Home / server / Questions / 275597
Accepted
Windows Ninja
Asked: 2011-06-01 09:32:59 +0800 CST

Exchange 2010 - Need to gather emails for a court subpoena

  • 772

We've been subpoenaed to send all emails exchanged with a couple different individuals for a court case.

How would I go about doing this in an Exchange 2010 environment?

exchange-2010

3 Answers

  1. Best Answer

    I would take a look at: Understanding Multi-Mailbox Search

    • 7

  2. You're wanting to perform a Discovery Search, also known as a Multi-Mailbox search. I'm going to assume use of the web-based ECP interface, but similar functionality is available from the shell.

    First, the user account that needs to perform this needs to be in the Discovery Management role group. This group is by default empty, meaning even Exchange Administrators have no access to perform Discovery Searches when Exchange 2010 is installed. These roles can be modified in the Roles and Auditing portion of ECP. After you add a user to this group, you'll need to log out then log back in for it to take effect.

    After you are in the appropriate group, a new option will appear in ECP within the Mail Control section called Discovery. The interface to perform this task is quite intuitive, save one part; you will need to specify a mailbox to copy the search results into. This is called a Discovery Mailbox, which is simply a locked-down mailbox with high quotas that is by default only accessible by members of the Discovery Management group.

    • 6

  3. I would add this: You should check with the legal department. They may want you to export entire PST files, and basically inundate the recipient. I have been involved where this has been the case. They did not want to make it easy for the other side by handing them only the e-mails they wanted.

    • 1