About Search & Destroy Parent topic

Search & Destroy provides administrators the ability to search and remove mailbox components (for example, email messages, meetings, tasks) from Exchange mailbox servers. Administrators can specify detailed search criteria to focus searches on specific keyword matching, users, mailboxes, and component creation dates.
ScanMail provides administrators with Access Control roles specific to Search & Destroy. Only users assigned to one of the following roles can access Search & Destroy:
  • Search & Destroy Administrator: Can search for, monitor, and delete undesirable content from both a user’s mailbox and the Exchange server
  • Search & Destroy Operator: Can search for and monitor undesirable content in both a user’s mailbox and the Exchange server
Note
Note
By default, ScanMail does not assign any users, including the Administrator, to the Search & Destroy administrator role. Administrators must assign users access to Search & Destroy manually. For details, see Configuring Search & Destroy Access Accounts.
Search & Destroy employs an Exchange service account that performs keyword-matching searches on mailbox components based on administrator-configured search criteria and stores copies of the matches in an Exchange discovery mailbox. Administrators can review the component matches to determine if the content is undesirable. ScanMail can then delete the undesirable search results from the discovery mailbox and the mailbox of the offending user.