{"id":18723,"date":"2023-07-12T06:59:51","date_gmt":"2023-07-12T06:59:51","guid":{"rendered":"https:\/\/www.insentragroup.com\/au\/insights\/uncategorized\/how-to-manage-the-rif\/"},"modified":"2025-05-30T06:41:08","modified_gmt":"2025-05-30T06:41:08","slug":"how-to-manage-the-rif","status":"publish","type":"post","link":"https:\/\/www.insentragroup.com\/au\/insights\/geek-speak\/professional-services\/how-to-manage-the-rif\/","title":{"rendered":"How to Manage the RIF"},"content":{"rendered":"\n<p>In previous posts, we discussed how to increase the quota and enable retention policies. We also saw what could be done to solve situations where the 100 GB quota has been reached. If you haven\u2019t already, check out my <a href=\"https:\/\/www.linkedin.com\/posts\/priom-mashuk-8883b9a1_exchangeonline-microsoft365-activity-6962609304222724097-XOEp?utm_source=share&amp;utm_medium=member_desktop\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">LinkedIn post<\/a> and Part 1 of this blog series where I take you through increasing the <a href=\"https:\/\/www.insentragroup.com\/au\/insights\/geek-speak\/professional-services\/breaking-the-100gb-barrier-solutions-for-expanding-your-rif-limit-in-microsoft-365\/\" target=\"_blank\" rel=\"noreferrer noopener\">RIF quota and enabling retention policies<\/a>.\u00a0<\/p>\n\n\n\n<p>Quick recap &#8211; if the RIF ever become full, it would impact the useability and some basic features of email. This included the most fundamental ability \u2013 to delete and clean up items in your Exchange mailbox.&nbsp;<\/p>\n\n\n\n<p>You might be wondering what measures can be taken to better manage the RIF. Or maybe you\u2019re wanting to know what the best practices for the RIF are. Honestly, if you\u2019ve read my first post on this, you\u2019ve already done most of the work. The final management tool available is a bit overkill and not something you would want to do unless you\u2019ve explored all the possible risks behind it.&nbsp;<\/p>\n\n\n\n<p>Let\u2019s look at why it\u2019s not recommended to manage the RIF beyond increasing its quota.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">PURGES OVERVIEW<\/h2>\n\n\n\n<p>As the Purges location of the RIF is completely hidden from the end user, it\u2019s almost impossible to manage the folder effectively from a user perspective. This is by design, as the purpose of the Purges is to ensure data is retained for a set period (or indefinitely) for litigation purposes.&nbsp;<\/p>\n\n\n\n<p>Due to this, Microsoft has provided the permissions to view and manage the contents of the Purges location by the means of eDiscovery. This also gives them the ability to clean the location if needed (although this requires further permissions and has risks involved \u2013 if you want to learn more, feel free to contact me directly).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">RIF MANAGEMENT<\/h2>\n\n\n\n<p>The most ideal solution to managing the RIF is to enable Auto-Expanding Archiving (AEA) for all users so that micromanagement will not be required. There is also another handy switch that can be executed using PowerShell which is the \u201cStart-ManagedFolderAssistant -identity &lt;mailbox&gt; -HoldCleanUp\u201d switch. This switch will clean up any duplicates that are retained in the RIF which resulted from multiple versioning of an item.&nbsp;<\/p>\n\n\n\n<p>Since we have already explored how to enable AEA, let\u2019s look at the risk I was mentioning above. When retention policies are enabled, no item can be purged for the duration of the retention period\u2026and this is final. You cannot, in no way, delete an item from Exchange if it\u2019s under retention. I\u2019m repeating this because the key point here is that the mailbox needs to be under retention. So, to delete something from a mailbox, you will need to remove or exclude that mailbox from the retention policy. This is not advisable as once it\u2019s removed, it\u2019s a free game for any deletions to occur. Even permanently deleting an item. Sure, you may have the best and most innocent of intentions when removing the retention so that an administrator can delete or clean up the RIF for a mailbox. However, end-users are another matter and most of the time you will not have control over this. I think you understand what I\u2019m trying to say here but just in case, picture this scenario:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Mailbox A\u2019s RIF needs to be cleaned