deleted emails recovery

friends i want to know the best way to prevent user from deleting emails from exchange 2010/ 2013.

I have a client who wants that their users should not be able to delete emails ever (5/7 years) pleasea dvise what is the best way and how we can achieve this. secondly if the user deleted the emails from outlook and deleted items also .. how can those emails be recov

August 31st, 2015 6:34am

Take a look at Litigation Hold https://technet.microsoft.com/en-us/library/ee861123(v=exchg.141).aspx

In-Place Hold and Litigation Hold https://technet.microsoft.com/en-us/library/Ff637980(v=EXCHG.150).aspx

Free Windows Admin Tool Kit Click here and download it now
August 31st, 2015 7:50am

hi salava... litigation hold. in-place hold ... i am not sure if this will work as if i put a mailbox on hold it will not refresh for newer emails. like if i am putting a hold on 15th aug .. then on 30 aug i will not have emails for next 15 days and if user deleted emails of next 15 days then i will loose it.. idea is that user should not be able to delete any emails for 5 years.

correct me if i am w

August 31st, 2015 8:10am

As far as I know, litigation hold applies to both existing emails and future emails.

It is applied to the Recoverable Items folder (Deletion, Purges, Versions subfolders) so there is no reason the hold would not apply to new messages that users delete.

Please note that it may *appear* that items are deleted but they are not purged in the background.

Authorized users can access them in the Purges subfolders (when litigation hold is enabled).

I did not see anything in the articles cited by Slava that suggests new messages would be p

Free Windows Admin Tool Kit Click here and download it now
August 31st, 2015 8:22am

Just a remark:

If you do not purge any messages for 5-7 years, you will need to revise your storage calculations. In other words, you'll need more space.

August 31st, 2015 8:25am

thanks DAvid.. i understand .. this is govt rule here... ok .. can you please advise how the emails can be recovered .. if we are doing litigation hold...

and do i only need L-hold or something else.

according to you guys my scenario needs L-Hold which i am going to try now.. will enable it on my account .. send emails from another account.. and will delete the current email and a very old email and will see if this can be recovered.

please also advise how i can recover the deleted

Free Windows Admin Tool Kit Click here and download it now
August 31st, 2015 8:39am

As stated above the litigation hold will place items into the various Deletion, Purges, Versions sub-folders under the Recoverable Items Folders.  See more here on the dumpster https://technet.microsoft.com/en-us/library/Ee364755%28v=EXCHG.150%29.aspx?f=255&MSPPError=-2147217396

To recover items you can use

1. The MS methods https://technet.microsoft.com/en-us/library/Ff660637%28v=EXCHG.150%29.aspx

2. You could use MCFMAPI https://support.microsoft.com/en-us/kb/2786067

3. Or you can use a 3rd party tool like out DigiScope which has an intuitive GUI so that you can easily view, search, export the desired information http://www.lucid8.com/product/digiscope.asp

August 31st, 2015 10:00pm

Hi Jatin,

Please refer to the following article to understand how to recover the deleted messages :

Recover deleted messages in a user's mailbox

Administrators can search for and recover deleted email messages in a user's mailbox. This includes items that are permanently  deleted (purged) by a person (by using the Recover Deleted Items feature in Outlook or Outlook Web App), or items deleted by an automated process, such as the retention policy assigned to user mailboxes.   In these situations, the purged items can't be recovered by a  user.     But administrators can recover purged messages if the deleted item retention period for the item hasn't expired.

NOTE:

In addition to using this procedure to search for and recover deleted items (which are moved to the Recoverable Items\Purges folder if either single item recovery or litigation hold is enabled), you can also use this procedure to search for items residing in other folders in the mailbox and to delete items from the source mailbox (also known as search and destroy).

Best regards,

Free Windows Admin Tool Kit Click here and download it now
August 31st, 2015 10:21pm

Dear Niko..thanks for the proper explanation. really appreciated so to sum it up.. you are saying to use litigation hold.. which will help me getting my emails back if that is deleted by any user.

i am going to go through the procedure of recovery. please confirm if i have missed s

September 1st, 2015 3:12am

Hi Jatin,

Yes, Litigation Hold can preserve all items in user mailboxes and protect the items from deletion by users or automated processes. Placing a mailbox on In-Place Hold or Litigation Hold stops the Managed Folder Assistant from automatically purging messages from the DiscoveryHolds and Purges subfolders.

More details for your reference:

In-Place Hold and Litigation Hold

Best regards,

Free Windows Admin Tool Kit Click here and download it now
September 1st, 2015 3:51am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics