About Search & Destroy Parent topic

Search & Destroy provides administrators the ability to search and remove mailbox components (for example, email messages, meetings, tasks) from Exchange mailbox servers. Administrators can specify detailed search criteria to focus searches on specific keyword matching, users, mailboxes, and component creation dates.
ScanMail provides administrators with an Access Control role that is specific to Search & Destroy. Only users assigned to the Search & Destroy administrator role can search for, monitor, and delete undesirable content from both a user’s mailbox and the Exchange server.
Note
Note
By default, ScanMail does not assign any users, including the Administrator, to the Search & Destroy administrator role. Administrators must assign users access to Search & Destroy manually. For details, see Configuring Search & Destroy Access Accounts.
Search & Destroy employs an Exchange service account that performs keyword-matching searches on mailbox components based on administrator-configured search criteria and stores copies of the matches in an Exchange discovery mailbox. Administrators can review the component matches to determine if the content is undesirable. ScanMail can then delete the undesirable search results from the discovery mailbox and the mailbox of the offending user.