Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

How to use Microsoft Exchange 2013 Powershell to search a user's mailbox for a particular e-mail

Posted on 2014-04-12
6
1,438 Views
Last Modified: 2014-04-13
Folks:

I use Barracuda for my spam filtering and I have a user that stats that she never received an email however when I look at the Message Log on Barracuda it shows deliver. I need to do a search on my Exchange 2013 Server to locate this message and/or where it went. When I look at her Outlook, I do not see the message and I have even did a search for "All Mail Items" and still was not able to locate the message in her Outlook.

I found this article on EE however the command is not for Exchange 2013 and the per MS Article (http://technet.microsoft.com/en-us/library/dd298173%28v=exchg.150%29.aspx) it wants to copy, delete or do something with the message. I just want to see results like this: (http://sharepointrelated.com/2011/10/03/recover-a-single-e-mail-using-search-mailbox-in-exchange-2010/) on the Powershell command so I can tell the employee that it is in her ________ mailbox folder.

I did do a search in the "Message Tracking Log (http://technet.microsoft.com/en-us/library/bb124926%28v=exchg.150%29.aspx) and I do see the message coming in but after that I can't find it.

Thanks.

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_28154642.html
0
Comment
Question by:JustinBMak
  • 3
  • 2
6 Comments
 
LVL 25

Expert Comment

by:Tony Giangreco
ID: 39996212
Perform a search in the Exchange manager under tools, message search. Enter her email address, select receive and the appropriate dates if needed.
0
 
LVL 12

Assisted Solution

by:Carlo-Giuliani
Carlo-Giuliani earned 500 total points
ID: 39996223
It sounds like what you need is the Search-Mailbox cmdlet.

It will dump the results of the search into the target mailbox/folder of your choice.
0
 

Author Comment

by:JustinBMak
ID: 39996229
Carlo:

Correct, however either I am missing some cmdlet or I am missing a SP because the only open for "Search-Message" is "Search-MessageAuditLog"

TG-TIS:

That option is available in Exchange 2010, not 2013. Microsoft pulled far away from the EMC Toolbox App.
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 12

Accepted Solution

by:
Carlo-Giuliani earned 500 total points
ID: 39996289
Hmmm....found a thread that indicates you may have a permissions issue with Search-Mailbox.

An another (simpler) one  here
a thread that indicates you may have a permissions issue with Search-Mailbox

Open in new window

0
 

Author Comment

by:JustinBMak
ID: 39997287
Perfect, the last post was what it was, I did not have access which was why the cmdlet was missing.

So I have ran the search and found nothing, however Exchange shows it received.

showing results that user received message in message audit log

From the Message Audit Log it shows that my user received the message but I seem to not be able to find it in Exchange. I did not install the Spam/Malware filtering on Exchange and Anti-Virus has been disabled before the message was even received.
0
 

Author Comment

by:JustinBMak
ID: 39997302
Okay, nevermind. Thank Microsoft for this, so I received an email from the Exchange Server in my Inbox with a Zip file attached to it. The body of the message says that the results for my search were in there (they were) it was as *.CSV file.

I opened it up and went through, sorted it (because it returned everything with the word I searched for (question)) and found her e-mail in her Deleted Items.

Thank you Carlo, your help is appreciated!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
exchane, activesync 4 19
Exchange 2013 received lots of bounceback email from external mail server 1 25
Exchange 2010 and Outlook 2010 2 29
Exchange ActiveSync 12 17
An analysis of the phishing scam that has been affecting Google users, along with steps to take for protection, as well as what to do if you receive one of the emails.
The new Gmail Phishing Scam going around is surprising even the savviest of users with its sophisticated techniques.
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

861 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question