Scenario: A user is missing a message in their mailbox claiming it ‘disappeared’. The possibilities are:
- The message was accidentally deleted.
- The message was accidentally moved into another folder.
- The message exists in the mailbox folder, except the items in that folder are not sorted correctly. Note:Sorting by the Received date will make all emails in that folder in chronological order
Solutions:
You could request permission from the user who owns the mailbox to allow you to have full access permission and search their mailbox via OWA — but this can be a little time consuming. Instead perform a ‘search-mailbox’ against the mailbox to locate the missing message:
Get a count of all messages that match the subject line:
Search-Mailbox jdoe1 -SearchQuery Subject:”Attention: Please Read this Email” -EstimateResultOnly
Create a copy of the messages that match the subject line:
Search-Mailbox jdoe1 -SearchQuery Subject:”Attention: Please Read this Email” -targetmailbox ExAdmin1 -searchdumpster
OR for a search with additional properties to be queried:
Search-Mailbox jdoe1 -SearchQuery {Subject:”Attention: Please Read this Email” AND from:”President@Domain.com” AND Sent:”7/10/2015″} -Targetmailbox ExAdmin1 -searchDumpster
Note: it may request you to name a target folder so it can create that folder in the ExAdmin1 mailbox. The search results will be then copied to that target folder in the folder hierarchy for where the messages are stored. For example, if there are messages in the inbox and deleted items of the mailbox being searched against, you will have the search results copied to the inbox and deleted items folder under the targetfolder that was created.