by removing some data from the RIF&nbsp;<\/li>\n\n\n\n<li>An admin has removed the hold or retention policy so that they can purge the data&nbsp;<\/li>\n\n\n\n<li>The admin then purges the data&nbsp;<\/li>\n\n\n\n<li>The admin re-enables the retention or hold for the mailbox<\/li>\n\n\n\n<li>The end&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>Seems all great right? The task was achieved. But let\u2019s look at some additional events that could be unfolding at the same time:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Mailbox A\u2019s RIF needs to be cleaned by removing some data from the RIF&nbsp;<\/li>\n\n\n\n<li>An admin has removed the hold or retention policy so that they can purge the data&nbsp;<\/li>\n\n\n\n<li>The admin then purges the data\n<ul class=\"wp-block-list\">\n<li>User 1 from Mailbox A deletes some emails as it\u2019s cleaning time for them and they need to make that mailbox look pretty&nbsp;<\/li>\n\n\n\n<li>They decided to empty the recycle bin in the mailbox (let\u2019s face it \u2013 don\u2019t we all just like seeing that full bin empty on our desktop, or is it just me?<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The admin re-enables the retention or hold for the mailbox<\/li>\n\n\n\n<li>The end&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>So, this time after the admin did the needful and purged the data then re-enabled the retention, the end-user also removed some items and it was a hard delete too so no restoring can happen. The admin would not be aware of this and this action would most likely fall through the cracks. When the time comes for eDiscovery and litigation of this mailbox, certain information will be missing, which could be crucial to the case. Since the mailbox was not under retention at the time of deletion, there is no way to recover these items.<\/p>\n\n\n\n<p>Therefore, it is inadvisable to clean or purge data from the RIF manually. Instead, utilise the -HoldCleanUp switch from PowerShell where possible. For further information, you can explore the details of the &#8220;<a href=\"https:\/\/learn.microsoft.com\/en-us\/powershell\/module\/exchange\/start-managedfolderassistant?view=exchange-ps&amp;viewFallbackFrom=exchange-ps%22%20%5Cl%20%22-holdcleanup\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">-HoldCleanUp&#8221; command<\/a>.<\/p>\n\n\n\n<p>Before I sign off, the key takeaways here are:&nbsp;<\/p>\n\n\n\n<ol class=\"wp-block-list\" start=\"1\">\n<li>Enable Retention Policy \u2013 get that free space to your RIF<\/li>\n\n\n\n<li>Enable Auto-Expansion Archiving \u2013 honestly, it\u2019s amazing and somewhere down the line, you will enable this any way to manage quota \u2013 so start early!<\/li>\n\n\n\n<li>Don\u2019t remove retention for any clean-ups \u2013 with AEA enabled early you shouldn\u2019t even need to do this&nbsp;<\/li>\n<\/ol>\n\n\n\n<p>Let me know how you go applying these solutions. As always, if you have any feedback or questions, please <a href=\"https:\/\/www.insentragroup.com\/au\/contact\/\" target=\"_blank\" rel=\"noreferrer noopener\">reach out!<\/a>\u00a0<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">&nbsp;<\/h2>\n","protected":false},"excerpt":{"rendered":"<p>Learn how to effectively manage the RIF (Recoverable Items Folder) by enabling retention policies, using PowerShell, and avoiding manual purges. Discover best practices and understand the risks involved. Apply these solutions for improved mailbox management.<\/p>\n","protected":false},"author":9,"featured_media":18724,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[25],"tags":[],"class_list":["post-18723","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-professional-services","entry"],"_links":{"self":[{"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/posts\/18723","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/comments?post=18723"}],"version-history":[{"count":1,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/posts\/18723\/revisions"}],"predecessor-version":[{"id":18725,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/posts\/18723\/revisions\/18725"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/media\/18724"}],"wp:attachment":[{"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/media?parent=18723"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/categories?post=18723"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/tags?post=18723"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}