Question

How do I configure FTK Central to collect from SharePoint 365?


 

Answer

1) Create a SharePoint Service Account

  1. Sign in to the O365 Admin console at https://admin.microsoft.com as an administrator
  2. Under User Management click "Add user"
  3. Specify a name and credentials for the new user.
  4. Expand Roles and select "Customized administrator", then check "SharePoint administrator"
  5. Click "Add" to create the new user

 

2) Grant Permissions Using either the Modern or Classic SharePoint Admin Center

Modern SharePoint Admin Center:

  1. Login to your SharePoint Admin page (https://-admin.sharepoint.com) as an Administrator
  2. Under Sites on the left, click "Active sites"
  3. Do the following for everysite you wish to be able to collect from:
    1. Highlight the desired site
    2. Click "Owners" at the top and select "Change admins"
    3. Add your newly created service account user and click "Save"
      Note: Sites may be listed in eDiscovery even if the specified account is not an admin of that site. However, collections against these sites will fail until you add the account as an admin.

 

Classic SharePoint Admin Center:

  1. Login to your SharePoint Admin page (https://-admin.sharepoint.com) as an Administrator
  2. In the menu on the left, click "Classic SharePoint admin center"
  3. On the left, click "site collections"
  4. Do the following for everysite you wish to be able to collect from:
    1. Highlight the desired site
    2. Click "Owners" at the top and select "Manage Administrators"
    3. Add your newly created service account user under "Site Collection Administrators" and click "OK"
      Note: Sites may be listed in eDiscovery even if the specified account is not a Site Collection Administrator of that site. However, collections against these sites will fail until you add the account as a Site Collection Administrator.

 

3) Add a SharePoint Connector in FTK Central

  1. Log in to FTK Central and click Data Sources.
    https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/69009875405/original/2021-06-08_12_59_14-Window__1___1_.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAS6FNSMY2XLZULJPI%2F20210926%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210926T163653Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=46302b03f1ec62ef23d7da4174ea434abe84e3c0ba353a83d2fed5e2a18495ab 
  2. Click SharePoint.
  3. Click Add SharePoint.
  4. Enter the Web Application URL.
The value of this field is typically be formatted as the following:
http://[Address]:[Port]

where [Address] is the host name or IP address of the system hosting the SharePoint Web
Application. You can optionally use the [Port] address if you are connecting to a specific
SharePoint web application. If you provide a URL that does not specify the port, port 80 is
used.

If you specify a root path, such as http://server_name/, when you run the Collection, you can select SharePoint site URLs that may exist within sub sites off of the root path. 

For example, you could include URLs of any blogs, discussion boards, document libraries, or wikis within the specified root path.

If you specify a SharePoint path to a particular organization’s department, you can include the blogs, discussion boards, document libraries, or wikis just within that department site. For example, the path may look like http://server_name/sites/marketing


  1. Enter the Locality.
(Optional). Lets you type the name of the desired locality to associate this server to a
specific location or IP range of nodes.


  1. Enter the Domain.
(Optional) If the user account entered in the Username field is a domain user account, the
domain must be specified; otherwise leave this field blank.


  1. Enter the Username.

Lets you specify the username of an account that is granted Full Read access to
 SharePoint.


  1. Enter the Password.
  2. Repeat the same password in Confirm Password field.
  3. Click Save.