Of course, the easiest-to-implement answer for that, aside from eliminating e-mail altogether, is to never purge anything.
Ed Crowley MCSE+Internet MVP Time Magazine's Person of the Year! -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Tuip [MVP] Sent: Thursday, January 18, 2007 12:00 PM To: Exchange Discussions Subject: Re: Best value for money exchange archiving Legal hold is basically a simple 'exclude this from your deletion process' query which is a function that should be properly protected. Have it audited what the policy exactly was (to make the lawyers happy) and such. There are a few things that you can do before ending up in a snakepit: 1. Make the archive the only place where you store everything (i.e. don't end up with a little bit on tape here and there .. we've seen what happened with Morgan Stanley who ended up paying 1.4 Billion USD). If you backfill the archive with what you had historically on tape in your message stores you don't have to go back to these when someone knocks on your door. Make sure that that process was audited and written up. 2. This also means that you will have to wipe out PSTs that are in your environment. PST migrations will take you a long time and aren't always that easy what some vendors try to tell you. I've seen cases where it took nearly a year or so to finally get to it. Be realistic but keep the goal in mind. You will have to go through the PSTs in case you need to find information for a courtcase (remember .. there might be information in it that could save you too .. it isn't always something that will bring you down). 3. If you have everything in the archive .. then you have a proven record of what was purged (changes to policies are for instance audited etc). It becomes even more fun when you need to start dealing with chain of custody. Who has seen that information. Now .. in Exchange you might say .. hey .. it was in user X mailbox and user Y didn't get it so he didn't know about it. A proper archive should tell you what, when and by who a particular item was seen .. so again .. auditing comes in to play there as well. And more on your SEC rulings ... do you need to preserve everything or can you weed out SPAM or 'non-business' records ? Again something you need to think about. Martin (PS .. I highly recommend reading some of those SEC and NASD rulings .. great fun) ----- Original Message ----- From: "Schwartz, Jim" <[EMAIL PROTECTED]> To: "Exchange Discussions" <[email protected]> Sent: Thursday, January 18, 2007 10:57 AM Subject: RE: Best value for money exchange archiving Fine questions. That's why "archiving solutions" aren't the answer. If I just want to pull the email off of the Exchange stores then it's fine. I need to have record series and a retention policy for that series. [1] I need the software to be able to handle those retention policies and enforce them. (auditable of course). A litigation (record hold) is just another record series with a retention schedule of "until further notice". The software MUST be able to gather the required records (everything in this case) and place a retention of "until further notice". When the hold ends they fall back into the normal record series. If the record should have been destroyed then it is destroyed as part of the normal policy. If it still needs to be retain, then it's retained. I need to be able to show the courts that a record that they are asking for does not exist since it was destroyed as per policy and procedure and it was done BEFORE the preservation order or threat of that order is produced. If I still have the item then I MUST be able to preserve and produce it. Oh and it doesn't even need to be in different countries. Different states have different rules. Think of the scenario of where the customer resides in one state, has a business in another and has their account in a third. Which states rules applies here? [1] Note that all email is not a record. [2] Email may contain information or content that can make it a legally required to retain record. [2] Exceptions would be those that are required to keep ALL email due to regulations (SEC) or those emails generated during an ongoing record preservation order. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Tuip [MVP] Sent: Thursday, January 18, 2007 2:40 AM To: Exchange Discussions Subject: Re: Best value for money exchange archiving Thats where proper auditing and retention comes into play and also where it becomes 'interesting'. Privacy laws are different in each country and especially business that deal with their offices in remote countries have to make sure that your archiving policies aren't in violation with standard protection or privacy laws. The German and French laws are for instance very strict in that matter and there are a few more interesting ones out there. On the other hand .. how sure are you that you didn't delete something that you were forced to keep? How are you handling litigations where a judge might enforce a legal hold on either a small set or all of your data ? Martin ----- Original Message ----- From: "Schwartz, Jim" <[EMAIL PROTECTED]> To: "Exchange Discussions" <[email protected]> Sent: Wednesday, January 17, 2007 9:17 AM Subject: RE: Best value for money exchange archiving "Once an email is in, you can't remove it." Somewhere a few lawyers have started salivating. A few more just keeled over in fright. Retaining email for the sake of retaining it is asking for issues. Retaining emails that are required by law or contain business records is a good thing. In order for it to be a record, it must not be able to be changed by the user and it should have a age limit for destruction. The age limit can be until the stars burn out, but at least you can show the attorney's that you purge certain information as part of your normal business process. I personally think that where many of the "archival" products fall down is in managing the records. You can archive and keep emails, that's great. How do I make sure that when I don't need to keep it, that it goes away? [1] [1] I can't be 100% sure, but I should be reasonably sure. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stephen Reboulet Sent: Wednesday, January 17, 2007 10:15 AM To: Exchange Discussions Subject: RE: Best value for money exchange archiving In our test setup: *We started archiving all emails using Journaling to a special mailbox that GFI MA 'read' and pulled into archive. *Using the GFI MA EEWiz utility, we had it go into the mailboxes and grab copies of all emails up to the date we started the Journalling archiving. We were able to tell it that any emails prior to 2006, should go into a separate database. We did not have to archive all the users' accounts to a PST file, so that was a nice touch. *We then set a cap on the test group, and setup their accounts to auto-purge anything over 3 months old. For our purposes the program worked quite well: *It allows the users to search their own archived mail, forward or restore as needed; *It allows group leaders to view and search the emails of their groups. Useful for times when a client has sent an important email and someone on the team is out. No more running to us asking us to search all the email accounts singularly looking for said email *It allows IT to search all email accounts for an old email sent to 'someone in the company'. *It keeps the emails of past employees, helpful for the time when someone say's 'oh John Smith told me..' and we check his email account that we backed up on the day he left and find it's empty... It's not perfect however. Once an email is in, you can't remove it. That means spam, emails that someone regrets sending, all those emails with MP3's, are all archived. It won't reduce your store size itself, it's up to you to purge and then compress the store. Users have to use a web interface access their archived mail. For our needs, and it's price range, it was a good solution. Your mileage may vary. At 06:12 AM 1/17/2007, Simon Butler wrote: >You do know that you are comparing apples to oranges with GFI Mail >Archiver and Enterprise Vault? > >I personally do not feel that you can compare them, because they do two >different jobs. > >GFI Mail Archiver is a journaling application. >It uses the journal feature of Exchange to take a copy of every message >as it passes through the Exchange server. >It will do nothing to reduce the size of the store, as it does not >remove items from the database. If you want to reduce the size of the >store with that product, then you have to extract the content from the >mailbox using exmerge then import the PST file. >On an ongoing basis users need to actually delete email from their >mailbox themselves, GFI cannot do that for you. >I use GFI MA for sites that need to keep a copy of messages for >compliance reasons. > >Enterprise Vault on the other hand, while it can do the above, it is >also able to extract content from the Store and leave a stub behind so >that the user can get access to the item without actually having to >move to a different interface to get hold of it. It is a much more >complex application than GFI MA. GFI MA is basically an SQL database >with a fancy front end and an POP3 or IMAP client (cannot remember >which one it uses right now) to populate the database. > >The difference in complexity is demonstrated by the difference in the >cost of the application and the install time required. > >Simon. > > >-- >Simon Butler >MVP: Exchange, >MCP, MCSA, MCSE, >Amset IT Solutions Ltd. > >e: [EMAIL PROTECTED] >w: www.amset-it.com >w: www.amset.info > > > >-----Original Message----- >From: >[EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of >Neil Doody >Sent: 17 January 2007 09:21 >To: Exchange Discussions >Subject: RE: Best value for money exchange archiving > >I'm not just looking for pricing, though it has to be included in my >report, my report is around 95% technical analysis the pricing comes at >the end I just don't want to get sales people hounding me. > >-----Original Message----- >From: >[EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] >On Behalf Of Chris Scharff >Sent: 16 January 2007 16:30 >To: Exchange Discussions >Subject: RE: Best value for money exchange archiving > >Don't like to deal with sales? Create an RFP and send it to them with a >deadline. >End. > >If you don't have enough in terms of >requirements or needs assessment to create an RFP then you're doing >yourself and your company a disservice by skipping the sales weasels >and just looking for pricing. Pricing alone is a poor way to select a >product/vendor/service. > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:bounce- > > [EMAIL PROTECTED] On Behalf Of Neil Doody > > Posted > > At: Tuesday, January 16, 2007 9:41 AM Posted To: swynk > > Conversation: Best value for money exchange archiving > > Subject: RE: Best value for money exchange archiving > > > > > > Is it possible for people to give me some indicitive prices for the > > different solutions they went with? So far I've found that quest > > archiver manager to be around £30 per mailbox, GFI Mail Archiver is > > clearly stated as $1950 for 100 mailboxes. I have seen a site that > > lists enterprise vault at aroudn $5000 for 500 mailboxes though > > there are suggestions of acquiring different modules what would I > > require bassline and how much is it? > > > > Can anyone tell me prices for mimosa? > > > > I appreciate that this information is what you would normally > > contact the vendors with but trying to get through the thick mud > > they call sales persons is really quite hard to get some form of > > bassline costs. > > >_________________________________________________________________ >List posting FAQ: http://www.swinc.com/resource/exch_faq.htm >Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange >To subscribe: http://e-newsletters.internet.com/discussionlists.html/ >To unsubscribe send a blank email to >[EMAIL PROTECTED] >Exchange List admin: [EMAIL PROTECTED] >To unsubscribe via postal mail, please contact us at: >Jupitermedia Corp. >Attn: Discussion List Management >475 Park Avenue South >New York, NY 10016 > >Please include the email address which you have been contacted with. > > > >Remploy - 60 years of finding jobs for disabled people >http://www.remploy.co.uk http://www.realjobs4realpeople.co.uk >***************************************************************** >IMPORTANT NOTICE: This e-mail is confidential, may be legally >privileged, and is for the intended recipient only. Access, disclosure, >copying, distribution or reliance on any of it by anyone else is >prohibited and may be a criminal offence. Please delete if obtained in >error and e-mail confirmation to the sender. > >Remploy has taken reasonable precautions to ensure that any attachment >to this email has been scanned for viruses. However, we cannot accept >liability for any damage sustained as a result of software viruses and >recommend that you carry out your own virus checks before opening any >attachments attached to this email. > >No one other than a properly authorised person made known to you in >writing can create a binding obligation on behalf of Remploy by virtue >of this email or any other means. >*************************************************************** > > >_________________________________________________________________ >List posting FAQ: http://www.swinc.com/resource/exch_faq.htm >Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange >To subscribe: http://e-newsletters.internet.com/discussionlists.html/ >To unsubscribe send a blank email to >[EMAIL PROTECTED] >Exchange List admin: [EMAIL PROTECTED] >To unsubscribe via postal mail, please contact us at: >Jupitermedia Corp. >Attn: Discussion List Management >475 Park Avenue South >New York, NY 10016 > >Please include the email address which you have been contacted with. > > >_________________________________________________________________ >List posting FAQ: http://www.swinc.com/resource/exch_faq.htm >Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange >To subscribe: http://e-newsletters.internet.com/discussionlists.html/ >To unsubscribe send a blank email to >[EMAIL PROTECTED] >Exchange List admin: [EMAIL PROTECTED] >To unsubscribe via postal mail, please contact us at: >Jupitermedia Corp. >Attn: Discussion List Management >475 Park Avenue South >New York, NY 10016 > >Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
