A. The best practice is to avoid this kind of requirement. I'm not kidding—the overhead of making your Exchange Server system compliant with these laws is pretty serious. Your best bet is to investigate a system such as Compaq's Enterprise Vault or CommVault’s CommVault line of products. These products can store every email message ever generated (usually on optical media) and keep an up-to-date index so that you can find even very old messages. As you might expect, though, the products are expensive and complicated. Happy hunting!