Skip to main content
Skyhigh Security

Create an On-Demand Scan for Microsoft Exchange Online

NOTE: On-Demand Scans are only available with API-based deployments. Proxy-based deployments are not compatible with On-Demand Scans.

Create an On-Demand DLP Scan to scan your Microsoft Exchange Online resources. 

To configure an On-Demand DLP Scan:

  1. Go to Policy > On-Demand Scan.
  2. Click Actions > Create a Scan.
  3. The Scan Creation Wizard is displayed. On the General Info page, enter the following:
    • Scan Type. Select DLP & Malware.
    • Name. Enter a unique identifier so that you can rerun the scan later.
    • Description. Enter an optional description for the scan. 
    • Service Instance. Select the cloud service instance you want to scan.
      clipboard_e6df04ede6488eb53e886e924c1213359.png
  4. Click Next
    clipboard_e801769123abe71460ae6dfdcd6b34b7c.png
  5. On the Select Policies page, select the available policies to use for your scan type. 
  6. Click Next
    clipboard_ef36b813146c3770ba0bc0ad3cf124709.png
  7. On the Configure Scan page, configure the scope and users for your scan. 
    • Data Scope. 
      • Full. Scans all content every time the scan is run. The first time you run a scan, you must use Full mode. 
      • Incremental. Scan only content that has changed since the last successful scan. For details about Incremental mode, see About On-Demand Scans
      • Scan Dates. Select All, to scan all data. Or select Last X Days to limit the scan to the specified time period. 
      • Email Folders. Select the required folders to scan for violating content in the email.
    • Users. 
      • All Users. Scan all users. 
      • Include Specific Users. To include only specific users, select User Groups, a Predefined Dictionary, or enter users manually in a comma-separated list. 
      • Exclude Specific Users. To exclude only specific users, select User Groups, a Predefined Dictionary, or enter users manually in a comma-separated list. 
  8. Click Next
    ods_wizard4_3.9.png
  9. On the Schedule Scan page, select the schedule for your scan to run:
    • None (On-Demand Only). Run the scan once now.
    • Daily. Run the scan once a day. Configure the time and time zone. 
    • Weekly. Run the scan once a week. Configure the day, time, and time zone. 
  10. Click Next
    clipboard_e4ba01f179a56b807f4632f99bf1cc5ce.png
  11. On the Review & Activate page, review your settings for the On-Demand Scan, and click Save.  Or click Back to make changes. 

Once a scan is completed, you can view the results, or rerun the scan anytime on the Policy > On-Demand Scan page. 

View policy incident violations on the Policy Incidents page. 

Limitation

When you run On-Demand Scan on disabled mailbox accounts, we can't fetch details from mailboxes that are disabled. So we do not support ODS for disabled mailbox accounts in Exchange Online.

More Information

For Malware and S3 Bucket scans, see:

  • Was this article helpful?