exchange 2010 handle sensitive email

Hi Expert,

We are using exchange 2010, Management would like to know is there a way to get all the sensitive/important email from database and forward out? and the important email will be deleted after that.

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

May I ask you, why would Management ask such a bizarre question, I am wondering.  They want to delete the important mails ?

Answering your question, how would Exchange would know whether which email is important to you / unless you have a proper Data Classification system is in place (Such as Titus).

Moreover, It will be a breach of security and privacy if you go through other user's mailboxes even if you are an Administrator, (unless authorized by law enforcement as part of investigation).

Anyways, In my knowledge, there is no automated way to have what you want.
patcheahAuthor Commented:
Hi Manu,

Thanks for your feedback,

i recalled at powershell, we can query the email subject, and could we forward the email through powershell to another email address?

Yes. You can set email forward via PowerShell command. To set the email forwarding to another address for a user, you can refer the following steps:

1. Connect to Windows PowerShell and connect to the service again, see Use Windows PowerShell in Exchange Online.
2. Use the following Windows PowerShell commands to set the email forwarding.
Set-Mailbox -Identity Alias -DeliverToMailboxAndForward $true -ForwardingSMTPAddress forwarding@address

Please replace Alias to the user’s alias, and replace forwarding@address to the forwarding email address which the users’ emails will be forwarded to.

For example: Delivers Patrick' e-mail messages to Patrick's mailbox and also forwards them to Bob's ( mailbox. We can use the following command:
Set-Mailbox -Identity Patrick -DeliverToMailboxAndForward $true -ForwardingSMTPAddress

For detailed information about Setting-Mailbox:
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

patcheahAuthor Commented:
Hi Manu,

can i use this way ,

then manually forward to other email address?


You could use Search-Mailbox cmdlet to search mails in mailboxes across organization based on subject line and move the mails to a target mailbox and delete them from source. You could use a command like the following.

Get-Mailbox | Search-Mailbox -SearchQuery 'Subject:"Your bank statement"'-TargetMailbox "administrator" -TargetFolder "SearchAndDeleteLog" -LogLevel Full -DeleteContent

Please refer following article for more information.
Scott ThomsonCommented:
It might just be me but what do they think the point of getting these email out of the Dbase is for..?

instead of doing what you are doing if you explain a little further we may be able to suggest a completely more efficient way of going about this.
patcheahAuthor Commented:
Hi Expert,

i had tried to query by using this command ( in my test server),


i intend to list all the email messages but only query not more than 50 emails, which i feel very weird,

thus, i tried with Get-MessageTrackingLog -MessageSubject "payment"

nothing come out ( but im pretty sure there is a message subject start with "payment")

did i enter the wrong command, i would like to search the email by more specific, user, subject and database,

could any expert here advise what is the correct powershell command in order to fullfill the requirement?

Please try the following command.

Get-MessageTrackingLog -end "08/24/2014 23:59:59" -START "07/24/2014 00:00:00" -Recipients -sender -messagesubject "Payment" -server TransportServer1

Also, you need to check for how many days Exchange Server is configured to keep the Log Files. You could use the following command and look for the value MessageTrackingLogMaxAge. Only for that many days logs will be available for search. If your Hub and Mailbox roles are collocated then you have to use Get-MailboxServer.

Get-transportServer -Identity TransportServer1 | select messagetracking*

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.