GCCM - Searching Missing Emails using eDiscovery Tool

GCCM - Searching Missing Emails using eDiscovery Tool

Info
Purpose 
This KB article is a guide in using the eDiscovery Tool for missing emails.

Info
Client
GCCM

Info
Category
Emails, troubleshooting


Notes
Steps  

To perform a message trace in Microsoft 365, follow these steps:

1. Open the Exchange Admin Center (EAC): Go to and sign in with your admin credentials.
2. Navigate to Mail Flow: In the left navigation pane, select "Mail flow" and then click on "Message trace".
3. 
Start a New Trace: Click on "Start a trace". You can choose from default queries or create a custom query.
4. Run the Trace: Execute the trace to follow the email message as it travels through your organization.
5. Review Results: Check the results to see if the message was received, rejected, deferred, or delivered

Alert
If not found, ask client if can search through online archive.
If user cant find it anywhere in online, next step
Reach out to Microsoft Support (support@mail.support.microsoft.com)
Example emails from Microsoft



Info
eDiscovery Tool
To search for emails using eDiscovery in Microsoft 365, you can follow these steps:
1. Go to the Microsoft Purview compliance portal and sign in with your admin credentials.
2. Create a Content Search: Use the Content Search feature to create a search query. You can specify keywords, date ranges, and other conditions to find the emails you're looking for.
3. Run the Search: Execute the search to retrieve the emails that match your criteria.
4. Review and Export Results: Review the search results and export them if needed

-Create eDiscovery (Standard) case
-Optional> to Add members to the case

Below example screenshots of searching for the emails.
-Set the
mailbox to the client.
-Set the
date range and the sender
There's more criteria search to apply to explore























Info
Reference Ticket

Quote
Glossary
Microsoft Purview eDiscovery is a powerful tool that helps organizations search for, preserve, and export content across Microsoft 365 and Office 365.





    • Related Articles

    • GCCM - Bloomberg GNET Client Alert

      Purpose This KB article is a guide in checking the Bloomberg GNET client alert. Client GCCM | Green Court Capital Steps NOTE: GCC Bloomberg service usually send alerts on disconnection or reconnections during weekend maintenance. Step 1: Check the ...
    • GCC - How to set-up 3CX mobile app

      Purpose This KB article is a guide on how to configure 3CX mobile app on his/her corporate device. Client GCCM Category Information, troubleshooting Steps Prerequisite: QR code from 3CX 1. Remote into GCCHKPMM01> Launch Edge and go to ...
    • Segantii Servers | Eze Remote Access request

      Overview: There will be incoming requests from Eze to remote into Segantii Servers. Service Desk/Support Team can go ahead and grant Eze access using Ezesoft Bomgar Button. Client: Segantii / Eze Steps: 1. Eze will mention in the email/ticket which ...
    • ARCM | How to handle Geneva Service Manager restart request

      Purpose Purpose of the article is to inform us how to handle Geneva Service Manager restart request from ARCM users. Client: ARCM Category: General Information Important Information/ Note/Warning -Review the ticket carefully and make sure that the ...
    • VAM | New Joiner Request

      Purpose: The below document contains the detailed procedure on how to perform new joiner request for VAM. Client: VAM Steps: 1. Log in to VAM PMM1 in CW 2. Launch ADUC > VAM >HK > Users > Right Click on O365 > New > User 3. Fill out First Name and ...