Feedback by UserVoice

Office 365 Security & Compliance

We have partnered with UserVoice, a third-party service and your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy. Please do not send any novel or patentable ideas, copyrighted materials, samples or demos for which you do not want to grant a license to Microsoft.

Welcome to the Security (Protection) & Compliance UserVoice forum. We’re happy you’re here! If you have suggestions or ideas on how to improve Security or Compliance related features in O365, we’d love to hear them!

How it works
◾Check out the ideas others have suggested and vote on your favorites
◾If you have a suggestion that’s not listed yet, submit your own — 25 words or less, please
◾Include one suggestion per post

Thanks for joining our community and helping improve these features in Office 365!

Need Tech Support? Please see the O365 Community for the product or feature you are having issues with, or open a support ticket through your Office 365 administrator portal.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. make the new eDiscovery user friendly; have issues trying to edit

    make it closer to the old ediscovery, and send out guide lines on how to use the new one.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  2. Advanced eDiscovery Custodians view in Data Source tab is limited to last 50

    If Advanced eDiscovery case has more than 50 custodians and you would like to manage them via GUI. Then there is a limitation for view under Data Source tab, where I can see only last 50 custodians added to the case. There is no option to "See more..." or go through pages

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  3. Retrieve and review Teams voice mails via Advanced eDiscovery

    Teams voice mails, and their transcription, are delivered to the users mailbox as MP3 and thus archived.

    When using Advanced eDiscovery, the voice mail can be searched and found using the Search tool, but when adding to a Review set you get a metadata error. Neither the transcription or the MP3 is retrievable.

    When using Core eDiscovery you can see the transcription but not listen to the MP3. You can however download the entire message, which includes the MP3 and listen to it outside of the ediscovery tool.

    At the minimum advanced ediscovery should mirror core ediscovery and allow for…

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  4. content search

    Allow the discovery tool to communicate with defender on the users pc to allow searching for content keywords in documents and files not saved in folders synced to sharepoint or onedrive.

    For instance a bad employee can be saving documents under C:\MyWork\ that have keywords we are looking for.

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  5. Search emails for PR_ATTR_HIDDEN attribute set to true

    A user did not receive and email from another that she knew was sent. I eventually found it in the directory she thought it should have gone to, but it was hidden. The way I found this out was by downloading and running the MFCMAPI tool. MFCMAPI reveals many more attributes than are normally visible – one PRATTRHIDDEN among them. But I very much doubt I would never have found had I not known the exact folder, time, sender & subject of the email. I also found how many emails are hidden in the inbox by running:
    (Get-EXOMailboxFolderStatistics…

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  6. Restore the GUI function for deleting email much like in the data investigation

    With the removal of Data Investigation - deleting data spill emails were a fairly simple process via GUI. There are times when you cannot refine the search criteria specifying to targeted emails. Hence when we had the GUI option you were able to select and confirm the targeted email to be deleted, without trying to repeat searches to get the exact emails. Now being forced to use powershell to delete the emails has added an extra step and time.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  7. eDiscovery export tool should be able to export directly to Sharepoint Online

    I was able to use the eDiscovery export tool to download data results directly into Sharepoint Online. However MS has removed that functionality.
    It would be nice to see this restored as opposed to MS suggestions of downloading results to a "local device". I thought by keeping everything in the cloud is a much more efficient way to work.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  8. add alert policy activity on new Alert Policies page for eDiscovery case create, delete and change

    The old Alert policy page (https://protection.office.com/managealerts) does not allow adding a group email address as the recipient of the alerts.

    The new Alert policy page though allow group email as recipients of alert but it has limited activities. It does not include the creation, deletion and changes for eDiscovery case. It only includes start of Search and export alert but not creation or changes made for an eDiscovery case.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  9. It would be nice to have the ability to encrypt a spilled message versus having to delete it.

    If we could deem a message as unrecoverable by encrypting it, we would save countless hours trying to remove the message from the Non-IPM subtree.

    Currently it takes 4 hours to turn Single Item Recovery and Litigation Hold off. We then need to increase Deleted Item retention, and stop the managed folder assistant off. Then destroy the message, and put the mailbox back in its original state (another 4 hours)

    If we could leave all of the holds, and Single Item Recovery in place, Delete the message to the Purges folder, then encrypt it we would save a minimum of…

    27 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  10. Content Search - Saved Search review

    How about modifying the UI so that it's not necessary to scroll to the bottom of the saved searches list in order to refresh the list itself?

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  11. Ediscovery Search Results for email metadata should not include ALL documents from SPO

    Currently, defining a Custodian with their mailbox, OneDrive, and maybe even a Team or two in Advanced eDiscovery, then using that custodian as my search location to search for things like kind:microsoftteams, or kind:email, results in a hit on EVERY document in the defined SharePoint sites for the custodian. It should hit on zero.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  12. Where can I find the dates the hold was acknowledged?

    Where can I find the dates the hold was acknowledged?

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  13. Dacabaca in ainte be a in ainte sa faceti nivelele vati uita daca exista vro modalitate de a rezolva nicelul??🧐🧐

    Daca inainte de a lansa nivelul ati putea sa verificati daca exista vreo modalitate de a rezolva nivelul??

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  14. notify user of completed tasks

    send alerts when user actions have been completed. ie, when "add to review set" is complete, email the user who requested the action so we can continue with our internal process.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  15. Advanced eDiscovery - Review set Display after Sorting by Date

    Currently in the review set if the column widths are changed to see more date and then output is sorted on date the screen refreshes, in date order, but the column widths are reverted.
    It would be nice for the column widths to stay at the amended width.

    also, it would nice to be able to sort on other columns.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  16. Need to scroll down completely to get older searches in Content Search

    In scenario where we have more than 500 searches in Content Search, it will only show you last 500 searches. If you need older searches then we have to scroll it down completely then only the older searches would get loaded. Sorting with Last-run also doesn't work. Microsoft to fix this problem.

    24 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  17. Advanced eDiscovery - Export Exchange Content Options

    When exporting review set data as "Loose files and PSTs" under Advanced eDiscovery it should provide the same options that are provided under Core.
    Currently an export from Advanced eDiscovery creates One PST file for each mailbox.

    We request One PST file containing all messages in a single folder.
    It should also allow us to enable deduplication for Exchange content.

    Thank you

    8 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  18. Allows users to cancel jobs in Advanced eDiscovery

    It would be helpful if you could provide a mechanism to stop or cancel jobs in Advanced eDiscovery. Sometimes parameters or requirements change for searches/exports etc and there is no ability to stop, cancel or delete the job, leading to multiple processing jobs taking up space/computation.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  19. exporting format blob

    In order to keep Compliance Portal users from exporting files, We are centralizing the exported documents requests, We will use the Azure blob and it would be nice to have a native file export format (non-loadfile, non-review platform, and non-pst). (e.g. filename.msg) Currently exports to the blob have the md5hash value as the file name that is cross referenced to the load file. The folder structure must also remain intact. Not all exports are loaded into a review platform.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  20. Search by message header in Content Search

    There is currently no way to search for e-mails with specific header values. It would be extremely useful to be able to search message header fields in content searches.

    My specific use case is for security investigations. There are times when we can identify a threat actor's e-mails by a message header value, but we don't know the specific sending or receiving e-mail address or domain.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
← Previous 1 3 4 5 10 11
  • Don't see your idea?

Feedback and Knowledge Base