Solved

User deleted all mail from Google Apps account using Outlook

Posted on 2013-11-15
3
1,239 Views
Last Modified: 2015-03-02
A user using Google Apps Sync with Outlook on their desktop PC has just deleted all of the messages from theit Inbox and all their messages in subfolders (ie mail marked with labels in Gmail)

That has wiped clean Gmail too, so the mailbox has nothing in it

Google Apps support say that they maintain no further copy and that deletion can't be undone.

I don't have the machine in my possession yet, but will get it.  Any ideas what might be possible?  I presume Google Apps Sync created a PST file which held the data, while it's not in Trash or Deleted Items I doubt that the data file has shrunk to zero - so perhaps there's some way of extracting individual messages from a PST?

I have enabled a trial of Google Vault on GA support's advice, apparently it might index the deleted but not yet quite erased data.
0
Comment
Question by:RedLondon
3 Comments
 
LVL 14

Accepted Solution

by:
Allen Falcon earned 500 total points
ID: 39653129
Vault will capture deleted but not yet missing data.  Be advised that Vault is NOT a backup/recovery tool .. it is designed to capture all email activity as an archive for ediscovery purposes.   I strongly recommend getting a Backupify trial going as well.

Through the web UI, you need to log in to the user's account and look in the Trash folder .. quickly, it sweeps data permanently off the system.  The messages may be in the mapped trash folder (no Deleted Items) in Outlook.

GASMO does not use PST files, it keeps a local cache, typically with 1 or 2 GB of the user's mail locally for performance.  Some users set it to 4GB or all mail, but this is rare due to performance issues with syncing all folders every time outlook starts.

In Outlook, if you have it set to empty deleted items up exit, deleted messages are permanently deleted and gone each time you close the software.  Depending on your settings, this may be the case here as well.

Get remote access to the computer ASAP (!!!!!) and see what is going on with the local cache.

Google does have some abilities to recover deleted content (with much less willingness to do so).  If you have a Google Apps Reseller, get them involved -- they should open a case in addition to (and referencing) your case number with Google.


---

We are a Google Apps Premier SMB Reseller.  We can provide you advice and guidance, like above.  We cannot get involved with Google on your behalf without you being a customer of ours.  I am not asking for your business.  Given your situation, I want to be up front about the scope of what we can do.
0
 
LVL 43

Expert Comment

by:Davis McCarn
ID: 39653241
All versions of Outlook prior to 2010 only delete the E-Mails if the user compacts the PST manually.  Deleted E-Mails simply get a flag signifying don't show me anymore.
If you have a PST file of any size, Kernel PST Recovery will recover the E-Mails: http://www.kerneldatarecovery.com/pst-recovery.html
0
 
LVL 11

Author Comment

by:RedLondon
ID: 39671291
Thanks folks.  Vault, enabled about three hours after everything was deleted, had copied everything.

Downloaded the archive as an MBOX file from Vault, opened it with Thunderbird, connected back to the account in question via IMAP and uploaded the emails back to the account

I also see that there is an option in Gmail settings for what to do when deleting mail via IMAP, which Google support tells me affects Google Apps Sync for Outlook's behaviour too, so that deleted email is archived rather than deleted (ie, sent to All Mail).  Obviously someone could still delete via All Mail in Gmail too, but in this instance, having that set would've been sufficient.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Include feature in Outlook 3 37
Outlook - slow response (Exchange 2013) 7 44
Cannot mount Exchange database error: Failed to mount database 5 65
Outlook MailMerge 4 58
What does UTC stand for?  “Coordinated Universal Time” – Think of this as the true time on Planet Earth that never changes with the exception of minor leap seconds here and there to account for the changes in the planet's rotation.   What does th…
Find out what you should include to make the best professional email signature for your organization.
This Micro Tutorial will demonstrate how to use comments in Google Docs. You will learn how to create, edit, and delete a comment.
This Micro Tutorial will demonstrate common damaging and frequent mistakes I see in most analytic audits. Most of them are campaign tagging mistakes, so this video will break it down into simple steps.

912 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now