Solved

Searching for information in mailbox store for lawsuit

Posted on 2011-03-14
6
664 Views
Last Modified: 2012-05-11
I have a Microsoft Exchange Server 2003 SP2 Std. mail box store instance that I need to search accross all mailboxes for certain keywords, phrases and email addresses. This task goes beyond a regular EXMERGE search of the subject line since I need to include 'to', 'from', 'cc' fields, as well as the message bodies. The ultimate goal is to have these emails be compiled in a PST file akin to EXMERGE or other database file so that it can be submitted as evidence in a lawsuit.

My question is whether there is a tool (free or for sale), that one might use for such a purpose. That's 400 points.

Also, perhaps important, perhaps not, I intend to run this on a virtualized instance of a backup of the information store from a year ago (which is the time of focus of this suit). This shouldn't have any bearing on the tool, but I feel I would be amiss to mention it.

Finally, if someone has already gone through this type of a process and can share some best practices, I would be awarding partial points (100) for that as well.
0
Comment
Question by:KPI1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
6 Comments
 
LVL 43

Expert Comment

by:Amit
ID: 35137202
This is called E-Discovery Project. I have designed the full process for E-Discovery project. You can use the Advance find option in  Outlook and can search according to key words required for e-discovery. Below are the steps.

First attach a PST to a mailbox
Use the advance search option
Copy the result to PST file and here you have the result for E-discovery.

If you need more details let me know.
0
 

Author Comment

by:KPI1
ID: 35137575
OK, that is one way and I appreciate the thought. However, it is not feasible for the scale of my problem. I apologize, but I should have mentioned that I have 92 mailboxes and 40 search terms, so that would mean I would have to first exmerge 92 PST files out of my mailbox store, then mount them in Outlook, then run 40 searches for each mailbox, all manually.

What I am looking for is to do this on a more global level, as you may understand.
0
 
LVL 43

Accepted Solution

by:
Amit earned 250 total points
ID: 35137655
I have 12000 + mailbox. I know, it is a manual work. But for any forensic test, you need to dig deep. This issue is now resolved in Exchange 2010, with multiple search option http://technet.microsoft.com/en-us/library/dd335072.aspx

As far as, I know there is no shortcut for Exchange 2003
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 17

Assisted Solution

by:lucid8
lucid8 earned 250 total points
ID: 35137846
1. You could export all of the data into PST format and then use a tool like www.X1.com to index all the data and do your searches within that tool.  The results can then be copied to a folder or zip file in MSG format.

2. if the above doesn't work for you and you are interested in other options check my profile for more about myself and company
0
 

Author Closing Comment

by:KPI1
ID: 35141705
I am accepting both answers. I was hoping for a magic bullet which apparently doesn't exist. So ended up pulling my archive edb into Ontrack (a program to mount EDBs), then exported all emails into 1 PST file (not 92), so that's a bit better. I will now use either Outlook or X1 (or other third party tool) and search this immense PST file for my keywords.

I achieved the goal of reducing my manual labor, and finding a way to search in more than the subject line, so I appreciate both thoughts and comments.
0
 
LVL 17

Expert Comment

by:lucid8
ID: 35141726
Thanks for the points and should you want to contact me about the other options check my profile for my contact and company information since what you are trying to do is possible
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains how to install and use the NTBackup utility that comes with Windows Server.
This article will help to fix the below errors for MS Exchange Server 2013 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question