Avatar of Bradley Fox
Bradley Fox
Flag for United States of America asked on

Restore Exchange 2013 items deleted with the Search-Mailbox command

I had a phishing email come in this morning and ran the following command against Exchange like I always do in this situation.
 
Get-Mailbox -ResultSize unlimited | Search-Mailbox -SearchQuery 'From"Person@domain.com"' -DeleteContent

Open in new window


Unfortunately, I missed a colon after From and it deleted way more than just this one email from everyone's mailbox.  I know I should have used the -TargetMailbox command with this as not to lose data but I didn't.

Does anyone know of a way to recover the messages that were deleted with this command?  We do have a Barracuda message archiver that people can look in for their messages, but I'd really like to restore them to their mailbox.
ExchangePowershell

Avatar of undefined
Last Comment
Bradley Fox

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Jason Crawford

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
SOLUTION
Amit

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Bradley Fox

ASKER
I'm looking at restoring from a backup on Sunday to a recovery database and using the New-MailboxRestoreRequest cmdlet to restore the data to the user's actual mailboxes.  

My question is, if I do this, will I be creating duplicates in their mailbox and/or overwriting their existing mailbox causing me to lose even more data?
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy