{"id":2684,"date":"2018-11-02T22:51:26","date_gmt":"2018-11-02T22:51:26","guid":{"rendered":"http:\/\/microsoftgeek.com\/?p=2684"},"modified":"2018-11-02T23:11:44","modified_gmt":"2018-11-02T23:11:44","slug":"understanding-in-place-hold-and-litigation-hold-in-exchange","status":"publish","type":"post","link":"https:\/\/microsoftgeek.com\/?p=2684","title":{"rendered":"Understanding In-Place Hold and Litigation Hold in Exchange"},"content":{"rendered":"

Litigation Hold was first introduced in Exchange 2010 and is designed to preserve all items in a mailbox indefinitely for the purposes of e-discovery. Litigation Hold can be applied to mailboxes or distribution groups. When a user\u2019s mailbox is put on Litigation Hold, they are still able to delete items, but Exchange retains the deleted items indefinitely with immutability. For example, if the user changes an item, it will remain preserved in its original form.<\/p>\n

While initially designed for e-discovery purposes in legal cases, Litigation Hold can also be used for archiving in other scenarios. The ability to define a hold period was added to Exchange Online in the form of the\u00a0LitigationHoldDuration<\/em>parameter, which allows you to set a retention period. This ability was later added to Exchange 2013.<\/p>\n

To put all mailboxes on Litigation Hold for seven years (2555 days), use the PowerShell code below.<\/p>\n

\n
\n
\n
<\/div>\n
<\/div>\n

PowerShell<\/span><\/p>\n<\/div>\n<\/div>\n

\u00a0<\/span><\/div>\n
\n\n\n\n
\n
\n
1<\/span><\/div>\n<\/div>\n<\/td>\n
\n
\n
Get-Mailbox<\/span> -ResultSize<\/span> Unlimited<\/span> -Filter<\/span> {<\/span>RecipientTypeDetails<\/span> -eq<\/span> “UserMailbox”<\/span>}<\/span> |<\/span> Set<\/span>-Mailbox<\/span> -LitigationHoldEnabled<\/span> $true<\/span> -LitigationHoldDuration<\/span> 2555<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

Litigation Hold and In-Place Hold objects can also be created using the Exchange Admin Center (EAC).<\/p>\n

In-Place Hold<\/h2>\n

In-Place Hold was introduced in Exchange 2013 and is also available in Exchange Online. Although similar, In-Place Hold doesn\u2019t replace Litigation Hold and both are valid solutions in different scenarios. There are two ways that In-Place Hold can be applied.<\/p>\n

Query-based In-Place Hold<\/em>\u00a0does exactly what it says on the tin and allows administrators to preserve items based on queries. Naturally the key advantage of this is cost, enabling organizations with on-premise Exchange to preserve specific items rather than entire mailboxes.<\/p>\n

The PowerShell code below creates a new In-Place Hold object (InPlaceHold-Finance<\/em>) and applies it to mailboxes in the\u00a0DG-Finance<\/em>\u00a0distribution group. Items are preserved for seven years and a filter is applied using Boolean logic and a proximity operator (NEAR) to search for items that contain the word\u00a0Toy, Toymaker<\/em>, or anything similar, within three words of\u00a0Acme<\/em>, and that have\u00a0Confidential<\/em>\u00a0or\u00a0Privileged<\/em>\u00a0included.<\/p>\n

\n
\n
\n
<\/div>\n
<\/div>\n
<\/div>\n
<\/div>\n

PowerShell<\/span><\/p>\n<\/div>\n<\/div>\n

\u00a0<\/span><\/div>\n
\n\n\n\n
\n
\n
1<\/span><\/div>\n<\/div>\n<\/td>\n
\n
\n
New-MailboxSearch<\/span> \u2018InPlaceHold-Finance<\/span>\u2019 -SourceMailboxes<\/span> DG-Finance<\/span> -InPlaceHoldEnabled<\/span> $true<\/span> -ItemHoldPeriod<\/span> 2555 -SearchQuery<\/span> \u201c(<\/span>Acme <\/span>NEAR<\/span>(<\/span>3)<\/span> Toy<\/span>*<\/span>)<\/span> AND<\/span> (<\/span>Confidential <\/span>OR <\/span>Privileged<\/span>)<\/span>\u201d<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

Time-based In-Place Hold<\/em>\u00a0objects replicate the functionality of Litigation Hold and allow items to either be preserved indefinitely or for a specific period. Omitting the\u00a0-ItemHoldPeriod<\/em>\u00a0parameter sets items to be preserved indefinitely. It\u2019s also possible to add the\u00a0-StartDate<\/em>\u00a0and\u00a0-EndDate<\/em>\u00a0parameters to the\u00a0New-MailboxSearch<\/em>\u00a0cmdlet.<\/p>\n

Exchange 2016<\/h2>\n

In-Place Hold supports Public Folders for the first time in Exchange 2016. Additionally,\u00a0In-Place eDiscovery<\/em>, which gives users the ability to perform searches across all items including those placed on hold, can now run queries against all mailboxes simultaneously.<\/p>\n","protected":false},"excerpt":{"rendered":"

Litigation Hold was first introduced in Exchange 2010 and is designed to preserve all items in a mailbox indefinitely for the purposes of e-discovery. Litigation Hold can be applied to mailboxes or distribution groups. When a user\u2019s mailbox is put on Litigation Hold, they are still able to delete items, but Exchange retains the deleted […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18,21,22,58,62,73],"tags":[],"class_list":["post-2684","post","type-post","status-publish","format-standard","hentry","category-ms-exchange","category-exchange-2007","category-exchange-2010","category-exchange-2013","category-microsoft-exchange-server-2016","category-exchange-server-2019"],"_links":{"self":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/2684","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2684"}],"version-history":[{"count":2,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/2684\/revisions"}],"predecessor-version":[{"id":2691,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/2684\/revisions\/2691"}],"wp:attachment":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2684"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2684"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2684"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}