How to use Purview for data export.

How to use Purview for data export.

Data Export Procedure with Microsoft Purview


Contents:


1. eDiscovery permissions setup

2. Content search and PST download 

3. OneDrive download




  1. eDiscovery permissions setup

References: https://learn.microsoft.com/en-us/purview/ediscovery-assign-permissions

Firstly the correct permissions have to be setup for the user to have eDiscovery manager and eDiscovery admin access. This allows the user to be able to conduct content searches and PST downloads.

1.      Accessing admin centre

-          Using a Microsoft Edge browser.

-          Log in > select admin


2.  Accessing Purview

-          Select show all > Select Compliance(This is Purview)



3. 

- Select Roles & scopes > Select Permissions



4. In the Microsoft Purview Solutions heading.

- Select Roles



5.

- Select eDiscovery Manager(this opens side pane) > Select Edit



6.

- Select Choose user



7.

- Enter user into search bar > Select user in search results > Click Select



8. Assigning eDiscovery Manager

- Select user for eDiscovery Manager > Click Next



9. Assigning eDiscovery Administrator

- repeat the process

- choose user > search user > select user > click select > select eDiscovery Administrator > click next




10. Assigning eDiscovery Administrator continued.

- Check details > Click save.



       2. Content search and PST download

Once our permissions are assigned, we can now begin the content search and PST download. This must be done using a Microsoft Edge browser.

1.      Content search

-          Select content search > New Search



1.      New Search

-          Enter search name > Enter description(optional) > Click next



3.

- For the top option. Turn status On . Select choose user.



4.  Exchange user

- Search the user to have their PST downloaded > Select user > click done



5. Exchange user continued

- Check the included column now has 1 > click next



6.

- Leave the settings as default to download their entire mailbox > click next.



- Optional step for IDSS teams download. This allows for Microsoft teams chat history to be saved
- Select Add Condition > select Type (This is in the list that pops up)


- Select instant messaging > Click submit


7.

- Check the details are correct > click Submit


8.

- Once the status column is “complete” > click on the search which was created (in this case its ‘Test search 1)


9.

- Once the side pane has opened for the selected search.
- Click Actions > Select Export results.




10.

- Ensure the first options are selected for both Output options and Export Exchange content as.

- Click Export.



11. Export tab
- Select the export tab (underlined in blue)

- Select the exported search, in this example its “Test search 1_Export”



12. Downloading results.

- Depending on the file size it may take a while for the Export key to populate.

- Once the export key is available. Copy to clipboard > Click Download results.

 

13.

- Click Open to approve the Export Tool application.



14.

- Paste the export key into the top box.

- Enter the file path where you want the files to download to or click Browse.



15. Export Download confirmation

- This is the final step to download the PST. This may take a while depending on the file size.

- Select chosen file path > Click OK > Click Start.


      3.    OneDrive download

The OneDrive download can be done simultaneously as it only requires the use of M365 Admin Centre and does not interfere with Purview.

 

1.      Open Admin center as per instructions on 1.1

-          Select Admin center in the side panel.


2. M365 Admin Center

- Select Users > Select Active users > Enter the User into search box > Select user from search results.


3.

- Once side panel is open > Select OneDrive.


4.

- Select Create link to files.


5.

- Click on the OneDrive link.


6. OneDrive site

- Once in OneDrive. Select My files > Select files to download > Click Download.


7. Downloads folder

- This is the final step of the process.

- Once the files have been downloaded. They will be downloaded as a zip file.

- Cut the zip folder > Paste in desired file location.


8. In file location

- This is an optional step.

- The file can be unzipped if required.

- Right click on file > Select Extract all.




Procedure Complete

-          Both PST(emails file) and OneDrive are now downloaded and are ready to backup to the desired data backup platform.


    • Related Articles

    • Nmap cheatsheet with examples

      nmap cheat sheet - https://www.stationx.net/nmap-cheat-sheet/ TARGET SPECIFICATION SWITCH EXAMPLE DESCRIPTION nmap 192.168.1.1 Scan a single IP nmap 192.168.1.1 192.168.2.1 Scan specific IPs nmap 192.168.1.1-254 Scan a range nmap scanme.nmap.org Scan ...