question

AaseNomad avatar image
0 Votes"
AaseNomad asked KyleXu-MSFT edited

How long it take to remove hold from deletion state

In our Test environment, I've created a few hold under a case in eDiscovery Core and I already delete those hold using PowerShell but It's sill displaying in Security & Complinace center so I wanna know when it will completely remove from the UI?.


The reason I'm asking is because we want to test, creating, updating and removing hold immediately in our test enviroment and if the holds keep displaying in the S&CC then it kinda delaying out process.

I'm getthing this errors.

164290-image.png


windows-server-powershelloffice-exchange-online-itprooffice-exchange-server-dev
image.png (53.1 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@AaseNomad

I am writing here to confirm with you any update about this thread now.
If the suggestion below helps, please feel free to accept it as an answer to close this thread. It also could be beneficial to other community members reading this thread.

0 Votes 0 ·
ManuPhilip avatar image
1 Vote"
ManuPhilip answered ManuPhilip commented

Try deleting the policy forcefully
Example: Remove-DlpCompliancePolicy "lz8rl" -ForceDeletion


If the Answer is helpful, please click "Accept Answer" and upvote it

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi Manu, I use this command Remove-CaseHoldPolicy so just wondering what are the different between with that command?. I look at Microsoft Doc but still confused.

0 Votes 0 ·

Hi, have you tried -ForceDeletion switch along with Remove-CaseHoldPolicy to see if it helps

0 Votes 0 ·
RichMatheisen-8856 avatar image
0 Votes"
RichMatheisen-8856 answered RichMatheisen-8856 commented

Knowing the error is helpful, but knowing the cmdlet you're using when you encounter the error is important.

Is it the Remove-DlpCompliancePolicy cmdlet?

Here's an answer from several years ago: a8e9c629-22a3-4f66-90ab-7166df879f4c

I don't see the "-ForceRemoval" parameter in the on-line help for that cmdlet, but give it a try.

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

oh Sorry Rich for forgetting to mentioned it. I use Remove-CaseHoldPolicy. by anychance can you give me a simple answer on what the different between the two. I look at Microsoft doc but still confused.

0 Votes 0 ·

Remove-DlpCompliancePolicy is used for Data Loss and Prevention (e.g. preventing company secrets from being disclosed). Remove-CaseHoldPolicy is used to hold items that might be needed for investigation (e.g. certain spreadsheets, images, etc.).

Policies have rules. Perhaps the policy you're trying to remove still has some rules associated with it? If so, remove the rules, too.

0 Votes 0 ·
KyleXu-MSFT avatar image
1 Vote"
KyleXu-MSFT answered KyleXu-MSFT commented

@AaseNomad

Here is a test for you:

If we delete a case hold policy, it will in the "pending deletion" state:
164615-qa-kyle-14-12-02.png

If we try to use the "ForceDeletion" when deleting an existing policy, we will get this error below:
164598-qa-kyle-14-13-35.png

So, we can know the "ForceDeletion" attribute is used to delete the "pending deletion" policy:
164632-qa-kyle-14-23-40.png


If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi Kyle,

 I'm new to this case hold process so can you please explain to me what is this rule that this error is talking about and why I can't force delete it?.

164788-image.png


0 Votes 0 ·
image.png (111.3 KiB)

It said, this policy is used by a CaseHoldRule:
165112-qa-kyle-16-35-04.png


You need to find which rule this policy contained in, then delete this rule:
165111-qa-kyle-16-39-31.png

Wait about 1 minute, you will could this policy now:
165093-qa-kyle-16-41-59.png

0 Votes 0 ·