Category Archives: Cloud Data

January 22, 2025 · 10:34 AM

Inactive Mailboxes in M365 Present Significant Hidden Risks and Costs

By Chas Meier and John Patzakis

In our recent blog post, we outlined the challenges associated with inactive mailboxes in Microsoft 365. The response was very positive, and this post dives a bit deeper into the specific challenges with MS Purview in addressing inactive mailboxes, including some hidden pitfalls and risks that many enterprises may not be aware of.

Limited Visibility in Microsoft Purview
Microsoft Purview allows users with the eDiscovery Manager role (each provisioned with an E5 license) to search both active and inactive mailboxes to meet legal or regulatory requirements. However, one of the first hurdles administrators face is simply identifying which mailboxes are inactive. Inactive mailboxes do not appear in the standard active user lists and require additional steps to locate, whether through Purview or the Microsoft 365 admin center. An even bigger challenge is Purview’s limitation: when you query for inactive mailboxes, it will only display a maximum of 5,000—even if more exists. One of our customers, for example, discovered tens of thousands of additional inactive mailboxes using X1, far exceeding Purview’s 5,000 limit. Compounding this challenge, Purview cannot distinguish between an inactive mailbox placed on litigation hold versus one on a retention tag for other reasons, leaving organizations unable to quickly determine which mailboxes are truly subject to legal holds.

How Inactive Mailboxes Are Created
This problem partly stems from Microsoft 365’s process for creating inactive users. Under pressure to free up M365 licenses for new employees, administrators might place holds or retention tags on a departing user’s account “just to be safe” until they know how to manage that user’s data. Once the license is removed, a grace period begins; after it expires, the mailbox is moved into the inactive mailbox collection, ensuring its contents remain discoverable for eDiscovery and compliance purposes.

However, there is no built-in mechanism to automatically remove these holds once they are no longer needed, so IT and legal teams must manually intervene. As a result, organizations with high turnover often retain far more inactive mailboxes than necessary. This not only increases legal exposure but will also incur additional costs when Microsoft begins charging storage fees on January 27, 2025 for inactive M365 accounts on retention and legal holds. (Manage unlicensed OneDrive user accounts – SharePoint in Microsoft 365 | Microsoft Learn)

X1 Enterprise 5.3: A Streamlined Approach
With X1 Enterprise 5.3, legal and compliance professionals can now process inactive mailboxes directly within the platform using only a single E5 license and are not subject to Purview’s listing limit of 5,000 inactive mailboxes. This direct integration ensures that all preserved mailboxes are accessible and actionable.

Even better, many of our customers employ X1 Enterprise to proactively perform targeted preservation collections on M365 accounts and other sources such as laptops for departing employees, a streamlined process that significantly reduces both cost and risk.

Please contact us at the link below if you have any additional questions about inactive mailboxes in M365 and would like to inquire about a free “health check” assessment of the scope of your inactive mailboxes.

Ready to Learn More?
The X1 Enterprise Platform is available now from X1 and its global channel network in the cloud, on-premises, and with our services available on-demand. For a demonstration of the X1 Enterprise Platform, contact us at sales@x1.com. For more details on this innovative solution, please visit www.x1.com/solutions/x1-enterprise-platform.

Leave a comment

Filed under Best Practices, Cloud Data, Corporations, eDiscovery, eDiscovery & Compliance, Enterprise eDiscovery, ESI, law firm, m365

Tagged as , , , ,

December 17, 2024 · 11:06 AM

Inactive Mailboxes, Unlocked: How X1 Enterprise Transforms M365 Data Discovery and Compliance

By Chas Meier and John Patzakis

In today’s compliance-driven environment, organizations must retain, discover, and manage large volumes of email data—even when the employees who once owned that data have long since departed. In Microsoft 365 (M365), this is managed through the concept of “inactive mailboxes.” An inactive mailbox is a mailbox that remains accessible for legal, regulatory, or compliance reasons, but no longer corresponds to an active user. While these preserved data stores are critical for eDiscovery, compliance, and investigations, they can pose significant challenges when it comes to efficiently locating, searching, and collecting the information they contain.

Fortunately, the latest innovations from X1 Enterprise are transforming how organizations handle these inactive mailboxes, making it easier and more streamlined than ever to discover and collect critical information—no matter where it resides.

