I am familiar with message discovery for the messages that exist in user mailbox. Export-Mailbox command can be used to copy messages over to admin box based on search criteria. However, how can I make it work for deleted items that are being retained by deleted message retention policy? Scenario: User receives an email with sensitive information, reads it, and deletes it (hard). Manager asks me for a copy of the message that the user received. Or he asks me for a copy of all messages the user received on that day between 2PM - 3PM Now had the message been in user's mailbox, I could have used Export to copy it into admin mail box and given the manager the copy. Also, using the message tracking log, I can easily identify what were the subject lines for messages the user received between the time frame but (I think) there is no way to retrieve the message from its message or internal ID from tracking logs. Unfortunately, now the only option that I see left is that I gain Full Access to mailbox, mount it on my outlook, un-delete the message, copy message, delete again, freak out the user if he notices message showing up for a few seconds and then going away again. Can't I do something in the shell? Any examples would be appreciated I do understand the best solution for discovery is archiving and lacking that infrastructure I can easily state the limitations of discovery process, but it will be good to know if this is possible. This is Exchange 2007 btw. ThanksI want to believe

Hi, I have some suggestion for you: Read this article http://technet.microsoft.com/en-us/library/ee364755.aspx to get a better understanding of how the new dumpster 2.0 works And then these two on Single Item Recovery http://technet.microsoft.com/en-us/library/ee633460.aspx and http://technet.microsoft.com/en-us/library/ff660637.aspx Also if you use MFCMAPI you can see the data in the users system folder/Recoverable Items...... Or if you use a 3rd party utility like Lucid8's DigiScope http://www.lucid8.com/product/digiscope.asp you will have a GUI to exposed the data for review and recovery Best Regards!

Hi, I have some suggestion for you: Read this article http://technet.microsoft.com/en-us/library/ee364755.aspx to get a better understanding of how the new dumpster 2.0 works And then these two on Single Item Recovery http://technet.microsoft.com/en-us/library/ee633460.aspx and http://technet.microsoft.com/en-us/library/ff660637.aspx Also if you use MFCMAPI you can see the data in the users system folder/Recoverable Items...... Or if you use a 3rd party utility like Lucid8's DigiScope http://www.lucid8.com/product/digiscope.asp you will have a GUI to exposed the data for review and recovery Best Regards!