Place a mailbox on Litigation Hold in Exchange 2013

Applies to: Exchange Server 2013

Place a mailbox on Litigation Hold to preserve all mailbox content, including deleted items and original versions of modified items. When you place a user' mailbox on Litigation Hold, content in the user's archive mailbox (if it's enabled) is also placed on hold. Deleted and modified items are preserved for a specified period, or until you remove the mailbox from Litigation Hold. All such mailbox items are returned in an In-Place eDiscovery search.

What do you need to know before you begin?

• Estimated time to complete: 5 minutes

• The Litigation Hold setting may take up to 60 minutes to take effect.

• You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "In-Place Hold" entry in the Messaging policy and compliance permissions topic.

• As previously explained, when you place a Litigation Hold on a user's mailbox, content in the user's archive mailbox is also placed on hold. If you place a Litigation Hold on an on-premises primary mailbox in an Exchange hybrid deployment, the cloud-based archive mailbox (if enabled) is also placed on hold.

• Litigation Hold preserves deleted items and also preserves original versions of modified items until the hold is removed. You can optionally specify a hold duration, which preserves a mailbox item for the specified duration period. If you specify a hold duration period, it's calculated from the date a message is received or a mailbox item is created. To preserve items that meet your specified criteria, use an In-Place Hold to create a query-based hold. For details, see Create or remove an In-Place Hold.

• Placing a Litigation Hold on a public folder mailbox isn't supported. You have to use In-Place Hold to place a hold on public folders.

Use the EAC to place a mailbox on Litigation Hold

1. Go to Recipients > Mailboxes.

2. In the list of user mailboxes, click the mailbox that you want to place on Litigation Hold, and then click Edit .

3. On the mailbox properties page, click Mailbox features.

4. Under Litigation hold: Disabled, click Enable to place the mailbox on Litigation Hold.

5. On the Litigation Hold page, enter the following optional information:

   • Litigation hold duration (days): Use this box to specify how long mailbox items are held when the mailbox is placed on Litigation Hold. The duration is calculated from the date a mailbox item is received or created. If you leave this box blank, items are held indefinitely or until the hold is removed. Use days to specify the duration.

   • Note: Use this box to inform the user their mailbox is on Litigation Hold. The note will appear in the user's mailbox if they're using Outlook 2010 or later.

   • URL: Use this box to direct the user to a website for more information about Litigation Hold. This URL appears in the user's mailbox if they are using Outlook 2010 or later.

6. Click Save on the Litigation Hold page, and then click Save on the mailbox properties page.

Use the Shell to place a mailbox on Litigation Hold indefinitely

This example places the mailbox [email protected] on Litigation Hold. Items in the mailbox are held indefinitely or until the hold is removed.

Set-Mailbox [email protected] -LitigationHoldEnabled $true

Use the Shell to place a mailbox on Litigation Hold and preserve items for a specified duration

This example places the mailbox [email protected] on Litigation Hold and preserves items for 2555 days (approximately 7 years).

Set-Mailbox [email protected] -LitigationHoldEnabled $true -LitigationHoldDuration 2555

Use the Shell to place all mailboxes on Litigation Hold for a specified duration

Your organization may require that all mailbox data be preserved for a specific period of time. Before you place all mailboxes in an organization on Litigation Hold, consider the following:

This example places all user mailboxes in the organization on Litigation Hold for one year (365 days).

Get-Mailbox -ResultSize Unlimited -Filter "RecipientTypeDetails -eq 'UserMailbox'" | Set-Mailbox -LitigationHoldEnabled $true -LitigationHoldDuration 365

The example uses the Get-Mailbox cmdlet to retrieve all mailboxes in the organization, specifies a recipient filter to include all user mailboxes, and then pipes the list of mailboxes to the Set-Mailbox cmdlet to enable the Litigation Hold and hold duration.

To place all user mailboxes on an indefinite hold, run the previous command but don't include the LitigationHoldDuration parameter.

See the More information section for examples of using other recipient properties in a filter to include or exclude one or more mailboxes.

Use the Shell to remove a mailbox from Litigation Hold

This example removes the mailbox [email protected] from Litigation Hold.

Set-Mailbox [email protected] -LitigationHoldEnabled $false

How do you know this worked?

To verify that you have successfully placed a mailbox on Litigation Hold, do the one of the following:

• In the EAC:

  1. Go to Recipients > Mailboxes.

  2. In the list of user mailboxes, click the mailbox that you want to verify Litigation Hold settings for, and then click Edit .

  3. On the mailbox properties page, click Mailbox features.

  4. Under Litigation hold, verify that hold is enabled.

  5. Click View details to verify when the mailbox was placed on Litigation Hold and by whom. You can also verify or change the values in the optional Litigation hold duration (days), Note, and URL boxes.

• In the Shell, run one of the following commands:

  Get-Mailbox <name of mailbox> | Format-List LitigationHold*
  

  or

  Get-Mailbox -ResultSize Unlimited -Filter "RecipientTypeDetails -eq 'UserMailbox'" | Format-List Name,LitigationHold*
  

  If a mailbox is placed on Litigation Hold indefinitely, the value for the LitigationHoldDuration property mailbox is set to Unlimited.

More information

• If your organization requires that all mailbox data has to preserved for a specific period of time, consider the following before you place all mailboxes in an organization on Litigation Hold.

  • When you use the previous command to place a hold on all mailboxes in an organization (or a subset of mailboxes matching a specified recipient filter) only mailboxes that exist at the time that you run the command are placed on hold. If you create new mailboxes later, you have to run the command again to place the new mailboxes on hold. If you create new mailboxes often, you can run the command as a scheduled task as frequently as required.

  • Placing all mailboxes on Litigation Hold can significantly impact mailbox sizes. In an Exchange Server 2013 organization, plan for adequate storage to meet your organization's preservation requirements.

  • The Recoverable Items folder has its own storage limit, so items in the folder don't count towards the mailbox storage limit. As previously explained, preserving mailbox data for a long period of time will result in growth of the Recoverable Items folder in a user's mailbox and archive.

    In Exchange Server 2013, the default storage limit for the Recoverable Items folder is also 30 GB. We recommend that you periodically monitor the size of this folder to ensure it doesn't reach the limit. For more information, see Recoverable Items folder.

• The previous command to place a hold on all mailboxes uses a recipient filter that returns all user mailboxes. You can use other recipient properties to return a list of specific mailboxes that you can then pipe to the Set-Mailbox cmdlet to place a Litigation Hold on those mailboxes.

  Here are some examples of using the Get-Mailbox and Get-Recipient cmdlets to return a subset of mailboxes based on common user or mailbox properties. These examples assume that relevant mailbox properties (such as CustomAttributeN or Department) have been populated.

  Get-Mailbox -RecipientTypeDetails UserMailbox -ResultSize unlimited -Filter 'CustomAttribute15 -eq "OneYearLitigationHold"'
  

  Get-Recipient -RecipientTypeDetails UserMailbox -ResultSize unlimited -Filter 'Department -eq "HR"'
  

  Get-Recipient -RecipientTypeDetails UserMailbox -ResultSize unlimited -Filter 'PostalCode -eq "98052"'
  

  Get-Recipient -RecipientTypeDetails UserMailbox -ResultSize unlimited -Filter 'StateOrProvince -eq "WA"'
  

  Get-Mailbox -ResultSize Unlimited -Filter "RecipientTypeDetails -ne 'DiscoveryMailbox'"
  

  You can use other user mailbox properties in a filter to include or exclude mailboxes. For details, see Filterable Properties for the -Filter Parameter.