Export Mail Addresses with specific email subject in exchange server 2019

Question

Hello, Someone from outside sent a mail to 500 of users of our environment. Now I want to find out the list of 500 mailboxes who got the mail. Now how can I find out it by exchange management shell. I need Mail Address, Received Event and Subject. Please provide me the command. For example: The mail subject is "Test" and ******@domain.com and ******@domain.com received the mail and also deleted the email from ******@domain.com. Now I want to run a command with the subject where the mail is currently exist and then output should be @domain.com@domain.com

Answer 1

Hi @Rubiat Rafi

Please first assign the Mailbox Import Export role to the admin account you are using in Exchange Admin Center>permissions>admin Roles.

Then run this cmdlet in Exchange Management Shell to search all mailboxes for this email and export the result to a mailbox you specify (in the following example the search result will be sent to admin's inbox folder):

Get-Mailbox -ResultSize Unlimited | Search-Mailbox -SearchQuery "Subject:Test" -TargetMailbox "admin" -TargetFolder "inbox" -LogOnly -LogLevel Full

Once the search completes, you will receive an email like:

---

In the csv file you will see results like:

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".  Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.