Compliance Management

compliance features

• allows a search of mailboxes through the organization preview of search results and then copy of results to a Discovery mailbox

• In-Place Hold forces a hold on data discovered during in-place eDiscovery

• Legal-Hold or Litigation Hold places entire mailbox on hold.  To be deprecated but still available on Exch 2013.  It lacks flexibility and granularity compare to In-Place hold.

Auditing

• keeps an audit of all actions taken on all mailboxes

• auditing is done based on access by owners, delegates and administrators

• you can run various reports on mailboxes, roles/permissions granted, etc (exp. administrator role group report)

Transport Rules

Allows you to create conditions, actions and exceptions over mail that is flowing through your organization.  keep a copy of emails, disclosure signature, prevent flow of email based on criteria, etc.


Data Loss Prevention (DLP)

• A form of transport rule that prevents users or alerts users from sending sensative information like credit card numbers.  

• based on regulatory standards (PII amd PCI-DSS)

Messaging Records Management (MRM)

• revolve around email lifecycle policies.  
• retention policies are used to classify messages

Journaling

• provides the ability to retain copies of all imcoming and outgoing mail through standard journaling

• Provides more granular journaling through Premium Journaling.  Can specify what to journal instead all emails.

Information Rights Management (IRM)

• works in harmony with Active Directory Rights Management Services (Ad RMS) to protect messages and attachments.  Prevent msg from forwarding, printing, etc.  a deterrent instead of all full protection.  can be worked around the protection.  

In-Place Archiving

• Eliminate the proliferation of PST files

Compliance Features

Transport Rules

In-Place Archiving

In-Place ediscovery search

Specifiy a single mailbox or all mailboxes

query for keywoards

Place hold on search results

 search can be saved and edited.

 Preview the search results

results of the search

Reports

Changes to admin role groups report.

actions by who is logged.

Allow user to manage content.  

User mailbox can have only one retnetion policy.

policy has retention tags users can use.

Retention tags are modifiable.

New tags configuration

Journal Rule

source of emial to be journaled.

and mailbox to send the journal reports to,.

Journal internal, external or all messages.

Scenario

enable default retention policy and in-place archive over Tim Berry

Establish a standard journaling rule for all email going in and out of the organization

place Wendy Lindsay's mailbox on Litigation Hold

 set new retention policy

enable in-place archiving.

assign database to store the archive

In-place archiving and retention policy do not take effect immediately.

force folder assistant to process the archiving and retention policy

Online Archiving.;  Manually moved or retention tags used.

1 week delete retention polcy set for this email

email archive policy for 5 years

Journling rule

create a journaling mailbox for all incoming/outgoing emails to be retained.

it may need its own mailbox database to store many emails

create a new jourmal rule to use the journal mailbox

Legal Hold

inform user that legal hold.  user may delete emials but emails are still kept.  

it is deprecated feature so use In-Place hold.

In-Place hold 

In-Place hold is configured through compliance management eDiscovery search 

The search resullt for user mailbox is placed on in-place hold.

Exchange Permissions

Built in admin roles

the admin role concept

• 67 different admin roles and these vary in recipient and configuration scope

• roles are added to Role Groups

• 12 different built-in Admin role groups to choose from

Primary role group is Organization Management (Mailbox search role disabled by default)

Role groups are assigned roles and members are shown.

Organization Management role groups contains all roles except mailbox search and Administrators are a member

Additional roles and members can be added

Discovery Management has the Mailbox Search role assigned.














Although there are 67 default admin roles you can create additional ones or tweak the ones that exist

These roles are based on underlying PowerShell cmdlets and commands that are assigned

Use Exchange Management Shell to view information and alter information about roles

• Get-ManagementRole -Cmdlet New-Mailbox - shows management roles that has the ability to use new-mailbox cmdlet

• Get-ManagementRoleEntry "Public Folders\*" - shows what cmdlets and parameters makeup the public folder role

Get-ManagementRole -Cmdlet New-Mailbox

Get-ManagementRoleEntry "Public Folders\*"







User Roles" Role Assignment Policy

You can configure polices that grants end users permissions to set their Outlook Web App options and perform other self-administration tasks such as:

• modifying contact information
• view and modify distribution group membership
• view and modify marketplace apps

 Default Role Assignment Policy

To apply the default role assignment policy, it is done in user mailbox , mailbox features settings.














Scenario

add use to discovery management role group


create a new role group that includes the roles

• mail recipient creation
• mail recipients
• recipients policies
• public folders

create a new role assignement polcy called Full Control that allows end-users complete self-administration control and apply to end users

Apply new Full Control policy to user mailbox.