E-Mail Undelete

[deklin]

Hello,

One of my users is suspected of questionable actions. This person has recently deleted a bunch of emails from their mailbox. I have previously set the deleted item retention rate on exchange to a very long time. How can an administrator access the deleted files on the exchange server?

thanks



Deklin

"What goes up must come down. Ask any system administrator."

 

[xwire]

You could add the Administrator account to the account in question, so you could open the account on your Outlook and recover the deleted items. Although I think if you recover the deleted items while the user is logged on also, I think he/she will see the recovered items back into their Deleted Items folder.

What you could do is access it after hours and recover the items, export the items to a PST and then remove the items from the users account and then import the PST items into a seperate folder into your box or another (the bosses) box.

I had to do this before and the above worked with our company policy.

 

[deklin]

how do i recover the deleted items from within outlook?

Deklin

"What goes up must come down. Ask any system administrator."

 

[xwire]

go to the deleted items folder, then go up to Tools, and Recover Deleted Items should be highlighted now. You should see all the emails that have been deleted, you can recover these. They will be recovered back into the deleted items folder in outlook.

 

[58sniper]

Keep in mind that the items in the dumpster will only go back as far as the deleted item retention period.

If you need something older than that, you'd be looking at restoring the mailbox to the RSG and then to a .pst file.

Pat Richard, MCSE MCSA:Messaging CNA
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt