “Discovery Mailbox1” –Discovery –UserPrincipalName “discoverymailbox1@mydomain.com”  Where Discovery Mailbox1 is the name that you want to call this mailbox by. I often use the date or in a recent the case, the name of the project that we wanted to gather up all emails from. What ever you name it, just make sure that it is obvious to all parties what it is. UserPrinicipalName is the name of the user for this mailbox. In Exchange every mailbox must have a user, this command will create the user for you in AD. I suggest naming the user the same as the discovery mailbox.

You will get a result from PowerShell like the one below.

3

And in Exchange you will now see the new mailbox. This mailbox has a 50GB quota by default. Keep that in mind as you are performing the search. May G-D have mercy on your soul and those of the people that have to read the search results if the mailbox exceeds 50GB. I wouldn’t wish the fate of having to read that much email on my worst enemy. Smile

4

Screenshots from http://theucguy.net/discovery-mailbox-in-exchange-2010/

2. Enter your search criteria and run it. I find these unnecessarily buried and difficult to find. You find it in OWA and here’s how you get there. Log into OWA as an administrator. Go to Options, then change from Manage Myself to Manage My Organization. Move to Role & Auditing. Select Discovery Management role and add your administrator account to this group. This is required so that you can see and use the discover tools.

image

Logoff and back on again and you will now see the Discovery tools option.

image

To perform a search click NEW and enter your search criteria into the form.

The first item you come to in the form is keywords. This is the most important part of the whole form because here you are telling it what to search for. As an external consultant I always ask the client for the list of terms to search for. As noted in the screenshot below you will enter AND, OR or NOT between the search terms you list. After an initial search has been run, I always ask the client to review the results to determine whether the search is accurate and contains what they need. We can always change the search terms and run it again.

image

The rest of the form is very straight forward. It just wants to know which mailboxes to search (or all of them) and which users to include, exclude or not and what date range to include or not to limit it by date. Most often you will find that you will not be limiting the search by date or user.

The final part of the form is a little bit important. Here is where you will name the search. As before when I recommended that you name the user and search mailbox the same. I would name the search the same too to make it easy to keep track of.

If you select the radio button for Estimate the search results, all you will get is an estimate. The search mailbox won’t actually have anything in it. To move the search results into the search mailbox you have to select the Copy the search results to the destination mailbox radio button and then Browse to the mailbox you created.

Note the Enable deduplication checkbox. As you know when you send email to multiple people you get a lot of copies of the same email. This checkbox will eliminate those. However, if this is a legal issue that you are gathering the data for you probably will want to uncheck that box. Check with your client.

image

Now run the search! It will take a little while but actually it is quite quick. When finished you’ll find a nice little report in the right hand column that tells you how many emails and whose mailboxes they were in.

3. Assign Full Mailbox permissions to the people that need to see the results and assist the users in adding the discovery search mailbox to Outlook

Back in the Exchange Management console select the mailbox and Click Manage Full Access from the right column (near the bottom). Then add the users that need access to the search results mailbox.

Go to the users and assist them in adding an additional mailbox to Outlook so they can review the results.

 

____

Are you not a member of SMBKitchen ASP? Join up. $300 for new members. http://helpdesk.thirdtier.net/. Just register for an account then proceed to payments, click buy more support and add the ASP to your cart.  Our goal is to help IT firms be more aware, be better consultants and survive in the new era.


Comments (0)
Post a new comment
 
 
Full Name:
Email:
Comments:
CAPTCHA Verification 
 
Please enter the text you see in the image into the textbox below. This is required to prevent automated registrations and form submissions.

Help Desk Software by Kayako Fusion