Avatar of sword12

asked on 

rebuild exchange server after cyber attack

Dear Excahnge experts


We got cyberattack destroyed everything


We did recovery almost everything from the backup


But now we are building everything again in a  new clean environment


About exchange server


After we build a new DCS and export and import the user's objects


How we can take the data files and insert them in the new exchange server and bring the mailboxes for the users in a functional way


Do Microsoft has any tools to do this or any third-party tool or any procedure


All the time when I used to install or upgrade exchange I use to do a coexistence approach then migrate the mailboxes but now this is the first time I face such an approach



Any help here, please


Avatar of undefined
Last Comment
Avatar of Peter Hutchison
Peter Hutchison
Flag of United Kingdom of Great Britain and Northern Ireland image

Depends what format the data files are. Are they the Mailbox databases (edb, log), offline folders (ost), or personal folders (pst) files?
If Mailbox databases, you can create empty mailboxes databases on Exchange, rename and configure them as previous mailboxes, set them to allow restore, and overwrite mailbox databases with the restored mailbox databases.
For OST and PST, there are loads of tools besides Outlook itself to restore mail.

Avatar of M A
Flag of United States of America image

If you dont have any backups.
Export from all users to PST and import the PSTs after reconfiguring Outlook

If you get your EDB and AD restored.
recover the server using recoverserver switch

to able to restore from Exchange Backup, you must reinstall using the most possible identical parameters and names !

=> Starting by using the same Organization Name, same Domain name and ideally same Exchange server name.
Avatar of sword12


EDB.  log.

so in this case as you said i do the following

1- install new active directory  DCs
2- export the users objects from the old DCs
3- import the users object to the new DCs    (( the user here will new SIDs )) i hope this wil not effect the procedure
4- install new exchange server the same version 2016 CU20
5- creat the same DBs with the same name
6- do restore of the DBs  (( here i have no idea hoe to make it i need more info

after the the mail boxes for  users will work normally ? !

i need more doc here pls 

Avatar of M A
Flag of United States of America image

-->6- do restore of the DBs  (( here i have no idea hoe to make it i need more info
That works only if you manage to restore your old AD.
Avatar of sword12


sorry we are installing new AD

because we are building new environment from 0

so in this case the only solution to export every mailbox as PST

and then in the new environment we import them for every user

i know  some tools can do this can you give me a name for good tool

Avatar of M A
Flag of United States of America image

-->so in this case the only solution to export every mailbox as PST
This is the option which is easy at this moment and will not take much time.
It will be helpful if you have assistant. He can go to all users and start exporting meanwhile you can build the full infrastructure.

Another option is to extract from EDB. You need EDB backup restored.
Avatar of DEMAN-BARCELO (MVP) Thierry
Flag of France image

Blurred text
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of sword12


the old domain name something like  sword.com    the new name   sword.local

the organization name the same sword

conver EDB to PST  has cost which cost ?

we have Veeam which have  exchange module

or we can buy such tool


so this can be do able or ? 
Avatar of madunix

We got cyberattack destroyed everything 
For modeling these dangers, you'll need to come up with a comprehensive plan. Threat modeling will help you predict how a cyber attack will unfold, as well as the threat's impact and potential countermeasures.



Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.

Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews


IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo