Litigation and Compliance Question

Philip-Admin Mein 1 Reputation point
2021-07-09T13:46:29.68+00:00

We are new to eDiscovery and Litigation Holds in O365 as we have been using another product. We created a new case within the portal. We added the users mailbox under the "Holds" area in the case but when we go to Exchange Admin portal it also has an nice slider to put the mailbox in a Litigation hold status. My question is, "Is it necessary to put the mailbox in a hold status within Exchange Admin portal if we added the mailbox as a hold within the Security and Compliance tool?

thanks
Philip

Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,210 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,203 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Joyce Shen - MSFT 16,646 Reputation points
    2021-07-12T02:57:49.243+00:00

    Hi @Philip-Admin Mein

    Is it necessary to put the mailbox in a hold status within Exchange Admin portal if we added the mailbox as a hold within the Security and Compliance tool? No, that's based on how you want to keep your data.

    The notion of legal hold is to hold all mailbox data for a user indefinitely or until when hold is removed. In Exchange Online, In-Place Hold includes a new model that allows you to specify the following parameters:

    • What to hold
    • How long to hold

    Using this new model, In-Place Hold allows you to create granular hold policies to preserve mailbox items in the following scenarios:

    • Indefinite hold
    • Query-based hold
    • Time-based hold

    You can use In-Place Hold to place a user on multiple holds. When a user is placed on multiple holds, the search queries from any query-based hold are combined (with OR operators). In this case, the maximum number of keywords in all query-based holds placed on a mailbox is 500. If there are more than 500 keywords, then all content in the mailbox is placed on hold (not just that content that matches the search criteria). All content is held until the total number of keywords is reduced to 500 or less.

    Litigation Hold uses the LitigationHoldEnabled property of a mailbox to place mailbox content on hold. Whereas In-Place Hold provides granular hold capability based on query parameters and the ability to place multiple holds, Litigation Hold only allows you to place all items on hold. You can also specify a duration period to hold items when a mailbox is placed on Litigation Hold. The duration is calculated from the date a mailbox item is received or created. If a duration isn't set, items are held indefinitely or until the hold is removed.

    When a mailbox is placed on one or more In-Place Holds and on Litigation Hold (without a duration period) at the same time, all items are held indefinitely or until the holds are removed. If you remove Litigation Hold and the user is still placed on one or more In-Place Holds, items matching the In-Place Hold criteria are held for the period specified in the hold settings.

    For more information: In-Place Hold and Litigation Hold

    If an Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments