1. Data recovery in Exchange Online
4/24/2018
Data recovery in Exchange Online
Irene Higuera / Alberto Pascual
EXO Support Engineers
EMEA region
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Agenda Single Item Recovery In-place/Litigation hold
4/24/2018
Agenda
Single Item Recovery
In-place/Litigation hold
Soft-Deleted Mailboxes
Inactive Mailboxes
Backup
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Single Item Recovery (S.I.R)

4. Single Item Recovery (S.I.R)
4/24/2018
Feature to recover when users delete items accidentally or manually
Enabled by default in Exchange Online
Allows Recovery of deleted items within retention period (14 days by default)
Can be increased to 30 days by running:
“Set-Mailbox <Alias> -RetainDeletedItemsFor 30”
More Info about Recoverable Items:
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Single Item Recovery (S.I.R)
4/24/2018
Retained 30 days (unless user interacts): Default retention policy
Deletions   This subfolder contains all items deleted from the Deleted Items folder. (In Outlook, a user can permanently delete an item by pressing Shift+Delete.) This subfolder is exposed to users through the Recover Deleted Items feature in Outlook and Outlook Web App.
Versions   If In-Place Hold or Litigation Hold is enabled, this subfolder contains the original and modified copies of the deleted items. This folder isn't visible to end users.
Purges   If either Litigation Hold or single item recovery is enabled, this subfolder contains all items that are purged. This folder isn't visible to end users.
Audits   If mailbox audit logging is enabled for a mailbox, this subfolder contains the audit log entries. To learn more about mailbox audit logging, see Mailbox audit logging.
DiscoveryHolds   If In-Place Hold is enabled, this subfolder contains all items that meet the hold query parameters and are purged.
Calendar Logging   This subfolder contains calendar changes that occur within a mailbox. This folder isn’t available to users.ç
More Info about Recoverable Items:
Permanently deleted after defined retention period
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Single Item Recovery (S.I.R)
4/24/2018
Shift + Delete = send to deletions
Empty “Deleted Items” = send to deletions
Flushed after 14 days: S.I.R default value (max 30 days). Calendar items after 120 days.
Allows recovery from OWA, Outlook, eDiscovery, PowerShell (Using EWS), EWS editor and MFCMapi
More Info about Recoverable Items:
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Single Item Recovery (S.I.R)
4/24/2018
Not visible from user
Allows recovery from eDiscovery, PowerShell (Using EWS), EWS Editor and MFCMapi
Flushed after 14 days: S.I.R default value (max 30 days). Calendar items after 120 days.
Managed folder assistant dependant
More Info about Recoverable Items:
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. Single Item Recovery (S.I.R)
4/24/2018
Quota limit applies to all recoverable items:
20Gb/30Gb (Soft-Limit* / Hard-Limit)
90Gb/100Gb (Soft-Limit* / Hard-Limit) - If hold enabled
Check used quota:
More Info about Recoverable Items:
*Soft-Limit only applies to Exchange On-premises and shows events and in application event log. In Exchange Online the behaviour is as follows:
No more entries Will be added
User can Access mailbox but Will be unable to delete items (including deleted items)
Contact Support to increase quota
Check used quota:
Get-MailboxFolderStatistics <alias> | ?{$_.Name -like "Recoverable Items"} | fl FolderAndSubFolderSize
More Info about Recoverable Items:
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. In-Place Hold Litigation Hold

10. In-Place Hold Litigation Hold
4/24/2018
In-Place Hold
Litigation Hold
Can be query based (granular hold)
Applies to all items (complete hold)
New-MailboxSearch “Name"-Sourc boxes -InPlaceHoldEnabled $true
Set-Mailbox <Identity> -LitigationHoldEnabled $True
Multiple holds over a mailbox
Applied once
Can be held indefinitely or time based
Quota limit 100Gb applies to all recoverable items
Sets Purges folder as read-only for owner/admin
Can be set to all mailboxes including archives and public folders
Needs Exchange Online Plan 1 + Archive / Plan 2 (Including E3)
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. In-Place Hold / Litigation Hold
4/24/2018
Only used if In-Place Hold or Litigation Hold is enabled
Not visible from user
Contains the original and modified copies of the deleted items.
Allows recovery from eDiscovery, PowerShell (Using EWS), EWS Editor and MFCMapi
More Info about Recoverable Items:
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. 4/24/2018
Demo
Demo SIR + Hold
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. Soft-Deleted Mailbox

14. Soft-Deleted Mailbox Until now MSOL Hard Delete MBX Hard deleted
4/24/2018
Triggered when:
Remov box*
Deletion of MSOL Object (including onpremises AD Object)
Hard-Deletion of MSOL Object?
Team Mailboxes, Site Mailboxes, Office Groups Mailboxes, Shared and regular Mailboxes.
Retained for 30 days before hard deletion occurs (not configurable)
Mailbox can be restored or merged to a new mailbox or existing one
Removal of Exchange License does not convert the mailbox into Soft-Deleted but into Disconnected. The main difference is that Soft-Deleted Will be shown as deleted and disconnected Will not. Although both of them are retained for 30 days.
Until now
MSOL Hard Delete
MBX Hard deleted
MBX Soft deleted
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Soft-Deleted Mailbox :( What about Public Folders?
4/24/2018
What about Public Folders? :(
Before deleting a public folder mbx you are forced to delete manually the folders within
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. Soft-Deleted Mailbox 404 What about distribution groups?
4/24/2018
What about distribution groups?
404
Remember distribution groups are not mailboxes and are AD objects
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. Inactive Mailbox

18. Inactive Mailbox
4/24/2018
Helps you retain mailbox data as long as you want to of an unexistant user
No license consumption
Exportable/Searchable through eDiscovery
Data can be merged to a new mailbox or existing one
Needs to have Litigation Hold or In-place hold enabled
Needs MSOL object to be deleted
Keeping MSOL Object + In-place hold + Removing EXO License ISN´T an Inactive mailbox
Mailbox remains active
MSOL user will show error with correlation id.
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

19. Inactive Mailbox Assigned license gets released Online Archive as well
4/24/2018
Assigned license gets released
Online Archive as well
Is inactive until:
Hold duration is reached
Hold is manually removed
MSOL Object is restored
Data can be merged as stated on:
eliminado-en-exchange-online/
Mailbox can be reconnected to another MSOL user without mailbox
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

20. Demo 4/24/2018 Soft-Delete + Inactive
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Backup

22. Backup? No place for backup now No place for backup in the future
4/24/2018
No place for backup now
No place for backup in the future
Backup-Less design (Active + 2 Passives + Lagged)
S.I.R.
Litigation/In-place Hold
Export to PST tool (EWS Based/Azcopy based) -> This is not a snapshot
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

23. 4/24/2018
© 2016 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.