Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Accidental Delete of Messages Exchange 2010 using Search-Mailbox

Posted on 2014-01-29
6
Medium Priority
?
839 Views
Last Modified: 2014-01-30
One of our techs was doing message archiving and got confused on a greater than and less than sign. and deleted an entire years worth of messages from our HR managers mailbox. Unfortunately the exchange database had not been backed up for a week. Before I go through the restore process I have been trying to recover those messages using the following two commands.

Search-Mailbox hrmanager -SearchDumpsterOnly -TargetMailbox "RecoveryMailbox" -TargetFolder "HRManager" -LogLevel Full

I also tried:

Search-Mailbox hrmanager -TargetMailbox "RecoveryMailbox" -TargetFolder "HRManager" -LogLevel Full

Each one gives me a bunch of history from the mailbox but does not give me the 2013 year I am looking for. I also did it with specifying messages only received in 2013 and did not produce any results.

Our retention policy on the server is set to 180 days on deleted items. Can I recover these messages without going to the backups? I always though you could but now have not been able to do it so am perplexed.

It is Exchange 2010 SP3 Standard.

Thank you!
0
Comment
Question by:knoots
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 

Author Comment

by:knoots
ID: 39818812
Under "normal delete conditions" such as the user deleting from their inbox they could be recovered in this manner but they were deleted using the search-mailbox command. In any case they do not show up in the Recover Deleted Items from OWA or Outlook.
0
 
LVL 15

Accepted Solution

by:
achaldave earned 2000 total points
ID: 39819532
Unfortunately the mails deleted by search-mailbox command are permanently deleted, your best option is to restore from backup. Didn't the command exported deleted emails to target mailbox or the admin didn't specify target mailbox in search? Other option if any profile has that mailbox in cache mode, try opening that profile on user machine without connecting to network and you should be able to export emails from there. Or OST recovery software like this if OST file is available, http://www.recoveroutlookpst.com/recover-deleted-emails-from-ost-file.html
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 

Author Comment

by:knoots
ID: 39819864
As I feared but was looking for confirmation achaldave is correct. I thought of the OST too late to prevent the deletion but am going to try the OST delete recovery you suggested tomorrow. Keep you posted.
0
 
LVL 4

Expert Comment

by:michaelalphi
ID: 39820120
Hi Knoots,
As you have mentioned that your retention period is 180 days, then you can reconnect the deleted mailbox at any point during this time. Deleted mailbox stores in the information store database, (only if you do not flagged it for permanent deletion). At the end of the mailbox retention period, the mailbox is permanently deleted from the database.
So, if someone has mistakenly deleted a mail-enabled user account, you can recreate that user object, and then reconnect that mailbox during the mailbox retention period.
You can follow below steps to recover the deleted mailbox :

1) In Exchange System Manager, locate the mailbox store that contains the disconnected mailbox.
2) Click the Mailboxes object under the mailbox store.
3) If the mailbox is not already marked as disconnected (the mailbox icon appears with a red X), right-click the Mailboxes object, and then click Cleanup Agent.
4) Right-click the disconnected mailbox, click Reconnect, and then select the appropriate user from the dialog box that appears.
5) Click OK.
You can also check this automated option to restore deleted mailbox even the backup is not available : http://www.exchangemailboxrecovery.co.uk/
0
 

Author Closing Comment

by:knoots
ID: 39821932
achaldave was correct. Also his suggestion for the recovery software worked perfectly. I retrieved all the lost email from the .ost file as he suggested! Thanks!
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Are you an Exchange administrator employed with an organization? And, have you encountered a corrupt Exchange database due to which you are not able to open its EDB file. This article will explain all the steps to repair corrupt Exchange database.
On September 18, Experts Exchange launched the first installment of the Help Bell, a new feature for Premium Members, Team Accounts, and Qualified Experts. The Help Bell will serve as an additional tool to help teams increase question visibility.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question