Ureader.com  
Microsoft software help and Community
   home   |   control panel login   |   archive   |  
 
Exchange
2000.active.directory
2000.admin
2000.announcements
2000.app.conversion
2000.applications
2000.clients
2000.clustering
2000.connectivity
2000.development
2000.documentation
2000.general
2000.information.store
2000.interop
2000.kms
2000.misc
2000.protocols
2000.realtime.collabo.
2000.setup
2000.transport
2000.win2000
admin
application.conversion
applications
clients
clustering
connectivity
design
development
misc
mobility
setup
tools
  
 
date: Tue, 16 Oct 2007 22:13:50 -0700,    group: microsoft.public.exchange.tools        back       


Does this tool exist?   
I need to find out all sent emails from person A to Person B between October 
2006 and May 2007. Person B doesn't know if they've deleted any of them so 
we don't trust just his account.

I can just log into her account and find out, but we'd rather have a utility 
that pulls this up without having to involve them.

We have a lawsuit and our council says we need this info.

Can I extract that somehow and make a new account and restore it to that 
account only?

I'd like a third party software app that can do this, or an MS utility. 
Spending money is ok because this comes up now and then and it would save 
lot's of time.

How would this work? Thanks.

Bryce.
date: Tue, 16 Oct 2007 22:13:50 -0700   author:   bryce

Re: Does this tool exist?   
You options are Message Tracking and Journaling.

Message Tracking usually only tracks messages for the short term (this is 
configurable by you) and you cannot read the body.

Journaling archives ALL mail that is sent and recieved between all users. If 
you do not have Journaling setup you may want to look into it, as it appears 
you've just come up against a compliance issue you now cannot address.

Message Tracking: 
http://www.msexchange.org/tutorials/Exchange-2003-Message-Tracking-Logging.html

Journaling: 
http://www.msexchange.org/tutorials/Implementing-Exchange-2003-Message-Journaling.html


Sorry to be the bearer of bad news.

Oliver
date: Wed, 17 Oct 2007 11:18:15 +0100   author:   Oliver Moazzezi [MVP]

Re: Does this tool exist?   
Further,


> I can just log into her account and find out, but we'd rather have a 
> utility that pulls this up without having to involve them.

She could have deleted the mail, that is why Journaling is so important for 
compliance issues.


> Can I extract that somehow and make a new account and restore it to that 
> account only?

You could restore all your old backups (do you keep them this long however?) 
There is then the issue that the snapshots you have of your mailstores back 
in those points of time may still not have the mail you are looking for (the 
user could have deleted messages prior to your backup starting).


> I'd like a third party software app that can do this, or an MS utility.

Journaling is available out of the box with Exchange, Third party suppliers 
do improve this functionality however. Checkout exclaimer, Zantaz, Symantec 
Enterprise Vault, Google will yield others.

> Spending money is ok because this comes up now and then and it would save 
> lot's of time.

There's nothing you can do if these measures were not in place already..

> How would this work? Thanks.

If you can't pull any meaningful data from my first post, you need to let 
people know you can't comply to this request.

Oliver
date: Wed, 17 Oct 2007 11:24:11 +0100   author:   Oliver Moazzezi [MVP]

Re: Does this tool exist?   
What Oliver tells you is correct.  There is a third-party product or two 
(http://www.ontrack.com is one) that you can use to pull data off of a 
backup tape without having to restore the entire information store.
-- 
Ed Crowley
MVP - Exchange
"Protecting the world from PSTs and brick backups!"

"bryce"  wrote in message 
news:7683C6D9-B657-4AC5-986C-B4A15858ABD5@microsoft.com...
>I need to find out all sent emails from person A to Person B between 
>October 2006 and May 2007. Person B doesn't know if they've deleted any of 
>them so we don't trust just his account.
>
> I can just log into her account and find out, but we'd rather have a 
> utility that pulls this up without having to involve them.
>
> We have a lawsuit and our council says we need this info.
>
> Can I extract that somehow and make a new account and restore it to that 
> account only?
>
> I'd like a third party software app that can do this, or an MS utility. 
> Spending money is ok because this comes up now and then and it would save 
> lot's of time.
>
> How would this work? Thanks.
>
> Bryce.
date: Wed, 17 Oct 2007 19:13:07 -0700   author:   Ed Crowley [MVP]

Re: Does this tool exist?   
I've configured journaling.

