none
Single item recovery in Exchange 2013 RRS feed

  • Question

  • I am looking for some help in identifying the simplest process to recover a single item in Exchange 2013 in a scenario where the item is no longer available in the dumpster (i.e. a retained deleted item).

    In Exchange 2010 the process was:

    1. Restore the mailbox database from backup to the Recovery database
    2. Restore the item using the Restore-Mailbox cmdlet with the -AllContentKeywords parameter to identify and restore the individual item (or items) to a target folder in the user's mailbox.

    The Restore-Mailbox cmdlet is no longer available in Exchange 2013. 

    I guess one possible option is the following:

    1. Restore the mailbox database from backup to the Recovery database
    2. Restore the mailbox to a dummy mailbox (or Discovery Mailbox) using New-MailboxRestoreRequest.
    3. Use the Search-Mailbox cmdlet to find the item in the dummy mailbox and restore it to a target folder in the user's mailbox.

    It just seems like a very long-winded method to restore a single item. Any way to do this better?


    Alexei

    Monday, September 15, 2014 11:32 PM

Answers

  • Hi ,

    In exchange 2013 single item recovery work as follows .

    Scenario 1 : Items from the deleted items folder and also the hard deleted items (shift + delete) will move it to the dumpster (i.e deletions folder) which is an sub-folder in recoverable deleted items folder.On that deletions folder items will be retained based upon retention period .

    Scenario 2 : In case if we move the items from the deletions folder it will get move in to the purges folder (if single item recovery is enabled) .purges folder is also one more sub folder for recoverable deleted items folder .

    In purges folder items will be again started to get retain for the whole retention period (I mean to say retention period count will not get calculated from the day when it moves from the deletions folder to purges) instead again that particular email item start to get retained till the whole retention period get's over .

    You can use  mfcmapi tool and e-discovery search in exchange 2013 to recover the items which is moved from deletions folder to purges folder.

    Reference blog : http://www.msexchange.org/articles-tutorials/exchange-server-2010/high-availability-recovery/single-item-recovery-part1.html

    For an additional information litigation and In place hold is one of the feature in exchange which will retain emails for the years that you want .

    http://blogs.technet.com/b/exchange/archive/2013/12/11/litigation-hold-and-in-place-hold-in-exchange-2013-and-exchange-online.aspx

    Note : from 2010 on wards single item recovery feature is available.

    http://blogs.technet.com/b/exchange/archive/2009/09/25/3408389.aspx

    Regards

    S.Nithyanandham




    Thursday, September 18, 2014 5:12 AM

All replies

  • Hi,

    In Exchange 2013, you can use single item recovery to recover items without having to restore the mailbox databases using backup media. This results in considerably shorter recovery periods.

    Refer from:

    http://technet.microsoft.com/en-us/library/ee364755(v=exchg.150).aspx

    To perform single item recovery:

    http://technet.microsoft.com/en-us/library/ff660637(v=exchg.150).aspx

    Best Regards.

    Tuesday, September 16, 2014 9:36 AM
  • Hi Lynn-Li

    As indicated in my original post I am looking for a solution where the item has passed the deleted item retention period.  In other words it is no longer possible to recover it using the "Recover Deleted Items" option.


    Alexei

    Wednesday, September 17, 2014 11:28 PM
  • Hi ,

    In exchange 2013 single item recovery work as follows .

    Scenario 1 : Items from the deleted items folder and also the hard deleted items (shift + delete) will move it to the dumpster (i.e deletions folder) which is an sub-folder in recoverable deleted items folder.On that deletions folder items will be retained based upon retention period .

    Scenario 2 : In case if we move the items from the deletions folder it will get move in to the purges folder (if single item recovery is enabled) .purges folder is also one more sub folder for recoverable deleted items folder .

    In purges folder items will be again started to get retain for the whole retention period (I mean to say retention period count will not get calculated from the day when it moves from the deletions folder to purges) instead again that particular email item start to get retained till the whole retention period get's over .

    You can use  mfcmapi tool and e-discovery search in exchange 2013 to recover the items which is moved from deletions folder to purges folder.

    Reference blog : http://www.msexchange.org/articles-tutorials/exchange-server-2010/high-availability-recovery/single-item-recovery-part1.html

    For an additional information litigation and In place hold is one of the feature in exchange which will retain emails for the years that you want .

    http://blogs.technet.com/b/exchange/archive/2013/12/11/litigation-hold-and-in-place-hold-in-exchange-2013-and-exchange-online.aspx

    Note : from 2010 on wards single item recovery feature is available.

    http://blogs.technet.com/b/exchange/archive/2009/09/25/3408389.aspx

    Regards

    S.Nithyanandham




    Thursday, September 18, 2014 5:12 AM
  • Hello,

    As far as I understand the initial question  - "As indicated in my original post I am looking for a solution where the item has passed the deleted item retention period.  In other words it is no longer possible to recover it using the "Recover Deleted Items" option." - has NOT been answered: all answers posted above refer to the subfolders of the deleted items folder (Purges, ...) so would anyone please answer the simplest question: is it possible to recover a single item from a database BACKUP (NOT from the dumpster!) - just "yes" or "no" ?

    If the answer is "yes" then how it can be done?

    Thank you in advance,
    Michael Firsov

    Wednesday, April 17, 2019 2:08 PM
    1. Yes
    2. Do a DB restore from backup that contains the needed item and this article shows you the required steps https://docs.microsoft.com/en-us/exchange/high-availability/disaster-recovery/restore-data-using-recovery-dbs?view=exchserver-2019
    3. Other option would be to restore a backup of the EDB to disk and then use DigiScope to open the offline EDB where you can then do a direct restore to the desired mailbox by using one of the Restore Wizards OR via Drag-N-Drop

    Search, Recover, Export Mailboxes, Contacts, Calendars, Tasks from ALL versions of Exchange Offline EDB's, On-Premises Exchange Databases & Office 365. Export, Migrate/Recover into On-Premises Exchange Server, Office 365 with Lucid8's DigiScope

    Wednesday, April 17, 2019 9:29 PM
  • The article you mentioned ends with this last step:

    "New-MaiboxRestoreRequest ..."

    - this command will restore the whole mailbox, NOT an individual item.

    Regards,
    Michael


    • Edited by MF47 Thursday, April 18, 2019 8:50 AM
    Thursday, April 18, 2019 8:49 AM
  • Yes, you can use third party tools - Ontrack, Digiscope, Stellar Repair for Exchange or Veeam.
    • Proposed as answer by MF47 Thursday, April 18, 2019 10:21 AM
    Thursday, April 18, 2019 9:00 AM
  • First Restore the database from backup to recovery database.
    Then restore the mailbox to a dummy mailbox using New-MailboxRestoreRequest powershell command.
    Now use "Search-Mailbox" to find that single mailbox item in the dummy mailbox.

    Please refer this article: https://social.technet.microsoft.com/wiki/contents/articles/24896.exchange-server-2013-configuring-single-item-recovery.aspx

    • Proposed as answer by MF47 Thursday, April 18, 2019 10:21 AM
    Thursday, April 18, 2019 9:38 AM
  • Thank you all for your help!

    Regards,
    Michael

    Thursday, April 18, 2019 10:21 AM