[OFFICE 365] - E-mail search and retrival

[Marshall_IT]

Hi all,

 

My school has received an FOI requesting all e-mails about a certain individual.

I'm just looking for the best way to do this.

 

Please let me know if any of you have a good way to do this.

 

Thanks.

[Marshall_IT]

Never mind,

 

I've found the info myself.

 

I used the command;

 

Get-Mailbox -resultsize unlimited | Search-Mailbox -SearchQuery 'something OR other' -TargetMailbox "Destination Mailbox" -TargetFolder "Folder" -LogLevel Full

 

this should copy all matching emails to the folder in a mailbox.

[themightymrp]

Was keeping an eye on this thread, have you tested that script?

 

Does it create a copy of the sent/received email in a subfolder of the target Mailbox? So if I created a folder under my Inbox called "email report" or similar, all matching emails end up in there? In a readable format?

[Marshall_IT]

I'm running it now, it should work on the manner you describe.

 

Well post an update for you.

[SYNACK]

That sounds a tad dodgey, is there a need to release such information? At what point do we just post our mailbox DBs online?

[Marshall_IT]

That command worked, it created a folder (above inbox) called Search, and under that created a folder for each mailbox that contained a reference to that string. THen under that it had inbox, deleted items, recoverable items etc. with all the emails in the folders.

 

Not the easiest way to see them all but it works.

 

[pete]

That sounds a tad dodgey, is there a need to release such information? At what point do we just post our mailbox DBs online?

 

If you hold information about a person, that person (or their agent) can request that you provide them with a copy of said information.

 

Typically it's a Subject Access Request.

[fiza]

Interesting thread.

How would you do the same thing with Gmail if your school uses Google Apps for Education instead of Office365?

[themightymrp]

This is VERY useful to know! Might give it a test myself actually

[Edu-IT]

That command worked, it created a folder (above inbox) called Search, and under that created a folder for each mailbox that contained a reference to that string. THen under that it had inbox, deleted items, recoverable items etc. with all the emails in the folders.

 

Not the easiest way to see them all but it works.

 

[ATTACH=CONFIG]22782[/ATTACH]

Has that copied it to your mailbox?

[Marshall_IT]

To a folder within my admin mailbox.

 

But you can create a discovery mailbox.

 

You get to choose which mailbox they are copied to.

Edited February 10, 2014 by Marshall_IT

[Marshall_IT]

Just one more thing, you can create a discovery mailbox for this sort of issue with the following command if you don't want to use your own mailbox.

 

New-Mailbox -Name SearchMail -Discovery

 

and use the command

 

Get-Mailbox -resultsize unlimited | Search-Mailbox -SearchQuery 'something OR other' -TargetMailbox "SearchMail" -TargetFolder "Folder" -LogLevel Full

 

to copy all the items across.

 

You can also use the exchange management console to create your search and then copy the items from there or download them as a pst.

 

you goto Admin > Exchange > Compliance managent > in-place eDiscovery & Hold

 

Then create a new search

 

You then have options to copy or download from there.

[elsiegee40]

Hi all,

 

My school has received an FOI requesting all e-mails about a certain individual.

I'm just looking for the best way to do this.

 

Please let me know if any of you have a good way to do this.

 

Thanks.

Whoa there @Marshall_IT!

 

FoI is for many things, but not for requesting information about an individual! It is about ensuring that public money is being spent properly and that public services are being run correctly.

 

Are you sure you are complying with Data Protection Law?!!!!

 

EDIT

 

You also only have to comply if you are at a maintained (state) school... including academies and free schools. Independent schools are not spending public money and therefore not subject to FoI.

Edited February 10, 2014 by elsiegee40

[Marshall_IT]

We are not an independent school unfortunately and the request is for information about themselves which i was under the impression, as so was the legal team at our LEA, that we had to provide this.

 

Possible i am mistaken which would be good news.

[pete]

It doesn't fall under FOI, it falls under general data protection law. Look up "Subject Access Request" on ico.gov.uk.

 

Subject Access Requests: How to Respond - ICO