Dealing with PST Files
Chances are, if you read my site, you also read the Exchange team blog. This means you’ve seen the PST Capture Tool! I’ve had a chance to work with this tool for a little while now and have found it to be a delight!
“PSTs are bad M’kay?“
This is a line we’ve all recited a time or two (ok maybe not exactly that line), but do we even know why? Are we just parrots, or do we actually have a reason for condemning this hugely prolific file format?
Let’s start by acknowledging that PST files aren’t all bad. M’kay? If you run Outlook at home, or if you use IMAP/POP-based accounts (Gmail, Hotmail, etc) at work, using a PST file can actually be a good idea. While it is possible to direct internet mail to the Exchange mailbox, this would create several problems:
- Wasting expensive Exchange disk space
- Potential violation of company policies
- Internet mail is now subject to corporate retention (and discovery!) policies
- Makes moving to a job more painful
I’d even go so far as to say you might want to use PST files for archiving corporate email! If you run a small shop – or a big one that isn’t subject to any retention policies. A group policy configuring AutoArchive (and a note to your users) might be a good way to implement spring cleaning in your Exchange data stores.
See, PST files actually can serve a purpose!
Then there is the other side of the coin:
In most situations, PST files represent unmanaged storage of email. For someone who is charged with administering an email environment, this means we aren’t able to do our job. If users begin to rely on something that we aren’t taking care of; what happens when it breaks? We’ve all had the uncomfortable task of telling someone we can’t get their data back at least once in our careers. It doesn’t make for fun times.
More important than our comfort; many organizations are subject to regulations which require them to turn email data over to the courts upon request. A judge wont want to hear your sob story about how PST files aren’t searchable, and how you’re going to have to look across the whole network by hand to find that email thread.
I recently completed an Exchange 2010 deployment for a government organization that was subject to such legislation. Once we activated the Personal Archive for their users, they decided to put the kibosh on PST files. To enforce this, we laid out a three phased approach:
- Prevent the users from making new PST files
- Prevent the users from adding content to existing PST files
- Use the abovementioned PST Capture Tool to import PSTs as necessary
The first two steps were quite simple to accomplish. Outlook reads a registry value called PSTDisableGrow (REG_DWORD). We deployed a GPO to implement this as follows:
Set PSTDisableGrow to “1” (without the quotes). This will allow users to mount PST files in Outlook, but it will not allow any new content to be placed within. Don’t worry about overkill here. I used a single GPO for all 3 settings. Outlook version X doesn’t care about extra registry settings in Outlook Y’s key.
PSTDisableGrow has some siblings; read more about DisablePST, DisableCrossAccountCopy and DisableCopyToFileSystem here.
That’s all for now, have a great week!