locked
Search a users mailbox for a "missing" email RRS feed

  • Question

  • Is there a command line or script used to locate an email that a user claims was moved or never came in, yet the server states it was delivered? 

    I am basically looking for a way to search a users mailbox thru command or powershell and have it display the folder/path in Outlook where the message was dragged to accidentally. 

    I tried the Search-Mailbox -Identity "Fred Flintstone" -SearchQuery 'from:BarneyR@BedrockQuarryandGravel.com' but I don't want to delete or export the message, just find the path where its located in Outlook. 

    Thanks in advance. 
    Monday, April 6, 2015 6:31 PM

Answers

  • Use Search-Mailbox with the -EstimateResultOnly parameter. Also, setting the LogLevel full and copying the results to another mailbox will tell you where the message is and whether it has been read.
    • Proposed as answer by Lynn-Li Tuesday, April 7, 2015 7:01 AM
    • Marked as answer by Lynn-Li Monday, April 20, 2015 1:50 AM
    Monday, April 6, 2015 8:28 PM
  • Hi,

    Try this command:

    Search-Mailbox -Identity "Fred Flintstone" -SearchQuery 'from:BarneyR@BedrockQuarryandGravel.com' -TargetMailbox “your mailbox” -TargetFolder “folder name” -logLevel Full

    This command just copy the message from source mailbox as attachment to target mailbox with full log level. Then you can open that attachment to see more details.

    Note: we cannot use the EstimateResultOnly switch with the TargetMailbox and Loglevel parameter.

    Best Regards.


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Lynn-Li
    TechNet Community Support


    • Edited by Lynn-Li Tuesday, April 7, 2015 7:09 AM
    • Marked as answer by Lynn-Li Monday, April 20, 2015 1:50 AM
    Tuesday, April 7, 2015 7:08 AM

All replies

  • Use Search-Mailbox with the -EstimateResultOnly parameter. Also, setting the LogLevel full and copying the results to another mailbox will tell you where the message is and whether it has been read.
    • Proposed as answer by Lynn-Li Tuesday, April 7, 2015 7:01 AM
    • Marked as answer by Lynn-Li Monday, April 20, 2015 1:50 AM
    Monday, April 6, 2015 8:28 PM
  • Hi,

    Try this command:

    Search-Mailbox -Identity "Fred Flintstone" -SearchQuery 'from:BarneyR@BedrockQuarryandGravel.com' -TargetMailbox “your mailbox” -TargetFolder “folder name” -logLevel Full

    This command just copy the message from source mailbox as attachment to target mailbox with full log level. Then you can open that attachment to see more details.

    Note: we cannot use the EstimateResultOnly switch with the TargetMailbox and Loglevel parameter.

    Best Regards.


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Lynn-Li
    TechNet Community Support


    • Edited by Lynn-Li Tuesday, April 7, 2015 7:09 AM
    • Marked as answer by Lynn-Li Monday, April 20, 2015 1:50 AM
    Tuesday, April 7, 2015 7:08 AM
  • Were you able to find the message?

    Search, Recover, & Extract Mailboxes, Folders, & Email Items from Offline Exchange Mailbox and Public Folder EDB's and Live Exchange Servers or Import/Migrate direct from Offline EDB to Any Production Exchange Server, even cross version i.e. 2003 --> 2007 --> 2010 --> 2013 with Lucid8's DigiScope

    Friday, April 17, 2015 12:42 AM