Looks like it's what I'll need. Thank you. I'll see how it goes before I 
jump into a third party product.

When I log onto the Journaling account I've created that all email get's 
"journaled" to, and I sort by a particular name, how can I export only that 
data from a particular user?

Also, I'll offload this to a pst file regularly cause it will get very large 
pretty quickly. How do others handle that size I wonder?

Thanks.

Bryce.



"Oliver Moazzezi [MVP]"  wrote in message 
news:%23mHldfKEIHA.4400@TK2MSFTNGP05.phx.gbl...
> Further,
>
>
>> I can just log into her account and find out, but we'd rather have a 
>> utility that pulls this up without having to involve them.
>
> She could have deleted the mail, that is why Journaling is so important 
> for compliance issues.
>
>
>> Can I extract that somehow and make a new account and restore it to that 
>> account only?
>
> You could restore all your old backups (do you keep them this long 
> however?) There is then the issue that the snapshots you have of your 
> mailstores back in those points of time may still not have the mail you 
> are looking for (the user could have deleted messages prior to your backup 
> starting).
>
>
>> I'd like a third party software app that can do this, or an MS utility.
>
> Journaling is available out of the box with Exchange, Third party 
> suppliers do improve this functionality however. Checkout exclaimer, 
> Zantaz, Symantec Enterprise Vault, Google will yield others.
>
>> Spending money is ok because this comes up now and then and it would save 
>> lot's of time.
>
> There's nothing you can do if these measures were not in place already..
>
>> How would this work? Thanks.
>
> If you can't pull any meaningful data from my first post, you need to let 
> people know you can't comply to this request.
>
> Oliver
>
date: Wed, 17 Oct 2007 21:30:33 -0700   author:   bryce

Re: Does this tool exist?   
Ontrack can search the live store or directly from tape backups as well.  If 
the message was sent before journaling was initated, you may have to go back 
to archived tape to find it.  The search features work well.  If you're on 
Netapp storage and purchased the SMBR option, you alread have OEM'd version 
of powercontrols.


"Ed Crowley [MVP]"  wrote in message 
news:%23cxotxSEIHA.748@TK2MSFTNGP04.phx.gbl...
> What Oliver tells you is correct.  There is a third-party product or two 
> (http://www.ontrack.com is one) that you can use to pull data off of a 
> backup tape without having to restore the entire information store.
> -- 
> Ed Crowley
> MVP - Exchange
> "Protecting the world from PSTs and brick backups!"
>
> "bryce"  wrote in message 
> news:7683C6D9-B657-4AC5-986C-B4A15858ABD5@microsoft.com...
>>I need to find out all sent emails from person A to Person B between 
>>October 2006 and May 2007. Person B doesn't know if they've deleted any of 
>>them so we don't trust just his account.
>>
>> I can just log into her account and find out, but we'd rather have a 
>> utility that pulls this up without having to involve them.
>>
>> We have a lawsuit and our council says we need this info.
>>
>> Can I extract that somehow and make a new account and restore it to that 
>> account only?
>>
>> I'd like a third party software app that can do this, or an MS utility. 
>> Spending money is ok because this comes up now and then and it would save 
>> lot's of time.
>>
>> How would this work? Thanks.
>>
>> Bryce.
>
>
date: Thu, 18 Oct 2007 18:19:51 -0700   author:   John Fullbright fjohn@donotspamnetappdotcom

Google
 
Web ureader.com


    COPYRIGHT 2007, YARDI TECHNOLOGY LIMITED, ALL RIGHT RESERVE  |   contact us