Exchange 2013 In-Place Hold - Best way to 'archive' ex-staff Mailboxes

Hi EE,

We've only recently upgraded from Exchange 2007 and have applied In-Place Hold to all mail in all mailboxes, indefinitely.

Traditionally, we have archived mailboxes to PST when staff leave the company. The PST gets stored on a file server and the user account and mailbox are deleted.

This gets a little confusing when In-Place Hold is applied - I can't find any documentation online that outlines if the 'Held' emails will be retrievable if we do a full mailbox export to PST (I've been using New-MailboxExportRequest).

From what I've read the In-Place Hold 'Held' mail will be cleared if I remove the Hold to then allow me to delete the mailbox.

Any suggestions on how to confirm the behavior and work around this? I've been thinking I might have to do two exports, one using the In-Place Hold PST Export feature and 1 Full Mailbox export for each user.

Thanks in advance,

Adam
LVL 2
aroddickAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

FarWestCommented:
just to share with you some experience point
1- I don't recommend deleting users on AD, for some reasons like
  - it can happened that you will have new employee who will have same user name as old one, so who is who and receiving emails belongs to the old employee can happened
- When checking security you will find SIDxxxx instead of clear username (like NTFS security)
- Any security mechanism  that depends on username (not SID) like web sites and others is subject that new user will have escalated privileges inherited from old employee  user name

2- for the above reasons disabling  ex-employee user in AD, remove it from any distribution groups and move it to a special OU is preferred to me
3- you can have a separated mailbox database on a large non-expensive HD or HD array, with different backup strategy that you move ex-employees  mailbox to.
4- make a special AD user who is the only account that has full access on those mailboxes , and you can use OWA to access and search mailboxes

regarding In-Place Hold I found some explanations about enabling and disabling hold that maybe useful for you

https://technet.microsoft.com/en-us/library/ff637980%28v=exchg.150%29.aspx

one last think if you could make a POC or test deployment using VM environment to make sure about every decision you make you can have 2 VM with Internal only network to RUN AD and Exchange and safely test any option

Good Luck
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
aroddickAuthor Commented:
Thanks very much, some good points that we'd never considered there. I'll definitely propose the extra DB on cheap storage as the 'archive'. Really good advice thank you again. Much appreciated.
0
FarWestCommented:
you are welcome, and glad I was able to help
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.