Another Exchange Problem :(

[The Frog Meister]

Hi guys........ I is back.....

Is there anyway to fish out of the exchange server any email that has been sent by a user, and then deleted from their sent items ect????

Ie a copy of all sent mail

Than you

Me

[fugjostle]

If you know which user it was then you can connect to their mailbox and remove it... if your an admin.

[The Frog Meister]

This person has deleted all details of their email, and I was hoping that Exchange holds a copy of ALLL emails sent..... is htis the case?

Thanks

[fugjostle]

Exchange works by keeping the users mailbox on the server. When the user opens his/her mail then they are actually viewing the mailbox on the server. If they delete mail then they delete the copy of the mail on the server. The user doesn't actuallu hold mail on his/her local machine if that makes sense.

The only chance of recovery is if the user created backup .pst files on their local machine.

Do you want to prove a person sent a mail or recover a lusers mail after a dumbf**k moment?

---
fug

[The Frog Meister]

after a PEBKAK (Problem Exists Between Keyboard And Chair) error

Thanks

(dumb ass moment)

[fugjostle]

eek.. As far as I know he's lost his email. Some people set Outlook to archive the mail and that is the best place to look for deleted mails, otherwise, a document on how to archive/backup mail would be best

It may be useful for the admins to backup the mail servers once a week to protect against this in the future

---
fug

[The Frog Meister]

cheers mate.. your comments have been handed over to theAdmin in question

The back up tape is basicaly stuffed.. and jammed.... so no backups... oh well...........

Cheers for the help

[Zoneraver]

Exchange keep a record of every email incoming and outgoing as files on the server


Youll find (Without me actually checking) a folder called archive in your (Driveletter):\exchange server folderInside is 2 folders called summit like incoming and outgoings (Or in/out)

you get the idea anyway

Inside youll find thousands of files all with daft name like byt308667 N stuff

each one of these files is a backup of everything that has been sent/recieved depending on which folderyou are in

if the guys lost stuff between 2 dates then search for the files between them dates and open them all up


Its a ball ache cutting and pasting all them document into a new file lol but hey

(If you are running out of space on the server then you can also delete these files easy peasy but but em to CD first (To cover your own ass lol)


Alan


PS this is only if your exchange server was set to archive its emails (Its set as default on installation to archive anyway)

[The Frog Meister]

Top mate... will bash later