Use the following command below to do this for Exchange 2010.

Get-Mailbox -ResultSize Unlimited | New-MailboxExportRequest -ContentFilter {(sender -eq "smtp@domain.com")} -FilePath "\\SERVER\PSTFiles\ExportMessages.PST"

Select allOpen in new window

I have not been able to test this but it should do the trick. Just change the smtp address in the script with the sender you are looking for.

Will.

Im not sure this code worked, i copied some of the errors below

In short i think what has happened is i needed a new pst for each user it found the email address in.

The pst it created was only 800kb big and only included folders, no emails, so maybe it copied all the folders from the first user in the queue that it found the email address in, but no emails ????

 

Name                                           Mailbox                                        Status
----                                           -------                                        ------
MailboxExport                                  domain.local/MyBusiness/Users/SBSUsers/S... Queued
MailboxExport                                   domain.local/MyBusiness/Users/SBSUsers/I... Queued
MailboxExport                                   domain.local/MyBusiness/Users/SBSUsers/A... Queued
MailboxExport                                   domain.local/MyBusiness/Users/SBSUsers/M... Queued
The server or share name specified in the path may be invalid, or the file could be locked.
    + CategoryInfo          : NotSpecified: (9:Int32) [New-MailboxExportRequest], RemotePermanentException
    + FullyQualifiedErrorId : 1D53B743,Microsoft.Exchange.Management.RecipientTasks.NewMailboxExportRequest

The server or share name specified in the path may be invalid, or the file could be locked.
    + CategoryInfo          : NotSpecified: (10:Int32) [New-MailboxExportRequest], RemotePermanentException
    + FullyQualifiedErrorId : 1D53B743,Microsoft.Exchange.Management.RecipientTasks.NewMailboxExportRequest

If you have their password I would use Outlook, create a profile and export this way. It's a bit more work than using PowerShell but I've always found by the time you check the pst with Outlook why not begin with it.

the thing is we arent 100% sure who has sent or received emails with the email addresses in question

In exchange 2010 you need to run the following command below before the script in my first post will work. If you do no have permissions on the mailbox you cannot export the mailbox.

new-ManagementRoleAssignment -Role "Mailbox Import Export" -SecurityGroup "SecurityGroupNameHere"

$Mailbox = Get-Mailbox -ResultSize Unlimited
Foreach ($user in $Mailbox) {
New-MailboxExportRequest -Identity $user -ContentFilter {(sender -eq "smtp@domain.com")} -FilePath "\\SERVER\PSTFiles\$user.pst
}

Select allOpen in new window

Will.

Thanks will, still no luck im afraid. The first script still complains of the file could not be locked?

As for the second script is that to be run directly in EMS?

Yes you run this from the EMS. If you want to run it from a regular powershell session you will need to import the Exchange 2010 module.

add-pssnapin microsoft.exchange.management.powershell.E2010

Will.

i was just struggling with the last code thats why i asked. Ive entered the code all onto one line and get the following

Unexpected token 'in' in expression or statement.
At line:1 char:63
+ $Mailbox = Get-Mailbox -ResultSize Unlimited Foreach ($user in <<<<  $Mailbox) {New-MailboxExportRequest -Identity $u
ser -ContentFilter {(sender -eq "dd@mydomain.com")} -FilePath "\\WSDC01\export\$user.PST"}
    + CategoryInfo          : ParserError: (in:String) [], ParentContainsErrorRecordException
    + FullyQualifiedErrorId : UnexpectedToken

this is why i typed [PS] C:\Windows\system32>$Mailbox = Get-Mailbox -ResultSize Unlimited Foreach ($user in $Mailbox) {New-MailboxExportRequest -Identity $user -ContentFilter {(sender -eq "dd@mydomain.com")} -FilePath "\\WSDC01\export\$user.PST"}

It appears that the variable is not being created. Can you open the EMS and type the first line $mailbox = get-mailbox -resultsize unlimited (press enter)

Type $mailbox (press enter) see if you get all of the mailboxes are results.

If $mailbox gives you all of the mailbox results then run the rest of the command.

foreach ($user in $mailbox) { .........

The above error message you are getting appears that it does not like the variable.

Will.

I ran the foreach ($user

and the following message came up for each user

A positional parameter cannot be found that accepts argument 'Discovery Search Mailbox'.
    + CategoryInfo          : InvalidArgument: (:) [New-MailboxExportRequest], ParameterBindingException
    + FullyQualifiedErrorId : PositionalParameterNotFound,New-MailboxExportRequest

Did you assign the proper role permissions for the user you are using to export the mailbox? I posted this in a few previous comments. New-managementroleassignment ....

Will.

I create a group for my account called "Export user" and ran

new-ManagementRoleAssignment -Role "Mailbox Import Export" -SecurityGroup "Export user"

Or should i run it exactly as you wrote

new-ManagementRoleAssignment -Role "Mailbox Import Export" -SecurityGroup "SecurityGroupNameHere" ???

No the way you did it is fine, you need to add your security group in there "SecurityGroupNameHere".

I will test the script above in my lab. I have not tested this.

Will.

I have just tested this in my lab and I did not have the proper syntax for the New-MailboxExportRequest cmdlet. I had -identity when it should be -Mailbox. I have since tested this and it works as expected. Creating all individual pst files.

$Mailbox = Get-Mailbox -ResultSize Unlimited
Foreach ($user in $Mailbox) {
New-MailboxExportRequest -Mailbox $user -ContentFilter {(sender -eq "smtp@domain.com")} -FilePath "\\SERVER\ShareName\$user.pst
}

Select allOpen in new window

That should do it.

Will.

Hi Will

Partial success. I have to run it line by line, it created a new pst for each user, it also exported all the users folders. But it didnt export any emails in any of the folders. Any ideas?

You should not have to run this line by line. Copy and paste the script into notepad and save it as .ps1 file extension. Then run the script.ps1 in the management shell. This should work for you.

As for the export It has to export all of the individual mailboxes regardless if it finds anything. It creates the entire mail structure and then from there will place any of the mail items in the folders where it found them in the source mailbox.

Will.

Hi Will i think im missing something obvious here so appologies in advance

when i run the script i get the following

[PS] D:\>export.ps1
The term 'export.ps1' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the
spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:11
+ export.ps1 <<<<
    + CategoryInfo          : ObjectNotFound: (export.ps1:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

Based on your Windows Environment Variables you might have to be in the exact path where the script file is located. This is usually found the your Windows Path under environment varibale is set to c:\ rather than %systemroot% (variable).

When you go to the directory where the script is located you need to run the script using .\export.ps1.

Will.

Sorry my mistake i had a typo for the script filename.

The script ran but again the exported users only had folders and no emails exported, any ideas?

Im not sure what else to try on this one?

Hi Will did you test actually export mails as well?

Yes this has worked in my lab environment.

Will.

Any ideas what i may of missed ?

Does anyone have any other suggestions please? I feel we are more than half way there!!

Glad that you figured it out!

Will.

worked perfectly

Thanks

David

guided me to the solution