Browse Definitions :
Definition

discovery mailbox

A discovery mailbox is a dedicated target mailbox administrators can use to conduct in-place e-discovery searches in Exchange Server 2010 and later versions, as well as the hosted email service Exchange Online.

Discovery is a legal process that ensures each party involved in a lawsuit can obtain relevant evidence from the other party. Discovery often includes access to depositions, interrogations and numerous different documents. Most businesses conduct a significant portion of their operations through email, often discussing sensitive details and attaching important documents -- such as contracts, diagrams and test results -- to email threads. This makes email systems and storage a critical source of evidence in a legal action.

In a civil suit, the plaintiff may use a discovery request to obtain copies of relevant email and documents. Because discovery must balance privacy against the right to access relevant evidence, a discovery request sets parameters on the search criteria. For an Exchange Server environment, the results of a discovery search are copied to the discovery mailbox; the contents may be packaged onto storage media such as a DVD and delivered to the party that requested discovery.

Although Exchange Server setup processes create a discovery mailbox by default, administrators can create additional discovery mailboxes as needed. Each new discovery mailbox can have a storage quota up to 50 GB and will require appropriate permissions to give access to authorized users. A discovery mailbox cannot be converted to a different mailbox type. Messages cannot be sent directly to a discovery mailbox.

While legal professionals, compliance officers and human resources managers will have some interaction with the discovery mailbox, the Exchange Server administrator creates, configures and secures the discovery mailbox. Administrators must use PowerShell -- or Remote PowerShell for Office 365 -- to manage a discovery mailbox and its permissions; the Exchange Admin Center cannot be used for discovery mailbox management.

In most cases, the Exchange Server administrator uses role-based access control to support creation and control of a Discovery Management Group, which allows designated users to invoke discovery tasks -- such as specifying search criteria and message types 00 without elevated administrative privileges. Discovery searches can also be logged to ensure discovery activities can be viewed for verification purposes.

This was last updated in December 2016

Continue Reading About discovery mailbox

Join the conversation

1 comment

Send me notifications when other members comment.

Please create a username to comment.

What has your experience been with setting up and using a discovery mailbox in Exchange?
Cancel

-ADS BY GOOGLE

File Extensions and File Formats

SearchCompliance

  • compliance audit

    A compliance audit is a comprehensive review of an organization's adherence to regulatory guidelines.

  • regulatory compliance

    Regulatory compliance is an organization's adherence to laws, regulations, guidelines and specifications relevant to its business...

  • Whistleblower Protection Act

    The Whistleblower Protection Act of 1989 is a law that protects federal government employees in the United States from ...

SearchSecurity

  • orphan account

    An orphan account, also referred to as an orphaned account, is a user account that can provide access to corporate systems, ...

  • voice squatting (skill squatting)

    Voice squatting is an attack vector for voice user interfaces (VUIs) that exploits homonyms (words that sound the same but are ...

  • WPA3

    WPA3, also known as Wi-Fi Protected Access 3, is the third version of the security certification program developed by the Wi-Fi ...

SearchHealthIT

SearchDisasterRecovery

  • business continuity policy

    Business continuity policy is the set of standards and guidelines an organization enforces to ensure resilience and proper risk ...

  • business continuity and disaster recovery (BCDR)

    Business continuity and disaster recovery (BCDR) are closely related practices that describe an organization's preparation for ...

  • warm site

    A warm site is a type of facility an organization uses to recover its technology infrastructure when its primary data center goes...

SearchStorage

  • cache memory

    Cache memory, also called CPU memory, is high-speed static random access memory (SRAM) that a computer microprocessor can access ...

  • disk array

    A disk array, also called a storage array, is a data storage system used for block-based storage, file-based storage or object ...

  • enterprise storage

    Enterprise storage is a centralized repository for business information that provides common data management, protection and data...

Close