Missing Email - Exchange/Outlook 2010

Hello Experts - I have a user who is missing an email.  We can find no trace of it in his Outlook in any folder.  We do have a copy of it in a reply email he got a day or so later so I know it existed.  I'd like to track down what happened to it.  I have the date, time, subject, and message body for the missing email since it appears in the reply, how can I track this down on an Exchange 2010 server I host to find out where it went?
danbrown_IT ManagerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

timgreen7077Exchange EngineerCommented:
Was the email ever in the users inbox before he/she lost it? If it was then the user might have an outlook rule that moved it, or the user accidentally moved the email themselves to a different folder. I see this all the time and generally that is what happens. If you have the subject you can run the following cmdlets in Exchange Shell against the user mailbox to try and find it. The below cmdlets will search the user's entire mailbox for emails with that subject and import the results to the target mailbox and along with the folders where the emails reside.

Search-Mailbox -Identity "user mailbox" -SearchQuery subject:"<verbatim subject line>" -TargetMailbox <name of mailbox> -TargetFolder <name of folder>
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
danbrown_IT ManagerAuthor Commented:
Interesting, I never saw output going to another mailbox before.  The email was in the users inbox at one point.  He has no rules or subfolders setup and we did a full search in Outlook without turning it up.  I ran the command and it came back with "The search has failed."  So how can I figure out what happened to it?  I'm thinking I would need to enable user level logging first in order to track something like that which of course I didn't do.
0
timgreen7077Exchange EngineerCommented:
If the search failed, then you didn't input the cmdlets correctly. send me what you inputed in the exchange shell.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

timgreen7077Exchange EngineerCommented:
I should also mention you do need the discovery management role permission in order to run the cmdlets
0
danbrown_IT ManagerAuthor Commented:
This is really weird.  I swear the email I got said it had failed but when I went to check again it says succeeded and I have a new set of subfolders with emails attached to my inbox all containing that subject.  I don't see the missing email in there and I'm not sure how I can figure out what happened to it with this info.  Here is what I entered:

Search-Mailbox -Identity "mdasilva" -SearchQuery subject:"Updated model of the PMC project" -TargetMailbox dbrown -TargetFolder inbox
0
timgreen7077Exchange EngineerCommented:
If you don't see it in there then it may not be in the users mailbox anymore. That search checks entire mailbox including the recover dumpster.
sorry but not sure what else to check if the email doesn't show up in there at all. maybe the user moved the email from the mailbox and dropped it on the desktop somewhere. not sure what to tell you since you don't see it in the search.
0
AlanConsultantCommented:
Hi,

Have you tried searching across the entire mailbox space?  It might have been moved elsewhere.

Alan.


Sorry:  I see your problem was solved by searching in the mailbox, so I guess you found it.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Office

From novice to tech pro — start learning today.