Home > Glossary > Microsoft 365 Administrator > eDiscovery (Standard/Premium)

📖 What is eDiscovery (Standard/Premium)?

eDiscovery is the process of identifying, collecting, and preserving electronic information for legal cases. Microsoft 365 offers Standard and Premium versions, with Premium providing advanced features like legal holds, custodian management, and predictive coding for larger datasets.

🥋 Sensei Says:

"Focus on 'Legal Hold' functionality, which prevents users from permanently deleting items that are subject to a legal investigation."

📚 Certification: Microsoft 365 Administrator (MS-102)

🔑 What are the Key Concepts of eDiscovery (Standard/Premium)?

  • Legal Holds ensure that data in mailboxes and SharePoint sites is preserved and cannot be permanently deleted by users during an active investigation.
  • Standard eDiscovery provides basic search and export capabilities, whereas Premium adds advanced tools like custodian management and review sets for complex litigation.
  • Content Search serves as the underlying mechanism for eDiscovery, allowing administrators to locate specific information across Exchange, SharePoint, OneDrive, and Teams.
  • Custodian Management in Premium eDiscovery simplifies the process of identifying and grouping all data sources associated with specific individuals involved in a case.
  • Review Sets in Premium allow legal teams to analyze, tag, and filter documents directly within the Microsoft Purview portal before exporting them.

🎯 How does eDiscovery (Standard/Premium) appear on the MS-102 Exam?

You may be asked to recommend a solution for preserving data for a legal case where users must be prevented from permanently deleting their emails; you should identify Legal Hold as the primary mechanism.

A scenario might describe a complex legal requirement involving multiple custodians and the need to tag and review documents within the portal; identify Premium eDiscovery as the correct tool.

Expect questions about the difference between a simple Content Search and an eDiscovery case, specifically focusing on the requirement to preserve data via holds for legal compliance and long-term preservation.

❓ Frequently Asked Questions

Where is data stored when a Legal Hold prevents its permanent deletion?

For Exchange, items are moved to the Recoverable Items folder. For SharePoint and OneDrive, items are moved to the Preservation Hold library. This ensures data remains discoverable by admins while remaining hidden from the end user.


Can I use Premium eDiscovery features with a Standard license?

No, Premium eDiscovery requires specific licensing, such as Microsoft 365 E5. While Standard features are available in lower tiers, custodian management and review sets are exclusive to the Premium offering.

Related Terms from Microsoft 365 Administrator

📝 Related Study Guides

Comparison 8 min read

CISSP vs CISM: Which Certification Should You Pursue in 2026?

Choose CISSP if you want broad technical security expertise across eight domains, including cryptography, network security, and software development. Choose CISM if you're focused on information security management, governance, and risk management from a leadership perspective. CISSP is ideal for hands-on security architects, while CISM is designed for security managers and directors.

Career Guide 9 min read

The IT Certification Roadmap: Where to Start in 2026

Start your IT certification journey in 2026 with CompTIA A+ for general IT foundations, then branch into networking (Network+), cybersecurity (Security+), or cloud computing (AWS Cloud Practitioner or Azure Fundamentals) based on your career goals. Each path leads to advanced certifications like CISSP, AWS Solutions Architect, or CISM within 2-3 years of focused progression.

Comparison 10 min read

CISSP vs CISM: Which Certification Should You Pursue in 2026?

The CISSP is a broad, technical-to-managerial certification focusing on security operations and architecture across eight domains. In contrast, CISM is a specialized management certification centered on governance, risk management, and program development. Choose CISSP for comprehensive security expertise and CISM if you are pivoting specifically into security leadership and governance roles.

🧠

Test Your Knowledge

Think you understand eDiscovery (Standard/Premium)? Put it to the test with our practice exam.

Try 10 Free Questions

⭐ 1,000 expert-curated questions available with Premium

Upgrade Premium