Entire Inbox Permanently Deleted Over Weekend

We're going to make sure their machine and outlook is down over the weekend.  If it happens again, we'll go from there.

We also just found out that they have POP3 and IMAP4 enabled on exchange.  I'm checking any policies associated with that.  Most of our users don't have that.  We use a 3rd party to allow mobile devices access to exchange.  This user doesn't have that and yet still receives email.  The two may be related but I'm not sure how.

1. We've already done that.  And checked rules and any ignores.

2. That's the next step.  They're a new employee so this is still viable.

3. We do with VEEAM, but the memory required to restore a single mailbox isn't something our exchange can handle and we don't have a test box to push it to.  We do have the 14 day recovery so they aren't without it, just inconvenient at this point.

August 11th, 2015 10:32am

Bit stumped on this one.  User reports that they leave on Friday with an inbox containing messages, sent box has messages, deleted has some.  Regular stuff.  Monday they come in and it's all gone.  It's permanently deleted and can be recovered, but we don't know why it's doing it in the first place.  Two weeks in a row.  They have no rules or ignores on the client.  They are part of the same retention policies from exchange.  I'm looking into the server to see if anything shows up.  Not sure where to start.  Corrupt local profile?  Recreate their mail store on Exchange?&n

Free Windows Admin Tool Kit Click here and download it now
August 11th, 2015 11:49am

Hi,

Do the users have Outlook running during the weekend? Since we are not sure whether the emails are deleted from Outlook or OWA, we need to confirm if Outlook was running during the weekend.

Please also check the local Outlook add-ins, do you have any users who use a anti-spam add-in? The issue may be caused if they have mis-configured the add-in settings.

Some other suggestions regarding the email missing issue:

1. Reset View in Outlook to make sure it's not caused by a filter.

2. Recreate the Outlook data file(.ost) to check if the problem persists.

3. As the issue may persist, I suggest you keep a backup for users' mailboxes.

Regards,

Melon Chen
TechNet Community Su

August 12th, 2015 1:21am

Hi,

Is there any update?

Regards,

Melon Chen
TechNet Community Su

Free Windows Admin Tool Kit Click here and download it now
August 19th, 2015 3:32am

Yes, sorry.  We don't know what was the original issue, but we did several things.

1) We recreated his local profile.  Wiped out the ost, had outlook recreate it.  That didn't seem to work initially.

2) We get mobile email over MobileIron but this user was set up incorrectly still showing as the previous user.

3) Because of that, they had POP3 and IMAP4 enabled in Exchange when they shouldn't have.

4) So basically we fixed all the things that should have been fixed, including some pebkac issues with the user not knowing their own email address.

Thanks for the tips.

August 19th, 2015 10:08am

Hi,

I'm not sure if the issue has been resolved based on your previous post.

As you mentioned:

"We're going to make sure their machine and outlook is down over the weekend."

I want to know what the result is, does the issue occur even the machine is down? If so, I suggest you also post a thread in the Exchange forum, since it could be server side related too:

https://social.technet.microsoft.com/Forums/office/en-US/home?category=exchangeserver

Regards,

Melon Chen
TechNet Community Su

Free Windows Admin Tool Kit Click here and download it now
August 19th, 2015 10:05pm

We didn't get a chance to do that.  The problem occurred before then so we had to investigate other things.

We can't confirm it, but what we think was happening was that because a previous user was set up in MobileIron and this new user's device was still showing as the previous owner of that device, the previous owner would be deleting everything in their inbox.  They weren't an employee anymore and probably never thought to tell us they're still getting company email and were just deleting Inbox items.  Which would make sense as most of the time MobileIron (Touchdown client) users don't see deleted items or sent items.

Once we deleted that user out of MobileIron and re-added the current user, it seems to work fine.

August 20th, 2015 9:25am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics