管理高级电子数据展示案例中的保管人Manage custodians in an Advanced eDiscovery case

高级电子数据展示案例的"来源"选项卡上的"保管人"页包含已添加到案例的所有保管人的列表。The Custodians page on the Sources tab in an Advanced eDiscovery case contains a list of all custodians that have been added to the case. 向案例添加保管人后,会自动从 Azure Active Directory 收集每个保管人的详细信息,并可以在高级电子数据展示中查看。After you add custodians to a case, details about each custodian are automatically collected from Azure Active Directory and are viewable in Advanced eDiscovery.

管理保管人

查看保管人详细信息View custodian details

若要查看有关保管人的详细信息,请单击"保管人"选项卡上列表中的 保管 人。将显示一个飞出页,其中包含有关保管人以下信息:To view the details about a custodian, click the custodian from the list on the Custodians tab. A flyout page is displayed and contains the following information about the custodian:

  • 联系人信息Contact information

    • 显示名称 - 在保管人通讯簿中显示的名称。Display Name - The name displayed in the address book for the custodian. 这通常是保管人的名字、中间名首字母和姓氏的组合。This is usually the combination of the custodian's first name, middle initial, and last name.

    • 邮件/SMTP - 保管人的主 SMTP 地址,例如brianj@contoso.onmicrosoft.com。Mail/SMTP - The primary SMTP address for the custodian, for example, brianj@contoso.onmicrosoft.com. 保管人的用户主体名称 (UPN) 列出。The custodian's user principal name (UPN) is also listed.

    • 职务 - 保管人职务。Title - The custodian's job title.

    • 部门 - 保管人工作部门的名称。Department - The name for the department in which the custodian works.

    • 经理 - 保管人经理。Manager - The custodian's manager. 指定的经理将收到此保管人的任何上报通信。The designated manager will receive any escalation communications for this custodian.

  • 位置信息Location information

    • 城市 - 保管人所在的城市。City - The city in which the custodian is located.

    • State - 保管人地址中的州或省。State - The state or province in the custodian's address.

    • 国家/地区 - 保管人所在的国家/地区。Country/Region - The country/region where the custodian is located.

    • Office - 保管人业务地点的办公地点。Office - The office location in the custodian's place of business.

  • 案例信息Case information

    • 保留状态 - 指示保管人是否已被置于保留状态。Hold status - Indicates if the custodian has been placed on hold.

    • 通信状态:指示保管人是否已发出保留通知。Communication status: Indicates if the custodian has been issued a hold notice. 如果保管人已发出通知,则此属性的此值为 PublishedIf the custodian has been issued a notice, this value of this property is Published. 如果保管人尚未发出通知,则状态为 "未发布"。If the custodian has not been issued a notice, the status is Un-published.

    • Status - 案例内保管人的状态。Status - The status of the custodian within the case. " 活动" 状态表示保管人是案例的一部分。A status of Active indicates that the custodian is part of the case. 如果从案例释放保管人,则状态更改为"已释放"。If a custodian is released from a case, the status is changed to Released.

  • 数据源和索引信息Data sources and indexing information

    • 数据源 - 显示与保管人关联的 (邮箱、网站和 Teams) 数据源的计数和类型。Data sources - Shows the count and type of data sources (mailboxes, sites, and Teams) that are associated with the custodian and are part of the case.

    • 索引更新 时间 - 指示上次触发高级索引作业的时间和日期。Index updated time - Indicates the time and date for when the advanced indexing job was last triggered. 此属性还将指示当前正在进行高级索引编制过程。This property will also indicate when the advanced indexing process is currently in progress.

编辑保管人Edit a custodian

随着你的案例的进行,你可能会发现,可能有与特定保管人相关的其他数据源&您的案例。As your case progresses, you may discover that there may be additional data sources relevant to a specific custodian & your case. 在其他方案中,您可能需要删除已审阅并被视为不相关的某些数据源。In other scenarios, you may want to remove certain data sources that have been reviewed and deemed as not relevant.

更新与保管人关联的数据源:To update the data sources that are associated with a custodian:

  1. 转到 电子数据展示>电子数据展示并 打开案例。Go to eDiscovery > Advanced eDiscovery and open the case.

  2. 单击 "源" 选项卡。Click the Sources tab.

  3. 在"保管人"页上,从列表中选择保管人,然后单击飞出页上的"编辑"。On the Custodians page, select a custodian from the list and click Edit on the flyout page.

    编辑数据源

  4. 单击 "选择数据源" 选项卡以更改保管人 Exchange 邮箱和 OneDrive 帐户的设置,然后单击"选择数据源"。Click Choose data sources tab to change the settings for the custodian's Exchange mailbox and OneDrive account, click Choose data sources.

  5. 单击 "选择其他数据源" 选项卡,添加或删除与保管人关联的 Teams、SharePoint 或 Exchange 邮箱。Click the Select additional data sources tab to add or remove Teams, SharePoint, or Exchange mailboxes associated with the custodian.

    有关与保管人关联的数据源详细信息,请参阅"将保管人添加到案例"。For more information about data sources associated with a custodian, see Add custodians to a case.

  6. 单击 "下一级 保留"以启用或禁用保管人保留。Click Place custodial holds to enable or disable the hold for the custodian.

