DoD e-mail sanitization

What would be the "least painful" procedure to sanitize an exchange environment? I am writing a procedure but am not finding much about the procedure or tools. I have found information on the guidelines at various government sites. Is there any recommendations on tools that can delete the e-mail and take care of the free space associated with it? I have found shredding software that works for files but not email.

thanks,
LVL 1
SargentControlsAsked:
Who is Participating?
 
SargentControlsAuthor Commented:
Thanks for your input but was able to find a method to use page zeroing to make the data not accessible.
0
 
David Johnson, CD, MVPOwnerCommented:
define: sanitize
define: DOD E-Mail Sanitation
0
 
SargentControlsAuthor Commented:
DoD 5220.22-M
0
Network Scalability - Handle Complex Environments

Monitor your entire network from a single platform. Free 30 Day Trial Now!

 
David Johnson, CD, MVPOwnerCommented:
FYI the current  DoD 5220.22-M has no reference to disk wiping and it has become an urban legend.
So are you absolutely sure about this requirement?
Is there really a requirement to securely wipe deleted email once it has reached it's retention policy?
Do you have this requirement for active databases as well? if the disk is encrypted and before it leaves the organization you run active kill disk or dban on the drive you should be covered.

Exchange has many methods of recovering a deleted mail item. Also this email will exist on the originating and any destination computer.
For instance, many users use their deleted items folder as a holding area for stuff (you can't make something foolproof rule).. once they delete the item from their deleted items folder it may be available in their recoverable items area. There also will be a transaction record in the mailbox log files which will exist until the log is truncated after a backup or is overwritten due to circular logging. The problem is that this item may still be recoverable in a forensic examination of the disk's free space.
0
 
David Johnson, CD, MVPOwnerCommented:
the data still resides on the disk
0
 
David Johnson, CD, MVPOwnerCommented:
it worked for the asker
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.