How to use Microsoft Exchange 2013 Powershell to search a user's mailbox for a particular e-mail


I use Barracuda for my spam filtering and I have a user that stats that she never received an email however when I look at the Message Log on Barracuda it shows deliver. I need to do a search on my Exchange 2013 Server to locate this message and/or where it went. When I look at her Outlook, I do not see the message and I have even did a search for "All Mail Items" and still was not able to locate the message in her Outlook.

I found this article on EE however the command is not for Exchange 2013 and the per MS Article ( it wants to copy, delete or do something with the message. I just want to see results like this: ( on the Powershell command so I can tell the employee that it is in her ________ mailbox folder.

I did do a search in the "Message Tracking Log ( and I do see the message coming in but after that I can't find it.

Who is Participating?
Carlo-GiulianiConnect With a Mentor Commented:
Hmmm....found a thread that indicates you may have a permissions issue with Search-Mailbox.

An another (simpler) one  here
a thread that indicates you may have a permissions issue with Search-Mailbox

Open in new window

Tony GiangrecoCommented:
Perform a search in the Exchange manager under tools, message search. Enter her email address, select receive and the appropriate dates if needed.
Carlo-GiulianiConnect With a Mentor Commented:
It sounds like what you need is the Search-Mailbox cmdlet.

It will dump the results of the search into the target mailbox/folder of your choice.
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

JustinBMakAuthor Commented:

Correct, however either I am missing some cmdlet or I am missing a SP because the only open for "Search-Message" is "Search-MessageAuditLog"


That option is available in Exchange 2010, not 2013. Microsoft pulled far away from the EMC Toolbox App.
JustinBMakAuthor Commented:
Perfect, the last post was what it was, I did not have access which was why the cmdlet was missing.

So I have ran the search and found nothing, however Exchange shows it received.

showing results that user received message in message audit log

From the Message Audit Log it shows that my user received the message but I seem to not be able to find it in Exchange. I did not install the Spam/Malware filtering on Exchange and Anti-Virus has been disabled before the message was even received.
JustinBMakAuthor Commented:
Okay, nevermind. Thank Microsoft for this, so I received an email from the Exchange Server in my Inbox with a Zip file attached to it. The body of the message says that the results for my search were in there (they were) it was as *.CSV file.

I opened it up and went through, sorted it (because it returned everything with the word I searched for (question)) and found her e-mail in her Deleted Items.

Thank you Carlo, your help is appreciated!
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.