Solved

retrieve deleted emails from outlook archive file

Posted on 2013-01-09
7
264 Views
Last Modified: 2013-04-26
long shot and long story short, i have a user that has deleted emails out of one of his outlook archive files.  is there anyway to get those back?  i have searched around but can not find out what happens to items that are deleted from an archive file.   its a win 7 pro 32bit system with outlook 2003 and exchange 2003.  any help would be appreciated.
thanks
Mike
0
Comment
Question by:sonvolt
  • 2
  • 2
7 Comments
 
LVL 90

Expert Comment

by:John Hurst
Comment Utility
As far as I know, when emails are deleted from an archive, and if they have also  been deleted from the Deleted folder, then they are gone.

Since email is very current, I think restoring a backup would be out of the question.

So I think the user has lost those emails. .... Thinkpads_User
0
 
LVL 14

Expert Comment

by:luconsta
Comment Utility
If the archive is on a local PST file then you may have a chance - I have using the following procedure for a long time ago and in more than 95% of cases the recovery was successful: Recover deleted Outlook e-mail by corrupting the PST file.

But if the archive was on the Exchange server then only the Exchange Admin(s) will could help you if they have a backup.
0
 

Author Comment

by:sonvolt
Comment Utility
it is an archive .pst file on the local hard drive.  so I hope to have time tomorrow to try this and maybe a few other things I found about recovering deleted items in archive .pst files.  Just hoping my theory of how these particular emails disappeared, which is he accidentally deleted them.  will keep you posted.  thanks!
Mike
0
 

Author Comment

by:sonvolt
Comment Utility
well, no luck.  tried scanpst.exe, recoverall and tried to corrupt the file.  it does the repair but the deleted items folder is empty. the odd thing is that it says it found over 19000 items.  there are just over 11000 items in the sent folder but the deleted items folder is empty.  nothing else.  I wonder where and/or what the 8000 items are.  that would probably be close to the number of files that would have been in there if I had to guess.  not going to waste too much more time but any other thoughts are welcome.

thanks
Mike
0
 
LVL 14

Accepted Solution

by:
luconsta earned 500 total points
Comment Utility
Unfortunately the trick with "corruption then run scanspt" is working when is done ASAP after deleting the objects from PST file (even if done with "shift + delete") otherwise the successful rate is dropping very fast.

The messages should be recovered to their initial place, except when deleted (with "simple deletion" not with "shift + delete") and then emptied the "recycle bin" - in this case the recovered items should be in the "recycle bin".

If between deletion and recover where some other actions especially "compact PST" or other element were added to the archive, in this case the recover may not work. If you have an older backup closer to the moment when the deletion occur you may try the procedure of "corruption and recover" on that PST (or maybe you have a complete backup that include the missing files and you just could import them in the current PST archive).

And finally one other idea: did you try search for one of the missing message?... may not be deleted - just moved into another folder by mistake.
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

My experience with Windows 10 over a one year period and suggestions for smooth operation
Sometimes Outlook might have problems sending a message. There may be various causes- corrupted PST, AV scanner etc. The message, instead of going to the Sent Items folder, sits in the Outbox indefinitely. To remove it you can use a free tool cal…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now