Purview - advanced ediscovery - collection search

Question

Hello, Do I need to disable the Onedrive data source location for a custodian if I will be using communication properties to search the custodian's Exchange online account for a collection? Thank you.

Answer 1

Based on the recent documents, when collecting Teams content, it is recommended to remove custodians' OneDrive accounts from the collection scope. This action is suggested to prevent the collection of duplicate files that were attached to 1:1 chats and group chats. However, if you are using communication properties to search the custodian's Exchange Online account for a collection, the documents do not specify whether the OneDrive data source location needs to be disabled. The choice might depend on your specific requirements and whether you expect relevant data to also exist in the OneDrive accounts. Remember to carefully consider the unique aspects of each data source and the potential relevance to your case before making a decision. For instance, some properties such as From, Sent, Subject, and To are unique to certain items like emails and are not applicable when searching for files or documents in SharePoint and OneDrive for Business. Including these types of properties when searching across different data sources can sometimes yield unexpected results. So, if you are specifically targeting email communications, disabling OneDrive could be beneficial to avoid unnecessary duplication or irrelevant search results. However, if you believe there could be pertinent files or documents stored in the custodian's OneDrive, you might want to include it in your search parameters. Always make sure your search query is tailored to suit the nature of the data sources included.

Note, that the above is based on my conceptual understanding of how this should work. I have not had a chance to implement something like this. It would be a good idea to consult your system administrator or IT support for particular advice based on your organization's use cases.