Solved

Exchange 2010 - Office 365 Exchange Online - Message History

Posted on 2016-11-04
10
34 Views
Last Modified: 2016-11-09
Hello,

Our HR department is asking me to get amass emails from anyone in our organization to an external email user address.  The external user is an employee but was placed at a customer location and the customer provided their email account.  We are being asked to provide all the emails that were sent to their person for a 1 year time period.
During this time period we migrated from Exchange 2010 on-prem to Office 365 Exchange Online (about 4 months ago).  We still have out Exchange 2010 server and literally just powered on the server to prepare for looking at logs/emails.
Message Trace gives me all the emails that were sent to this person but our HR department wants the actual message contents, the email body, what was said in the email.
I have never been asked this question and other than message trace I am not sure what built-in Exchange 2010/Office 365 tools allow me to look at the email messages.
Looking for a solution to this issue for both Exchange 2010 and Office 365

thanks in advance
0
Comment
Question by:EA-170
10 Comments
 
LVL 17

Expert Comment

by:Gaurav Singh
Comment Utility
if you have old exchange then you can export his Mailbox to PST via Export-Mailbox command.
0
 
LVL 29

Expert Comment

by:ScottCha
Comment Utility
Actually the correct command is "New-MailboxExportRequest"...https://technet.microsoft.com/en-us/library/ff459227(v=exchg.141).aspx

@Gaurav...please be careful to provide correct instructions.   If the wrong one is used, it can be disastrous in some cases..

Now to the original question...take a look here...http://msexchangeguru.com/2011/05/10/track-emails/

This script should allow you to track emails sent to a specific person.
0
 

Author Comment

by:EA-170
Comment Utility
The employee didn't have a mailbox on our email server, their mailbox was external to our email.  Their mailbox was provider by another organization.  However since they were our employee our HR is requesting all emails sent to this person from our email server.
There is some legal issue going on and apparently emails are being requested.
0
 
LVL 29

Accepted Solution

by:
ScottCha earned 250 total points
Comment Utility
Understood.  I just wanted to clear up that command.

What you are looking for is Multi Mailbox Search.

https://technet.microsoft.com/en-us/library/dd335072(v=exchg.141).aspx

About half way down you will see you can find emails sent to/from a specific email address.

Now if these messages were deleted from the sender's mailbox, they won't show up in the search.
0
 

Author Comment

by:EA-170
Comment Utility
@ScottCha  - like the name but while that link gives me the message tracking I don't see where it gives me the message contents.

IS there a tool/command that will provide me what I am looking for?
0
Promote certifications in your email signature

Has your company recently won an award or achieved a certification? They'll no doubt want to show it off. Email signature images used to promote certifications & awards can instantly establish credibility with a recipient and provide you with numerous benefits.

 

Author Comment

by:EA-170
Comment Utility
Hi Scott - looks like you posted while I was still posting back - I will check out the Mult-Mailbox Search
0
 
LVL 29

Expert Comment

by:ScottCha
Comment Utility
ok.  I figured our posts crossed.  I think that will give you what you are looking for.
0
 

Author Comment

by:EA-170
Comment Utility
Scott - the multi mailbox search looks to be a winner for our on-prem server.  Does Office 365 have a similar tool that you know of?  We subscribe to the e2 non-profit subscription so we currently don't have access to the e-discovery feature on office 365.
0
 
LVL 38

Assisted Solution

by:Adam Brown
Adam Brown earned 250 total points
Comment Utility
You do have access to E-Discovery on Office 365. You just have to make sure your account is in the Discovery Management group in Exchange Online. Go to Exchange Admin -> Permissions -> Admin Roles -> Discovery Management and make sure your account is in that. Once it is, log out and back in and you should then have access to the Content Search controls in Security and Compliance Admin portal off the main Office 365 admin center. From there you can do a multi-mailbox search for messages sent to his external address.
0
 

Author Closing Comment

by:EA-170
Comment Utility
thank you for the assistance the multi mailbox search was the winner
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This article explains how to prepare an HTML email signature template file containing dynamic placeholders for users' Azure AD data. Furthermore, it explains how to use this file to remotely set up a department-wide email signature policy in Office …
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now