重新索引保管人数据Re-index custodian data

在大多数法律调查电子数据展示工作流中,在将保管人添加到法律案件之后,将搜索保管人数据的子集。In most eDiscovery workflows for legal investigations, a subset of a custodian's data is searched after the custodian is added to a legal case. 由于文件大小很大或数据可能损坏,与保管人关联的数据源中的某些项目可能会部分编制索引。Because of very large file sizes or possible data corruption, some items in the data sources associated with a custodian may be partially indexed. 使用 高级电子数据 展示中的高级索引功能,大多数部分索引项都可以按需重新编制索引来自动修正。Using the advanced indexing capability in the Advanced eDiscovery, most partially indexed items can be automatically remediated by re-indexing these items on demand.

向案例添加保管人时,由高级索引过程自动对位于与保管人关联的数据源 (数据重新编制) 。When a custodian is added to a case, the data located in the data sources associated with the custodian is automatically re-indexed (by the advanced indexing process). 这意味着您可以将数据留在就地,而不必下载并修正数据,然后脱机搜索) 。This means you can leave the data in-place instead of having to download and remediate it and then search it offline). 但是,在法律案件生命周期内,新数据源可能与保管人关联。However, during the lifecycle of a legal case new data sources might be associated with a custodian. 在这种情况下,可以通过重新运行高级索引过程来重新编制保管人数据的索引,以修正任何部分索引项并更新保管人数据的索引。In this case, you can re-index the custodian's data by re-running the advanced indexing process to remediate any partially indexed items and update the index for the custodian's data.

若要触发重新编制索引的过程以处理部分索引项,To trigger the re-indexing process to address partially indexed items:

  1. 转到 电子数据展示>高级电子数据展示并 打开案例。Go to eDiscovery > Advanced eDiscovery and open the case.

  2. 单击 "源" 选项卡。Click the Sources tab.

  3. 在" 保管人 "页上,选择其数据必须重新索引的保管人。On the Custodians page, select a custodian whose data must be reindexed.

  4. 在飞出页上,单击 "更新索引"。On the flyout page, click Update index.

    将显示一个对话框,指出已创建索引作业。A dialog is displayed saying the index job has been created.

重新编制保管人数据的索引是一个长期运行的过程;所创建的相应作业名为 "重新索引保管人数据"。Re-indexing custodian data is a long-running process; the corresponding job that's created is named Re-indexing custodian data. 您可以通过监视"索引作业状态"列中的状态来跟踪"作业"选项卡或"保管人 "选项卡上 的进度。You can track the progress on the Jobs tab or on the Custodians tab by monitoring the status in the Indexing job status column.

有关详细信息,请参阅:For more information, see:

从案例释放保管人Release a custodian from a case

在案例关闭、保管人不再承担保留案例内容的义务,或认为保管人不再与案例相关时,将释放保管人。A custodian is released in situations where a case is closed, the custodian is no longer under obligation to preserve content for a case, or when the custodian is deemed to no longer be relevant to the case.

如果在发布保留通知后释放保管人,则向保管人发送发行通知。If you release a custodian after a hold notice was published, a release notice will be sent to the custodian. 此外,将删除对与保管人关联的数据源的任何保留。Additionally, any holds placed on data sources that were associated with the custodian are removed. 如果保管人处于静默保留状态,其中未向他们发送任何法定保留通知,将不会发送释放通知,但会删除对与该保管人关联的数据源的任何保留。If the custodian was placed on a silent hold, where they weren't issued any legal hold notifications, a release notice will not be sent but any holds placed on data sources that were associated with that custodian are removed.

释放保管人:To release a custodian:

  1. 转到 电子数据展示>电子数据展示并 打开案例。Go to eDiscovery > Advanced eDiscovery and open the case.

  2. 单击 "源" 选项卡。Click the Sources tab.

  3. "保管人 "页上,然后选择从案例释放的保管人。On the Custodians page, and then select the custodian who is being released from the case.

  4. 在飞出页面上,单击 "发布保管人"。On the flyout page, click Release custodian.

    将显示一个警告页,说明如果对与保管人关联的数据源设置保留,将删除保留,并且与其他高级电子数据展示案例关联的任何其他保留仍将适用。A warning page is displayed explaining that if a hold is placed on a data source associated with the custodian, the hold will be removed, and that any other hold associated with a different Advanced eDiscovery case will still apply. 这包括其他类型的保留和保留功能 (如 Microsoft 365 保留策略) 。That includes other types of preservation and retention features (such as a Microsoft 365 retention policy).

  5. 单击 " 是"以确认要释放保管人。Click Yes to confirm that you want to release the custodian.

    "保管人"选项卡上此用户的状态设置为"已释放",并且飞出页上的"保留"状态更改为 False。 The status for this user on the Custodians tab is set to Released and the Hold status on the flyout page is changed to False.

备注

保管人可能同时涉及多个法律案件。A custodian might be simultaneously involved in several legal cases. 当保管人从案例释放时,其他事项的保留和通知不会受到影响。When a custodian is released from a case, the holds and notifications across other matters won't be impacted.

批量编辑保管人Bulk-edit custodians

您可以使用批量编辑器同时编辑多个保管人。You can use the bulk editor to edit multiple custodians as the same time. 为此,只需在"保管人"选项卡上选择两个或多个保管人即可显示批量编辑器,然后单击其中一个任务。To do this, just select two or more custodians on the Custodians tab to display the bulk editor and then click one of tasks.

用于编辑多个保管人设置的飞出页