1,448 questions
Yes, change the PurgeType value to HardDelete. Refer to the cmdlet help for more details: https://learn.microsoft.com/en-us/powershell/module/exchange/new-compliancesearchaction?view=exchange-ps#-purgetype
Questions about using the powershell command to permanently delete phishing emails
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(3.2, 84%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
cscowx
0
Reputation points
Run the powershell command to query all emails with the subject "3232323" and delete them
Deleted messages will be saved in "Deleted message" > "Restore deleted items"
Is there any way to permanently delete a message for all mailboxes, that is, deleted messages are not saved in Restore deleted items?
The command is as follows
New-ComplianceSearch -Name "Remove-Mail-Message-1" -ExchangeLocation all -ContentMatchQuery "sent>=01/28/2024 AND sent<=02/28/2024 AND Subject:'3232323'" Start-ComplianceSearch -Identity "Remove-Mail-Message-1" New-ComplianceSearchAction -SearchName "Remove-Mail-Message-1" -Purge -PurgeType SoftDeleteRun the powershell command to query all emails with the subject "3232323" and delete them
Exchange Exchange Server Other
Exchange Exchange Server Management
7,920 questions
Windows for business Windows Server User experience PowerShell
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous2024-02-01T06:47:55.2333333+00:00 Hello, I completely agree with Vasil Michev's suggestion and recommend that you give it a try. Additionally, if you find the answer helpful, you could accept the answer to help people who have the same issue :)
-
Anonymous
2024-02-06T09:42:26.3366667+00:00 Hello, it's been a few days and I'm checking the progress on this issue. If the information provided was helpful to you, you could mark the answer to help others with the same problem :)
Sign in to comment
3 answers
Sort by: Most helpful
-
Vasil Michev 119.5K Reputation points MVP Volunteer Moderator2024-01-31T08:30:58.5366667+00:00 -
cscowx 0 Reputation points
2024-02-01T07:19:26.98+00:00 Thank you both for your responses
My email server version is exchange server 2016
Question 1:
New-ComplianceSearchAction -SearchName "Remove-Mail-Message-1" -Purge -PurgeType HardDeleteI entered the parameter HardDelete and an error was reported that this parameter could not be processed
In addition, I have read the parameter description of New-ComplianceSearchAction, HardDelete only supports Cloud
Question 2:
I log in to the Exchange Management Shell and run the following command
New-ComplianceSearch -Name "Remove-Mail-Message-1" -ExchangeLocation all -ContentMatchQuery "sent>=01/28/2024 AND sent<=02/28/2024 AND Subject:'群组测试'"
Start-ComplianceSearch -Identity "Remove-Mail-Message-1"
New-ComplianceSearchAction -SearchName "Remove-Mail-Message-1" -Purge -PurgeType SoftDelete
When I perform New-ComplianceSearchAction, I always return The search "Remove-Mail-Message-1" didn't return any results
Does the Subject not support Chinese characters
-
Vasil Michev 119.5K Reputation points MVP Volunteer Moderator
2024-02-01T07:45:51.1133333+00:00 If you are on Exchange server, use the Search-Mailbox cmdlet instead, much easier to work with: https://learn.microsoft.com/en-us/powershell/module/exchange/search-mailbox?view=exchange-ps It allows you to preview the content before deleting, or even copy it to another mailbox as a backup.
-
cscowx 0 Reputation points
2024-02-01T08:10:47.3066667+00:00 Search-Mailbox -Identity "******@semidrive.cc" -SearchQuery "Subject:'群组测试'" -DeleteContent
When I used the Search-Mailbox command to delete it, there was no problem for Subject to enter Chinese characters here, and it could be deleted successfully
Why can't I query any records when I run the New-ComplianceSearch command and enter Chinese characters when defining Subject?
If I want to delete emails from all mailboxes in the database based on the specified Subject content, what do I do with the Search-Mailbox command? It seems that -Identity does not have the all parameter
-
Vasil Michev 119.5K Reputation points MVP Volunteer Moderator
2024-02-01T08:22:08.7366667+00:00 You can simply pipe it against a set of mailboxes. For example:
Get-Mailbox -Database MBXDB01 | Search-Mailbox -EstimateResultOnlyOf course, be extra careful when doing that with the -DeleteContent switch, as a simple mistake can wipe a lot of data. That's why I mentioned the option to copy content to another location as part of the process.
-
cscowx 0 Reputation points
2024-02-01T09:35:36.66+00:00 The strange thing is that I don't know why the value of my -Identity defined here is Chinese characters, and the result can not be queried any result, but the result can be queried when it is defined as English or number
[PS] C:\Windows\system32>Search-Mailbox -Identity "******@semidrive.cc" -SearchQuery "Subject:'中国火车'" -EstimateResultOnly
警告: 如果指定搜索查询，则对于每个邮箱，Search-Mailbox cmdlet 将返回多达 10000 个结果。要返回 10000 个以上的结果，请使用 New-MailboxSearch cmdlet 或Exchange 管理中心中的就地电子数据展示和保留控制台。
RunspaceId : 67f3279a-2971-448d-b7d3-26eda78c650f
Identity : semidrive.cc/Employee/SM-NJ/python123
TargetMailbox :
Success : True
TargetFolder :
ResultItemsCount : 0
ResultItemsSize : 0 B (0 bytes)
-
Vasil Michev 119.5K Reputation points MVP Volunteer Moderator
2024-02-01T13:38:55.3+00:00 I'm not sure whether Search-Mailbox actually supports double-byte char languages, such as Chinese. A quick search online failed to find any document that explicitly mentions that... it might be that only (advanced) eDiscovery supports them.
Sign in to comment -
-
cscowx 0 Reputation points
2024-02-02T06:38:00.02+00:00 Hi，I'm not sure if the SearchQuery in search-Mailbox doesn't support Chinese text queries
Can you take a look at it for me
$Subject = "中国飞象"
Search-Mailbox -Identity "******@semidrive.cc" -SearchQuery "Subject:$($Subject)" -EstimateResultOnly
RunspaceId : 2a346e7c-6b08-4f0d-b438-46549061be7b
Identity : semidrive.cc/Employee/IT/python123
TargetMailbox :
Success : True
TargetFolder :
ResultItemsCount : 0
ResultItemsSize : 0 B (0 bytes)
-
Anonymous
2024-02-02T09:34:59.9833333+00:00 Hello @cscowx ,
Yep, based on our experience and some user feedback we have seen in the past, when the theme contains Chinese, it may not be possible to search accurately.
If the email subject you want to batch search happens to contain Chinese, it is recommended that if you cannot search for the email when using Search-Mailbox, you could try to match it by adjusting the length of the keywords contained in the subject, combining it with other filtering conditions such as date ranges, etc. to the mail. There is a Chinese post discussing related issues here. You could also refer to it:https://learn.microsoft.com/en-us/answers/questions/1457734/exchange2019