Recover emails - o365

Saurabh Singh 26 Reputation points
2022-11-07T06:09:30.08+00:00

5 emails I want recovering in o365.

I do have following information - sender address (Internal email) Recpient status deliver and message subject.

Office Management
Office Management
Office: A suite of Microsoft productivity software that supports common business tasks, including word processing, email, presentations, and data management and analysis.Management: The act or process of organizing, handling, directing or controlling something.
1,999 questions
Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,171 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,342 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. !Daniel Bradley 1,056 Reputation points MVP
    2022-11-07T07:39:29.247+00:00

    Hi @Saurabh Singh

    If you want to recover emails that have been deleted, you will need to do so from the recipient's mailbox or through PowerShell.

    You can use the Get-RecoverableItems cmdlet to view deleted items in a mailbox and you can then use the Restore-RecoverableItems cmdlet to restore them.

    Here is an example:

    Get-RecoverableItems -Identity user@mathieu.company .com -SubjectContains "please do not delete" -FilterItemType IPM.Note -FilterStartTime "06/11/2022 12:00:00 AM" -FilterEndTime "07/11/2022 12:00:00 AM"

    If this returns the expected results, then you can use the restore cmdlet as follows:

    Restore-RecoverableItems -Identity user@mathieu.company .com -SubjectContains "please do not delete" -FilterItemType IPM.Note -FilterStartTime "06/11/2022 12:00:00 AM" -FilterEndTime "07/11/2022 12:00:00 AM"

    You can also use the eDiscovery feature to export search results to a PST > https://learn.microsoft.com/en-us/exchange/security-and-compliance/in-place-ediscovery/export-search-results

    0 comments
  2. KyleXu-MSFT 26,206 Reputation points
    2022-11-08T01:38:54.407+00:00

    @Saurabh Singh

    As DanielBradley-7505 said, if those emails in/before Deletions folder, you could use above command to find and recover them.

    If those emails arenot in the Deletions items (Deleted from this folder), you need to check whether Hold is enabled for this mailbox before emails deleted. If there doesn't exist hold for this mailbox, those emails cannot be recovered. Create a Litigation hold

    258033-litigationholdlifecycle.png

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments