Put a legal hold on a site

Sometimes a request comes in to put a legal hold on a site. The best way to ensure that no changes are made to a site in that case is to do the following:
This process requires that two people with different roles are involved:
  1. A Collaborate
    System Admin
    and
  2. A
    non System Admin
    who is involved in the matter
Take the following steps:
  1. Make the non System Admin a Site Administrator of the site
  2. The non System Admin should then enable password protection on the site, adding a secret password. The password should not be shared with any Collaborate System Admin. (The non System Admin may share the password with another person on their team, if they like, so the password is not accidentally lost.).
  3. In the presence of the non System Admin (or another user who knows the password), a System Admin should then attempt to access the site, but permit the non System Admin to enter the site password manually on behalf of the System Admin.]
  4. The System Admin will then set the site status to Read Only and then log out of Collaborate
Now the non System Admin can access all of the content in the site (including performing bulk downloads) but cannot make any changes to the site without a System Admin first changing the site status back to Active or Preparation. On the other hand, a System Admin cannot access the content and cannot change the site to another status without the non System Admin providing them with the password.
In other words, the approach requires two people (or two roles) to make any changes to the site subject to the hold request.