Compliance Purview Retention policies

Keir Smith 0 Reputation points
2024-01-17T10:38:01.7066667+00:00

I have created a retention policy at https://compliance.microsoft.com/ > Data lifecycle management > Microsoft 365 that should delete emails from a specified mailbox after 6 months. My question is, these mailboxes still have Default MRM Policy assigned to them with the Exchange Admin Centre, do I need to change this to something else? Or will the Compliance Retention Policy overrule anything set in Exchange? Thank you

Exchange Online
Exchange Online
A Microsoft email and calendaring hosted service.
6,202 questions
{count} votes

3 answers

Sort by: Most helpful
  1. yogesh kumar 0 Reputation points
    2024-01-17T10:45:48.2966667+00:00

    Yes you need to create manually tag and policy and assign the user because default MRM policy have multiple tags that's why create a separate policy and tag Tag is for time period and policy for action you need perform like delete or archive the mailbox. Thanks if you this is helpful for you than please mark as accept the answer.


  2. Andy David - MVP 158K Reputation points MVP Volunteer Moderator
    2024-01-17T12:01:00.5233333+00:00

    You should use the compliance policy and not the MRM policy. They can be used side by side but the recommendation is to only use the Purview policies going forward unless the MRM policy is moving items to the archive (for example) which can not be done with Purview policies https://learn.microsoft.com/en-us/exchange/security-and-compliance/messaging-records-management/default-retention-policy User's image


  3. Yuki Sun-MSFT 41,376 Reputation points Moderator
    2024-01-18T09:23:08.6266667+00:00

    Hi @Keir Smith ,

    My question is, these mailboxes still have Default MRM Policy assigned to them with the Exchange Admin Centre, do I need to change this to something else? Or will the Compliance Retention Policy overrule anything set in Exchange?

    If your final goal is to delete items older than 6 months, agree with Andy that you should use the compliance policy only and remove the MRM policy or any other Exchange based retention policy assigned to the mailbox. As aforementioned in the article shared by Andy, the Exchange based MRM policy will work side-by-side with the compliance retention policies and retention labels when both exist. So, it's not that the Compliance policy overrides the Exchange based MRM policy or vice versa. Based on my understanding, both would be taken into consideration when a mailbox is processed by the backend mailbox assistant and basically it would follow the flow below:
    Reference: The principles of retention, or what takes precedence?
    Diagram of the principles of retention.

    so assigning a Retention Policy here on the mailbox AS WELL as a compliance policy should do the trick?

    If your goal is to retain items for 6 months, assign the compliance policy only would be enough.

    What happens if the compliance policy is 6-month delete but the exchange policy is 1-week delete, which policy wins?

    Per my understanding, as illustrated in the image above, Exchange policy (1-week delete) wins in this scenario. (Rule 4. Shortest deletion period wins.) All in all, the recommended way is as Andy said, to use EAC based retention to meet your archiving (mailbox) needs and SCC retention for your retention needs.
    See: FAQs on Office 365 Retention, Disposal & Archiving


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.