Performing eDiscovery searches
Exchange 2016 provides the ability to search through mailboxes for content that might be required during an investigation, such as a violation of organizational policy or regulatory compliance, or due to a lawsuit. Although this can be done through the Exchange Admin Center, you may need to do this from the command line. In this recipe, you'll learn how to perform discovery searches from the Exchange Management Shell.
How to do it...
To perform an eDiscovery search, we also use the New-MailboxSearch
cmdlet. This cmdlet can be used to create a mailbox search and either get an estimate of search results, place search results on in-place hold, or copy them to a Discovery
mailbox.
After you have been assigned permissions, you can use the New-MailboxSearch
cmdlet to create a new search:
New-MailboxSearch -Name Case1 '-TargetMailbox "Discovery Search Mailbox" '-SearchQuery 'Subject:"Corporate Secrets"' '-StartDate "1/1/2016" '-EndDate "12/31/2016" '-MessageTypes Email...