Does Legal Hold monitor specific things to ensure that everything in a mailbox is tracked when it is enabled?

link|improve this question
5  
Care to expand on this question a bit further, or is this a homework question? – Hyppy May 17 '11 at 18:17
1  
I don't know what elements you're referring to. A legal hold just ensures that users can't delete items from a mailbox. – Holocryptic May 17 '11 at 18:34
feedback

closed as too localized by Shane Madden, Hyppy, MDMarra, Ben Pilbrow, Evan Anderson May 17 '11 at 19:02

This question is unlikely to ever help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. See the FAQ for guidance on how to improve it.

1 Answer

It's not so much which two elements it's tracking as overall tracking. A good write-up of what Legal Hold does can be found here. The Hold process leverages the Recoverable Items folder to maintain a log of activity in the mailbox. Certain user-actions trigger retention activities.

  • Deletes. When a user deletes a message (empties the trash) the messages are stored in the Recoverable Items folder directly.
  • Purges. When a user removes an item from Recoverable Items directly, a copy of the purged message is stored. For mailboxes not in legal-hold status this would normally fully delete the message.
  • Changes. When information in a message changes, such as subject lines, categories, flags, and other user-modifiable items, a copy of the pre-change message is archived. This provides a full change-log for eDiscovery later.

Legal-hold overrides the system defaults for retention in Recoverable Items.

link|improve this answer
I've edited the question. I don't think it affects your answer any, but you might want to once over it... – Holocryptic May 17 '11 at 18:42
feedback

Not the answer you're looking for? Browse other questions tagged or ask your own question.