Our community of experts have been thoroughly vetted for their expertise and industry experience.
Published:
Browse All Articles > New-MailboxSearch Powershell command for Searching and extracting Mails from Exchange 2013 Journaling server.
New-MailboxSearch Powershell Command and step by step approach to Search and Extract Emails form Exchange 2013 Journaling server.
In today's world the Exchange mailing platform has become a business-critical enterprise application, and mails stored on a MS Exchange server can be used in many scenarios. One such scenario you might come across is to search and extract mails from the Exchange Journaling infrastructure for compliance or legal purposes, as e-mails are treated as evidence in today's world.
I have come across this kind of scenario and thought I could share some insight on how this can be achieved.
My current infrastructure has three Exchange 2013 multi-role servers and one Journaling server. We only journal mails that are sent and received externally.
I have received a request to search all mails that had been sent to a particular domain (for example, @Gmail.com) from the Exchange 2013 journaling server and extract them.
If you have to modify the search you can use the set-mailboxsearch command with a new query.
This can be used with different parameters in search query:
-SearchQuery "attachment:'.zip' (All mails with attachment having .zip files)
-SearchQuery "attachment:'.zip' Received:>4/22/2013" (All mails with attachment having .zip files with time range)
If you have an Exchange 2010 environment you can use the Search-Mailbox command with a similar search query.
Comments (1)
Commented: