Client of mine called and said she was getting spoofed email. I called our Watchguard firewall support because blocking spoof emails was set up in the firewall. Now they say that they need to see the header of the emails. I call my client and she has deleted them. Recovering deleted emails in outlook did not help. I have heard that an Archive.pst file might contain the deleted emails, is this true or is there another way.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations biv343 on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
recovering deleted email
- Thread starter Amboyduke
- Start date
Unless the client archived them to archive.pst, then no. Why did the Recover Deleted Item not work? Is the server setup to not have Deleted Items Retention? If it is, that's not a good idea as it doesn't allow users to recover their own mistakes, as you've discovered.
If Deleted Items Retention isn't set and the email was deleted and no backup was done between the time it was received and the time it was deleted then there's nothing you can do but wait for another spoofed email to arrive and advise the client to not delete it this time.
I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.
There are no more PDC's! There are DC's with FSMO roles!
If Deleted Items Retention isn't set and the email was deleted and no backup was done between the time it was received and the time it was deleted then there's nothing you can do but wait for another spoofed email to arrive and advise the client to not delete it this time.
I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.
There are no more PDC's! There are DC's with FSMO roles!
- Thread starter
- #3
- Thread starter
- #5
By default, the retention period for deleted emails is 30 days, so if that's not available then whoever created the storage group must have changed it. Take a look at the properties of the storage group this mailbox is stored on.
You could look for OSTs on the machine, but these would be in sync with the mailbox in normal operation.
The only way to recover the mailbox that I know of if you don't have bricks backups is to create a recovery storage group and recover the whole storage group from a backup. You can use exmerge then to recover mail to a PST from the recovery storage group. The process is described at
You could look for OSTs on the machine, but these would be in sync with the mailbox in normal operation.
The only way to recover the mailbox that I know of if you don't have bricks backups is to create a recovery storage group and recover the whole storage group from a backup. You can use exmerge then to recover mail to a PST from the recovery storage group. The process is described at
- Thread starter
- #7
You recover the store, not the storage group, when using RSG. You can them either exmerge the data to a .pst or just merge the data with an existing mailbox.
This allows for single item recovery, and negates the need for brick level backup.
Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.
This allows for single item recovery, and negates the need for brick level backup.
Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.
- Status
Similar threads
- Locked
- Question
- Locked
- Question