undeleting messages

I need to recover emails from a user involved in illegal activities.  Does anyone know how to accomplish this?
gferrisAsked:
Who is Participating?
 
Gregory MillerConnect With a Mentor General ManagerCommented:
Backups are not going to be a good idea since you will reset the entire mail database for all users to the point in time you choose. If you need to perform a restore from tape, build a temporary offline server that you can recover to, thus not disrupting your production server.

Hopefully, Gates & Co. will not audit you during this process...<grin>

-greg
0
 
geoffrynCommented:
Do you have backups?  How long is your deleted item retention set for?
0
 
gferrisAuthor Commented:
I have backups.  I checked the retention file.  Where can I find the retention file?
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
geoffrynCommented:
http://support.microsoft.com/support/kb/articles/Q228/9/34.ASP?LN=EN-US&SD=gn&FR=0&qry=Q228934&rnk=1&src=DHCS_MSPSS_gn_SRCH&SPR=ECH

The procedure is slightly different in office 2000 or XP.  In those versions, you highlight your deleted items folder and click Tools--->Recover Deleted items.

Obviously, you must be logging into the users mailbox.
0
 
gferrisAuthor Commented:
I have backups.  Where is the retention file?
0
 
bluezoo7Commented:
If the user does not store mail on the server (using .PST on local workstation) backups won't be much help.

BZ7
0
 
slink9Commented:
Backups are probably the best bet depending on how far you need to go back.  My deleted retention time is set for 3 days for everyone but myself.  When I delete stuff I want it gone.  Your deleted items retention time can be discovered under Recipients in your Exchange Admin program.  This will help if individual retention times are set.  If not, the system default is under Servers/Public Information Store.
Backups will go back as far as you have them, though.
0
 
gferrisAuthor Commented:
Thank you for your help!
0
 
Gregory MillerGeneral ManagerCommented:
Thanks & Good Luck!
-greg
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.