What Are Inactive Mailboxes in M365?
Inactive mailboxes are mailboxes retained after a user leaves an organization, even after their license is removed. By placing a mailbox on legal hold or under a retention policy before deprovisioning the user, you can preserve it indefinitely without incurring licensing costs. This ensures the data remains accessible for compliance and eDiscovery. Best practices include applying holds before removing accounts, treating inactive mailboxes as part of ongoing governance efforts, and lifting holds once no longer needed.

The Process of Searching Inactive Mailboxes in Purview
In Microsoft Purview (the compliance and security center for Microsoft 365), users granted the eDiscovery manager role and each provisioned with an E5 license can search across both active and inactive mailboxes to fulfill legal or regulatory requirements. Generally, the process involves:

  1. Identifying the Inactive Mailboxes: Administrators must first know which mailboxes are inactive. Inactive mailboxes do not appear in the standard active user lists and often require additional steps to locate—either through the Purview interface, the Microsoft 365 admin center, or by running PowerShell scripts.
  2. Setting Up Permissions and Scope: The person performing the search needs appropriate eDiscovery roles in Purview. Once permissions are granted, they create a new content search or eDiscovery case and include the specific inactive mailboxes in the scope.
  3. Applying Search Criteria: Administrators can filter the search by date, keywords, sender/recipient, or other criteria. After running the search, Purview indexes the content and returns results for review and export.

Why Users Find It Challenging
Users face significant challenges when searching inactive mailboxes due to limited visibility—these mailboxes do not appear with active ones, requiring extra effort to locate and include them. Additionally, complex eDiscovery and compliance roles can be difficult to manage, particularly in organizations with large teams or complicated approval processes. A lack of a unified interface means working across multiple portals, tools, or scripts, leading to a fragmented and easily mismanaged workflow. Finally, without an intuitive, consolidated process, adding inactive mailboxes into search scopes, running queries, and ensuring data completeness is time-consuming and more prone to errors.

As organizations scale and accumulate thousands of these mailboxes, these difficulties multiply. Managing a vast, growing inventory of inactive mailboxes transforms a cumbersome task into a formidable burden, slowing down investigations, audits, and regulatory responses, and increasing the risk of overlooking critical data.

Many organizations resort to re-hydrating inactive mailboxes by applying an active M365 license to each one (“throwing licensing”), copying all M365 mailboxes of departed employees in a separate non-Microsoft archive (“throwing archiving”), or bringing inactive mailboxes into the litigation workflow (“throwing services”) to address the problem when faced with eDiscovery requests. Each of these approaches is extremely expensive, burdensome, and fraught with risk.

Driving the Transformation of Inactive Mailboxes through New Capabilities
X1 Enterprise has long been a trusted solution for comprehensive and targeted search across M365 data sources, file servers, and endpoints. With the new release of X1 Enterprise version 5.3, X1 is taking an industry-leading step forward in how organizations manage and leverage their inactive mailboxes.

How X1 Enterprise Revolutionizes Inactive Mailbox Management:

  • Unified Discovery Experience: With X1 Enterprise 5.3, legal and compliance professionals can now select inactive mailboxes directly within the platform. Instead of treating inactive mailboxes as separate or isolated repositories, X1 provides a consistent, familiar interface—just like working with active mailboxes.
  • Centralized Indexing and Search: Once selected, inactive mailboxes can be staged, indexed, searched, and collected using the same intuitive workflows. This streamlines eDiscovery, ensures rapid insights, and reduces the administrative burden on IT and compliance teams.
  • Seamless Integration with Microsoft Purview: X1 Enterprise automatically discovers and presents your full list of inactive mailboxes stored in Microsoft Purview (formerly Office 365 Security & Compliance Center) using only a single E5 license. This direct integration ensures that all preserved mailboxes are readily visible and actionable.
  • Consistent Identification and Collection Workflows: By applying the same workflows to both active and inactive mailboxes, X1 Enterprise eliminates confusion and complexity. The result is a more efficient and effective approach to responding to legal requests, regulatory audits, and internal investigations.

