[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4025
  • Last Modified:

How to restore a deleted email from enterprise vault?

Need some help over here. I'm using the following - Backup Exec 2010 R2, Enterprise vault 10.0, Exchange 2007 SP3. One of my users have deleted an email that is archived (the actual email as well as the shortcut from outlook). The email is no longer in enterprise vault. I'm using Backup Exec 2010R2 with enterprise vault agent. Is there a possiblitity of restoring that email through tape backup?
0
totallypatrick
Asked:
totallypatrick
  • 3
  • 3
  • 2
  • +3
2 Solutions
 
Madan SharmaConsultantCommented:
Yes It is possible to recover a single mail from backup and  You can  also recover hard deleted emails from your exchange server by using outlook or owa
to recover from outlook just click on tools and select recover deleted items and to recover form owa just go to options and select deleted items.
by default exchange dumpster setting you can recover 14 days old deleted items from here and also can be configure as your business requirements

2nd option is recover a single mail from backup. To recover a mail from backup just create recovery storage group database  by using Database Recovery Management Tools and restore your backup in this database storage group. To mount this database you may need to run eseutil on this database once it will be in clean shutdown state then mount it and search your user mail and merge it in his/her existing mailbox.
Also go through this link for more help:- http://www.msexchange.org/tutorials/Working-Recovery-Storage-Groups-Exchange-2007.html
0
 
Hendrik WieseCommented:
If you say that the email was archived - Was it on a local .pst?

OPTION1
If it was deleted from the local exchange account you could try the following:
1. In outlook select deleted items folder
2. Now click Tools > Recover Deleted Items
3. Browse from the list and see if you can find the email

OPTION2
Try recovering it from OWA - http://www.msexchange.org/articles_tutorials/exchange-server-2007/mobility-client-access/the-new-outlook-web-access-features-exchange-2007-sp1.html

OPTION3
You can use the tape backup to restore the entire mailbox to a test user and then move the mail from the one mailbox to the other.
0
 
andyalderSaggar makers bottom knockerCommented:
You guys aren't reading the question, the email's deleted from Enterprise Vault, not Exchange.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
Hendrik WieseCommented:
@andyalder: but the email was originally in exchange, so it would definitely be an option to try and recover it from there first.
0
 
totallypatrickAuthor Commented:
The email was deleted from Enterprise Vault. Exchange just have a shortcut pointing to it. The shortcut as well as the mail that resides in EV has been deleted. Any way to restore it?
0
 
Duncan MeyersCommented:
Yes - it can be restored providing you have a backup. But are you sure it's been deleted from the vault? Most archive policies usually prevent the user from deleting the item (until retention time has expired) even if they've deleted the shortcut. You can use Archive Explorer or Search Archives either from the Outlook plug-in or from the web UI. I'm assuming that EV has been configured using best practice. Go to http://evserver01.yourdomain/EnterpriseVault/ArchiveExplorerUI.asp or SearchVault.asp and have a good search for the item.
0
 
totallypatrickAuthor Commented:
@meyersd: yes it has been deleted from the vault as we have given users the rights to do so earlier. I am using Backup Exec 2010 to backup the EV. However unlike Exchange backup which can show individual messages, EV doesnt so I'm wondering is there a possiblilty of restoring from EV's backup
0
 
Duncan MeyersCommented:
Yes - you'll need to restore the vault into a new vault store and extract the mailbox that contained the deleted item and export it into a PST. It can be done but it's not going to be easy and it's a massive pain. I will dig out the procedures an post them once I get on-line (currently on an iPhone which doesn't lend itself to this sort of thing.. :-) )
0
 
totallypatrickAuthor Commented:
thanks a lot meyersd
0
 
andyalderSaggar makers bottom knockerCommented:
Can't you just restore the whole vault from the latest backup? You wouldn't lose recently archived emails because EV doesn't remove them from Exchange until the vault has been backed up, it just hides them.
0
 
Duncan MeyersCommented:
Sorry to take so long to get back to you  on this...

The simplest way would be to build a VM, restore the vault store - procedures here: http://www.symantec.com/business/support/index?page=content&id=DOC4403), the extract the user's vault into a PST and let them find the item. You'll need three to four days to do this.

Alternatively, if you know the date and time of the item that was deleted, you can dig down into the directory structure in the vault - but this method is likely to be pretty time-consuming if you're in a larger environment.
0
 
exile1337Commented:
The only way to recover a deleted file from enterprise vault is to restore the users mailbox from a surtain date.
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

  • 3
  • 3
  • 2
  • +3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now