Exchange 2013 provides the ability to search through mailboxes for content that might be required during an investigation, such as a violation of organizational policy or regulatory compliance, or due to a lawsuit. Although this can be done through the Exchange Admin Center, you may need to do this from the command line. In this recipe, you'll learn how to perform discovery searches from the Exchange Management Shell.
In order to perform a discovery search, you'll need special permissions. By default, no one, not even the user who installed Exchange 2013, is assigned the right to perform searches. Using an account that is a member of the Organization Management role group, you can assign the required permissions in one of the two ways, and then perform a discovery search. These tasks are outlined in the following steps:
For example, if you are using the administrator account that is already a part of the
Organization Managementrole group, you can...