There are times when I have users come up to me and says that they didn't receive emails from x person, but when I go to the tracking logs, I see it being delivered. Is it possible to get a copy/export messages from the tracking log?

Message tracking doesn't have the complete message, only the information about what Exchange did with the message. You can export that information, but that doesn't help the user other than prove they had received the message and have deleted it and don't want to admit it! Simon.Simon Butler, Exchange MVP Blog | Exchange Resources

Hi, Use the following command . Get-Exchangeserver | where {$_.isHubTransportServer -eq $true -or $_.isMailboxServer -eq $true} | Get-Messagetrackinglog -sender user@domain.com -MessageSubject "Subject of message” -Start "9/20/2010 6:00 AM" -End "9/27/2010 11:00 AM" | Select-Object Timestamp,Clienthostname,eventid,source,sender,@{Name="Recipients";Expression={$_.recipients}},serverhostname | Export-Csv c:\Tracking_results.csv

Yusuf, I think you misunderstood what I wanted to do. I'm not interested in exporting the tracking log, I want the message itself! @Sembee, so is there anyway to get a copy of a message using the information from the tracking log? The messageid has to be good for something, right?! Assuming that the message has not been deleted, it would still be stored in the database wouldn't it?

The message tracking logs are there for tracking the message only. You can't retrieve the message using any of the email that is in the logs. If the email was delivered to the user then it is in their mailbox somewhere. If the email hasn't been deleted you will be able to find it in the user's mailbox. Message tracking is designed to allow you to see what Exchange did with the message, that is all. If you want cover for user stupidity, then configure archiving, and then you will have a copy of every email that goes through the system. However that is not something that should just be turned on and left, as it will generate a large mailbox very quickly. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources

I am assuming it wasn't a soft delete since it doesn't show up in the users deleted items eh? if it was a hard delete SHIFT+DELETE then it goes into the users Recoverable items /Deletions folder. Read this article http://technet.microsoft.com/en-us/library/ee364755.aspx to get a better understanding of how the new dumpster 2.0 works And then these two on Single Item Recovery http://technet.microsoft.com/en-us/library/ee633460.aspx and http://technet.microsoft.com/en-us/library/ff660637.aspx NOTE: you cannot see the Recoverable Items Folder with Outlook, but if you use the information in the articles above they may help you solve your issue. Also if you use MFCMAPI you can see the data in the users system folder/Recoverable Items...... or if you use a 3rd party utility like Lucid8's DigiScope http://www.lucid8.com/product/digiscope.asp you will have a GUI to exposed the data for review and recovery Troy Werelius www.Lucid8.com

Hi, Based on your description, you want to get the messages sent from the X person. To achieve your goal, there are two ways can help you. 1. Discovery search. For detailed, please see: http://technet.microsoft.com/en-us/library/dd335072.aspx 2. Using Export requests. For detailed, please refer to the following articles. Understanding Mailbox Import and Export Request http://technet.microsoft.com/en-us/library/ee633455.aspx Managing Mailbox Import and Export Requests: http://technet.microsoft.com/en-us/library/ee633479.aspx Create a Mailbox Export Request: http://technet.microsoft.com/en-us/library/ff459227.aspx New-MailboxExportRequest: http://technet.microsoft.com/en-us/library/ff607299.aspx Hope it helps. Best regards, SerenaPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, Based on your description, you want to get the messages sent from the X person. To achieve your goal, there are two ways can help you. 1. Discovery search. For detailed, please see: http://technet.microsoft.com/en-us/library/dd335072.aspx 2. Using Export requests. For detailed, please refer to the following articles. Understanding Mailbox Import and Export Request http://technet.microsoft.com/en-us/library/ee633455.aspx Managing Mailbox Import and Export Requests: http://technet.microsoft.com/en-us/library/ee633479.aspx Create a Mailbox Export Request: http://technet.microsoft.com/en-us/library/ff459227.aspx New-MailboxExportRequest: http://technet.microsoft.com/en-us/library/ff607299.aspx Hope it helps. Best regards, Serena Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.