locked
How to get deleted mail box after 30 days RRS feed

  • Question

  • Hi 

    We are using exhange online, a user mail box deleted three months back but for an audit we would require the mail box, we spoke to micorosoft customer support but they didnt helped stating its not possible. We somehow used ediscovery to get the send mails list using different parameters. But we are not sure about the sent messages accountability as we dont know how many messages the user might have sent.

    Could someone help us in dealing with this scenario and i wanted to know is there a way to get the deleted mail box back?

    A quick help would be appriciated.

    Regards

    Nagaraju Chengeli

    Monday, May 4, 2020 1:53 PM

Answers

  • Hi Nagaraju,

    If the mailbox appears upon eDiscovery searches, then it might have been placed on a hold (just like Andy mentioned) and turned into an inactive mailbox. First check if it really exists as an inactive mailbox by using Exchange Online PowerShell:

    Get-Mailbox -Identity mailbox@contoso.com -InactiveMailboxOnly


    You'll need to replace "mailbox@contoso.com" with the identity (UPN, alias, etc.) of the corresponding mailbox. If it's still there, then you can try recovering or restoring it:

    https://docs.microsoft.com/en-us/microsoft-365/compliance/recover-an-inactive-mailbox?view=o365-worldwide

    https://docs.microsoft.com/en-us/microsoft-365/compliance/restore-an-inactive-mailbox?view=o365-worldwide

    Regards,
    Burak V.

    Monday, May 4, 2020 5:58 PM
  • Hi 

    We are using exhange online, a user mail box deleted three months back but for an audit we would require the mail box, we spoke to micorosoft customer support but they didnt helped stating its not possible. We somehow used ediscovery to get the send mails list using different parameters. But we are not sure about the sent messages accountability as we dont know how many messages the user might have sent.

    Could someone help us in dealing with this scenario and i wanted to know is there a way to get the deleted mail box back?

    A quick help would be appriciated.

    Regards

    Nagaraju Chengeli

    If it was deleted more than 30 days ago and not on a hold of some sort its gone and cant be recovered.
    Monday, May 4, 2020 2:53 PM

All replies

  • Hi 

    We are using exhange online, a user mail box deleted three months back but for an audit we would require the mail box, we spoke to micorosoft customer support but they didnt helped stating its not possible. We somehow used ediscovery to get the send mails list using different parameters. But we are not sure about the sent messages accountability as we dont know how many messages the user might have sent.

    Could someone help us in dealing with this scenario and i wanted to know is there a way to get the deleted mail box back?

    A quick help would be appriciated.

    Regards

    Nagaraju Chengeli

    If it was deleted more than 30 days ago and not on a hold of some sort its gone and cant be recovered.
    Monday, May 4, 2020 2:53 PM
  • But im still able to see the deleted email box mail using ediscovery. How this possible that ediscovery still showing the deleted mail box mail even after 90 days of deletion?

    Monday, May 4, 2020 5:38 PM
  • What shows for this?

    Get-Mailbox -IncludeInactiveMailbox

    Monday, May 4, 2020 5:54 PM
  • Hi Nagaraju,

    If the mailbox appears upon eDiscovery searches, then it might have been placed on a hold (just like Andy mentioned) and turned into an inactive mailbox. First check if it really exists as an inactive mailbox by using Exchange Online PowerShell:

    Get-Mailbox -Identity mailbox@contoso.com -InactiveMailboxOnly


    You'll need to replace "mailbox@contoso.com" with the identity (UPN, alias, etc.) of the corresponding mailbox. If it's still there, then you can try recovering or restoring it:

    https://docs.microsoft.com/en-us/microsoft-365/compliance/recover-an-inactive-mailbox?view=o365-worldwide

    https://docs.microsoft.com/en-us/microsoft-365/compliance/restore-an-inactive-mailbox?view=o365-worldwide

    Regards,
    Burak V.

    Monday, May 4, 2020 5:58 PM
  • Hi, I'm here to confirm with you if your issue has been resolved. If the problem is successfully solved, you can share your solution and mark them or the helpful reply as answer, this will make answer searching in the forum easier and be beneficial to other community members as well.

    Regards,

    Beverly Gao


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Friday, May 8, 2020 10:01 AM
  • The mailbox has been deleted for more than 30 days. That means it is a deleted mailbox forever.

    Although you can get the contents of the mailbox by tracking down the recipients of the mails sent from a deleted mailbox and get the data for your audit from there.

    You could also look at the logs of the sent and received emails to the deleted mailbox from the sender and recipient mailbox and make up the contents of the deleted mailbox from there.

    Friday, May 8, 2020 10:09 AM