Benefits of the New Approach:

  1. Faster Response Times: Legal and compliance teams can rapidly identify and collect relevant information from inactive mailboxes without reinventing the wheel for each scenario.
  2. Improved Efficiency: In-place indexing and targeted searching with X1 Enterprise reduces administrative overhead and streamlines processes without the need to “boil the ocean,” thereby vastly reducing licensing costs with no need for 3rd party services or archiving platforms.
  3. Reduced Risk: Consistent workflows lower the chance of missing critical data or mismanaging preserved mailboxes.
  4. Enhanced Transparency: Having a clear, uniform process for both active and inactive mailboxes bolsters your overall information governance framework.

In Conclusion: Embrace the Future of Inactive Mailbox Management
Inactive mailboxes are here to stay, as legal and regulatory requirements continue to mandate the preservation of key business communications. Instead of viewing these repositories as a burden, forward-thinking organizations can leverage advanced technologies like X1 Enterprise 5.3 to take control of their compliance landscape.

Ready to Learn More?
The X1 Enterprise Platform is available now from X1 and its global channel network in the cloud, on-premises, and with our services available on-demand. For a demonstration of the X1 Enterprise Platform, contact us at sales@x1.com. For more details on this innovative solution, please visit www.x1.com/solutions/x1-enterprise-platform.

Leave a comment

Filed under Best Practices, Cloud Data, Corporations, eDiscovery, eDiscovery & Compliance, Enterprise eDiscovery, ESI, Information Governance, Information Management, m365, Preservation & Collection

Tagged as , , , , ,

October 29, 2024 · 10:54 AM

Microsoft Copilot Explains Why X1 Search is Far Better than Windows Search

By Chas Meier

We’ve been hearing a lot of good things about Copilot, Microsoft’s generative AI chat bot. So, we asked Copilot the following prompt:

“Is X1 Search better than the standard Windows Search?

Here is Copilot’s reply in full:

“Yes, X1 Search offers many advantages over standard Windows Search, especially if you’re dealing with large volumes of documents and emails. It integrates with multiple data sources, provides faster and more efficient searches, and offers advanced filtering and preview options that standard Windows Search lacks. For someone in your line of work, X1 Search could be a real game-changer.”

Intrigued, we explored further:

“What are the advantages of X1 search over standard Windows search?

Copilot:

“Great question! Here are some key advantages of X1 Search over standard Windows Search:

  1. Unified Search Across Multiple Data Sources: X1 Search can search across emails, documents, local files, cloud storage (like Google Drive, OneDrive, Box), and even archived emails. Windows Search, on the other hand, is limited to your local files and doesn’t integrate as seamlessly with cloud services.
  2. Speed and Efficiency: X1 Search uses advanced indexing and fast-as-you-type search capabilities, allowing you to find information almost instantly. Windows Search can be slower, especially when dealing with large volumes of data.
  3. Advanced Filtering and Preview Options: X1 Search offers powerful filtering options, keyword highlighting, and full fidelity previews of documents and emails without needing to open them fully. This makes it easier to quickly identify relevant information. Windows Search lacks these advanced features.
  4. Integration with Email and Collaboration Tools: X1 Search integrates deeply with email clients like Outlook and Microsoft Teams, allowing you to search through emails, attachments, chats, and more. Windows Search doesn’t offer this level of integration.
  5. Cloud Data Search: X1 Search can index and search data stored in cloud repositories like Google Drive, OneDrive, and Box, which Windows Search doesn’t support.
  6. User Friendly Interface: X1 Search provides a simple, unified interface with over 50 refine columns, making it easy to navigate and find exactly what you need. Windows Search’s interface is more basic and less intuitive.

Does this help clarify the advantages for you?”

Yes, it does! Thank you, Microsoft Copilot! We could not have said it any better.

X1 Search is available for individual purchase on the X1 website and large volume, enterprise purchase by contacting X1 at sales@x1.com. To learn more about X1 Search visit  www.x1.com/solutions/x1-search.

Leave a comment

Filed under Best Practices, Business Productivity Search, Cloud Data, Corporations, Desktop Search, eDiscovery, Enterprise eDiscovery, Enterprise Search, ESI, Google Workspace, Hybrid Search, Information Access, Information Management, m365, MS Teams, OneDrive, productivity, SharePoint, X1 Search 9

Tagged as , , , , , , , , , ,

August 6, 2024 · 10:04 AM

Granting Microsoft 365 Super-Admin Privileges to eDiscovery Service Providers is Very Risky and Unnecessary

By John Patzakis and Chas Meier

In a world where data breaches are not just possible but expected, securing sensitive information becomes paramount. However, in many cases, organizations are unnecessarily handing over the security keys to the kingdom to eDiscovery Service Providers by providing them with very heightened security privileges to their Microsoft 365 tenants. This is because the more manual methods relied on by service providers often involve gaining high-level permissions usually only reserved for senior trusted IT directors and executives within the client organization. Such broad access can lead to unauthorized data access, including creating new accounts for others outside the organization, data overcollection, and unintended data modifications and even deletions. These unnecessary accommodations can cause severe irreversible damage, security breaches and overall complication with compliance efforts.

Clients are often told such high-level security access is absolutely necessary. In truth, service providers only resort to such measures when they fail to utilize best practices technology. In many cases, service providers, once they gain elevated administrative permissions, simply run basic scripts that they position as proprietary, which have little functionality other than the bulk download of M365 data. These scripts only work if very high-level access is granted to the user of the scripts. Once the service provider completes their mass data download from M365, they are off to the races with their traditional highly lucrative eDiscovery workflows of excessive data volumes due to overcollection, extensive processing and project management, and final eventual staging into review, all leading to excessive costs and unnecessarily extended timelines.

In contrast, our customers believe X1’s strategy for M365 Data Access is unique and disruptive to legacy approaches still utilized by many service providers. We designed our approach to maximize security, enhance operational efficiency, and ensure economic advantages for our clients, setting new benchmarks that challenge conventional industry practices.

  1. Uncompromised Security with Read-Only Access
    X1’s approach to accessing client information in a read-only least privileged manner exemplifies our commitment to security. In our approach a client grants read-only permissions to the X1 Enterprise solution licensed and controlled by the client, through an application that also remains under the control of our client and has a built-in expiration. No X1 employee ever needs to have access to or personally utilize the client’s M365 credentials. There is no ability for X1 to create new accounts or even delegate M365 permissions. This approach eliminates the risks associated with more invasive access levels that other eDiscovery providers often require.

    X1’s methodology ensures that the data remains pristine and untouched throughout the eDiscovery process. This approach not only supports stringent compliance with legal and regulatory standards but also shields organizations from the pitfalls of unauthorized data manipulation. It significantly reduces the potential for costly security incidents, reinforcing the trust our clients place in us to handle their most sensitive information.

  2. Index-in-Place: Elevating Data Integrity and Efficiency
    Our “index-in-place” technology stands in stark contrast to the traditional data extraction methods employed by many service providers. These providers often relocate substantial data volumes from clients’ M365 tenants to their environments—a practice driven by the desire to increase hosting volumes and, consequently, revenue. This not only introduces significant security risks but also strains client resources and infrastructure.

    By indexing data directly within its native environment, X1 maintains the integrity and security of the data. This approach significantly reduces the exposure of data to external threats during transfer and storage. It also enhances the speed and accuracy of search and collection processes, enabling quicker responses to legal inquiries and reducing the overall time and cost of eDiscovery.

    Moreover, this method highlights our principle of avoiding the “fox guarding the henhouse” scenario, where providers have incentives that might conflict with client interests. Our clients appreciate the transparency and integrity of keeping their data within their controlled environment, free from unnecessary external manipulation or exposure.

  3. Transparent Pricing Promoting Efficiency and Reuse
    X1’s innovative pricing model stands out by encouraging the efficient reuse of tools without penalizing clients for data volume. This approach directly contrasts with the common industry practice where costs escalate with the volume of data hosted or processed. Our pricing structure is designed to align closely with our clients’ needs for predictable and reasonable costs.

    By not charging based on data volume, we foster a more sustainable and rational use of resources, allowing our clients to plan and budget more effectively. This pricing strategy supports not just cost savings but also promotes a more strategic use of eDiscovery tools, encouraging practices that are both economically and environmentally more sustainable.

Conclusion
X1 is dedicated to setting a higher standard for secure, efficient, and cost-effective data management solutions in Microsoft 365 environments. Our innovative approaches to read-only access, index-in-place technology, and volume-independent pricing ensure that our clients receive unparalleled service that prioritizes their security, operational efficiency, and financial well-being.

We invite you to join us in this transformative journey and experience the peace of mind that comes from knowing your data remains in place until you target a collection to migrate into review. For a demonstration of the X1 Enterprise Platform, contact us at sales@x1.com. For more details on this innovative solution, please visit www.x1.com/x1-enterprise-platform.

Leave a comment

Filed under Best Practices, Cloud Data, compliance, Cybersecurity, eDiscovery, eDiscovery & Compliance, Enterprise eDiscovery, ESI, Information Access, Information Management, m365

Tagged as , , ,

July 23, 2024 · 10:55 AM

Enterprise Search is Dead. A New Approach is Here.

By John Patzakis

In today’s fast-paced digital world, employee productivity hinges on robust enterprise search capabilities that allow quick and easy retrieval of an organization’s documents, emails, and other unstructured data. Despite the critical nature of this capability, many organizations have historically invested considerable time, money, and effort into now-obsolete tools built on flawed enterprise search architectures. These legacy tools, often ineffective, have become completely untenable in the era of remote work and the widespread use of platforms like Microsoft 365 and Google Workspace (formerly G Suite).

The Limitations of Traditional Enterprise Search
Traditional enterprise search architectures rely on gathering all relevant data through crawling and mass migration tools, centralizing it into a single repository. This approach, though prevalent for years, has significant drawbacks:

  1. Security and Governance Risks: Duplicating and then centralizing sensitive data in a single repository creates a prime target for cyberattacks, runs afoul with data protection regulations, and is completely contrary to information governance principles.
  2. Scalability Issues: The sheer volume of data in modern enterprises, often amounting to hundreds of terabytes, makes central repositories impossible.
  3. Incompatibility with Modern Platforms: Legacy systems are ill-suited to integrate with platforms like Microsoft 365, which are now dominant in enterprise environments.

Duplicating vast amounts of sensitive data and centralizing it in an external repository is not only risky but also extremely impractical. Despite this, some vendors continue to push these outdated solutions, ignoring the evolving needs of modern enterprises.

X1 Search: A Revolutionary Approach
X1 Search addresses these challenges with a game-changing approach that offers a distributed, individualized enterprise search workflow. This innovative architecture brings several key benefits:

  1. Distributed Index and Search In-Place Technology: X1’s proprietary and patented technology enables scalable search capabilities while maintaining robust security. Each employee has an individual search index aligned with their permissions, ensuring they only access data they are authorized to see.
  2. No Mass Data Duplication: Unlike traditional systems, X1 does not require the mass duplication of data. Users interact with original documents and emails, facilitating actions like opening, replying to, or forwarding them directly from the search interface.

Enhancing Productivity with Unified Search
The latest iteration of X1 Search transcends its desktop origins, offering the ability to instantly search across various platforms, including Microsoft email, Teams, OneDrive, SharePoint, as well as local files and emails, all within a single unified interface. This powerful capability can significantly boost productivity, saving users hours each day by streamlining access to critical information. Additionally, X1 Search now supports Google Drive and Gmail, broadening its utility across different cloud ecosystems.

User Experience and Endorsements
A critical aspect of X1 Search’s success is its excellent user experience. With over 100,000 users, the solution has garnered widespread acclaim. Max Underwood, a long-time user from a large defense contracting firm, states, “X1 Search is my go-to, must-have search application on my desktop. Nothing even comes close to matching X1 Search’s speed and accuracy in finding what I am looking for exactly when I need it.”

Conclusion
As organizations navigate the complexities of remote work and vast amounts of unstructured data, traditional enterprise search solutions fall short. X1 Search’s innovative approach, leveraging distributed index and search in-place technology, offers a secure, scalable, and user-friendly alternative. By eliminating the need for mass data duplication and providing a unified search experience across multiple platforms, X1 Search is setting a new standard for enterprise search capabilities, empowering employees and enhancing productivity in the modern digital workplace.

X1 Search is available for individual purchase on the X1 website and large volume, enterprise purchase by contacting X1 at sales@x1.com. To learn more about X1 Search visit www.x1.com/products/x1-search.

Leave a comment

Filed under Best Practices, Business Productivity Search, Cloud Data, Corporations, Desktop Search, eDiscovery, Enterprise eDiscovery, Enterprise Search, ESI, Google Workspace, Hybrid Search, m365, MS Teams, X1 Search 9

Tagged as , , , ,