macleandata
asked on
Exchange Mail Search / Recovery
Hello,
I wonder if anybody can help. We've been asked by our HR dept to search and recover any emails which relate to a particular member of staff going back 2 years (section 7 data protaction act) part of this exercise requires retrieving a copy of emails from a number of current employees.
We're running MS Exchnage 2010 (DAG 2x nodes) + BE2010 for our backup solution.
My problem is, I need to be able to search not just the subject line, but body text also. We also need to be able to retrieve emails that mention this particular employee, and I can't restore them back to the original mailbox.
What I'd like to be able to do is, restore say 10 where we've been asked to retrieve these emails from, and restore them to an empty mailbox so we can attach to temporary accounts so we can then run a full search for any emails with reference to the employee.
Unfortunately, when attempting to re-direct the restore in BE to a new Database, the job completes successfully, but nothing is restored restored. We can't choose the option to re-create the account / mailbox etc. as these accounts already exist.
Looking into the error logs, there are loads of exceptions with 'Skipped by user' which makes me think it could be a permissions issue.
Does anybody know if we're doing something wrong here, and indeed, is there a better way to search for emails going back several months / years.
Many thanks,
Jim
I wonder if anybody can help. We've been asked by our HR dept to search and recover any emails which relate to a particular member of staff going back 2 years (section 7 data protaction act) part of this exercise requires retrieving a copy of emails from a number of current employees.
We're running MS Exchnage 2010 (DAG 2x nodes) + BE2010 for our backup solution.
My problem is, I need to be able to search not just the subject line, but body text also. We also need to be able to retrieve emails that mention this particular employee, and I can't restore them back to the original mailbox.
What I'd like to be able to do is, restore say 10 where we've been asked to retrieve these emails from, and restore them to an empty mailbox so we can attach to temporary accounts so we can then run a full search for any emails with reference to the employee.
Unfortunately, when attempting to re-direct the restore in BE to a new Database, the job completes successfully, but nothing is restored restored. We can't choose the option to re-create the account / mailbox etc. as these accounts already exist.
Looking into the error logs, there are loads of exceptions with 'Skipped by user' which makes me think it could be a permissions issue.
Does anybody know if we're doing something wrong here, and indeed, is there a better way to search for emails going back several months / years.
Many thanks,
Jim
ASKER
Hi Shaik,
Thanks for replying. Not to start with admittedly, As we've now figured out, this option is to restore the entire database, not the user's mailbox.
We've now followed the Vertas document you've pointed us to, and we are now getting a Writer status:
Restore- \\EXCH20\Microsoft Information Store\Recovery MHMEXCH20V-79-57344-65233 - Writer Name: Exchange Server, Writer ID: {76FE1AC4-15F7-4BCD-987E-8
V-79-57344-65233 - A failure occurred querying the Writer status.
V-79-57344-65146 - Unable to restore \\EXCH20\Microsoft Information Store\Recovery. The existing data on the Exchange server may be an unrelated instance, or one or more incremental backups may be missing. Verify that the complete sequence of the most recent backups are restored. If all backups are restored, then the option "Restore all transaction logs; do not delete existing transaction logs (no loss restore)" cannot apply. Check the event logs for more information.
V-79-57344-65233 - Writer Name: Exchange Server, Writer ID: {76FE1AC4-15F7-4BCD-987E-8
V-79-57344-65233 - Writer Name: Exchange Server, Writer ID: {76FE1AC4-15F7-4BCD-987E-8
V-79-57344-65233 - A failure occurred querying the Writer status.
V-79-57344-65072 - Connection to the restore target has been lost. Operation canceled.
When we're created the recovery database, we leave it unmounted so not to create the .edb / logs files.
Just to note, we are running GRT, but not sure if this should affect how we restore. especially when we need to restore to another location.
Is there something we're missing that we can check?
Thanks for your help
Jim
Thanks for replying. Not to start with admittedly, As we've now figured out, this option is to restore the entire database, not the user's mailbox.
We've now followed the Vertas document you've pointed us to, and we are now getting a Writer status:
Restore- \\EXCH20\Microsoft Information Store\Recovery MHMEXCH20V-79-57344-65233 - Writer Name: Exchange Server, Writer ID: {76FE1AC4-15F7-4BCD-987E-8
V-79-57344-65233 - A failure occurred querying the Writer status.
V-79-57344-65146 - Unable to restore \\EXCH20\Microsoft Information Store\Recovery. The existing data on the Exchange server may be an unrelated instance, or one or more incremental backups may be missing. Verify that the complete sequence of the most recent backups are restored. If all backups are restored, then the option "Restore all transaction logs; do not delete existing transaction logs (no loss restore)" cannot apply. Check the event logs for more information.
V-79-57344-65233 - Writer Name: Exchange Server, Writer ID: {76FE1AC4-15F7-4BCD-987E-8
V-79-57344-65233 - Writer Name: Exchange Server, Writer ID: {76FE1AC4-15F7-4BCD-987E-8
V-79-57344-65233 - A failure occurred querying the Writer status.
V-79-57344-65072 - Connection to the restore target has been lost. Operation canceled.
When we're created the recovery database, we leave it unmounted so not to create the .edb / logs files.
Just to note, we are running GRT, but not sure if this should affect how we restore. especially when we need to restore to another location.
Is there something we're missing that we can check?
Thanks for your help
Jim
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hi Shalik,
It's an incremental!! we were working with the last backup which is actually an incremental, we started this on Thursday last week with Full backups. Have just re-read the error logs and it's quite clear now this is the case.
OK so have kicked off another restore from last night which is looking a lot better. Once we happy we can retrieve emails, we can start pulling back the archives.
Looks like this is going to be fine, but I'll leave the ticket open just in case we need to query something. Given we've missed this simple mistake, I'm sure they'll be another hurdle to jump ;-)
Thanks for your help so far
JIm
It's an incremental!! we were working with the last backup which is actually an incremental, we started this on Thursday last week with Full backups. Have just re-read the error logs and it's quite clear now this is the case.
OK so have kicked off another restore from last night which is looking a lot better. Once we happy we can retrieve emails, we can start pulling back the archives.
Looks like this is going to be fine, but I'll leave the ticket open just in case we need to query something. Given we've missed this simple mistake, I'm sure they'll be another hurdle to jump ;-)
Thanks for your help so far
JIm
great keep update... thanks
ASKER
Hi Shaik,
Thanks for help with this. We've successfully restored the various mailboxes we needed. A Good exercise to perform.
Many thanks,
Jim
Thanks for help with this. We've successfully restored the various mailboxes we needed. A Good exercise to perform.
Many thanks,
Jim
ASKER
Great work helping us resolve this issue!
please check once
https://www.veritas.com/support/en_US/article.TECH77853
all the best