Avatar of sword12
 asked on

rebuild exchange server after cyber attack

Dear Excahnge experts


We got cyberattack destroyed everything


We did recovery almost everything from the backup


But now we are building everything again in a  new clean environment


About exchange server


After we build a new DCS and export and import the user's objects


How we can take the data files and insert them in the new exchange server and bring the mailboxes for the users in a functional way


Do Microsoft has any tools to do this or any third-party tool or any procedure


All the time when I used to install or upgrade exchange I use to do a coexistence approach then migrate the mailboxes but now this is the first time I face such an approach



Any help here, please


Avatar of undefined
Last Comment

8/22/2022 - Mon
Peter Hutchison

Depends what format the data files are. Are they the Mailbox databases (edb, log), offline folders (ost), or personal folders (pst) files?
If Mailbox databases, you can create empty mailboxes databases on Exchange, rename and configure them as previous mailboxes, set them to allow restore, and overwrite mailbox databases with the restored mailbox databases.
For OST and PST, there are loads of tools besides Outlook itself to restore mail.


If you dont have any backups.
Export from all users to PST and import the PSTs after reconfiguring Outlook

If you get your EDB and AD restored.
recover the server using recoverserver switch


to able to restore from Exchange Backup, you must reinstall using the most possible identical parameters and names !

=> Starting by using the same Organization Name, same Domain name and ideally same Exchange server name.
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck

EDB.  log.

so in this case as you said i do the following

1- install new active directory  DCs
2- export the users objects from the old DCs
3- import the users object to the new DCs    (( the user here will new SIDs )) i hope this wil not effect the procedure
4- install new exchange server the same version 2016 CU20
5- creat the same DBs with the same name
6- do restore of the DBs  (( here i have no idea hoe to make it i need more info

after the the mail boxes for  users will work normally ? !

i need more doc here pls 


-->6- do restore of the DBs  (( here i have no idea hoe to make it i need more info
That works only if you manage to restore your old AD.

sorry we are installing new AD

because we are building new environment from 0

so in this case the only solution to export every mailbox as PST

and then in the new environment we import them for every user

i know  some tools can do this can you give me a name for good tool

Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.

-->so in this case the only solution to export every mailbox as PST
This is the option which is easy at this moment and will not take much time.
It will be helpful if you have assistant. He can go to all users and start exporting meanwhile you can build the full infrastructure.

Another option is to extract from EDB. You need EDB backup restored.

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question

the old domain name something like  sword.com    the new name   sword.local

the organization name the same sword

conver EDB to PST  has cost which cost ?

we have Veeam which have  exchange module

or we can buy such tool


so this can be do able or ? 

We got cyberattack destroyed everything 
For modeling these dangers, you'll need to come up with a comprehensive plan. Threat modeling will help you predict how a cyber attack will unfold, as well as the threat's impact and potential countermeasures.


All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck