|
|
|
date: Fri, 14 Apr 2006 06:28:02 -0700,
group: microsoft.public.exchange2000.admin
back
Re: Restoring Mailboxes to Recovery Server
On Fri, 14 Apr 2006 06:28:02 -0700, Pearl
wrote:
>We have a server located in a separate forest to conduct Legal and other
>special Mailbox recovery requests. Generally speaking we perform our
>recoveries as follows:
>1. Create a separate Restore acct called "restore" on the Restore Server in
>the separate Forest
>2. Perform Tape restore to the Restore Server ( the Restore server has
>exact configuration as production server and all storage grps/stores are
>identically labelled)
>3. We restore from tape Week by Week mailbox information (commit the logs
>as we process each week) then Exmerge Copy the files to a separate folder on
>the Restore Server. We also recover DUMPSTER information at this time.
>4. When all the weeks are recovered, we Exmerge/Import each week's PST file
>into a single PST
>5. We then Exmerge/copy that last PST for our Investigation/Special mailbox
>recovery file.
>
>Now, here's the issue. Somehow during the Exmerge/Import process "some"
>emails going into the Deleted Items folder show up with the RESTORE acct in
>the TO: field vs the username. In other words, if the Exmerge copied the
>mailbox (including the dumpster data) to the reconnected RESTORE acct, some
>of the emails show up as "restore" in the To: field. My guess is that these
>emails are those that were recovered from the dumpster. On the Weekly PSTs
>copied from the mailbox there is no indication of the RESTORE acct being
>addressed in the TO field, however. They only occur after Exmerge/Import.
>
>Am looking for a reason or solution? If this is normal, I just need to know
>this so I can explain it to our Legal folks who are wondering why this occurs.
>
>Thanks very much
Not one single thing, not one, of what you are doing would stand up to
scrutiny in court. You are utterly, totally and completely wasting
your time.
Unless you run some form of archiving solution that does not involve
data being bandied about all over the shooting match and losing
original information you may as well not bother.
My question is are you using this for genuine legal work or just
delving into stuff internally where the level of proof is not as high?
date: Fri, 14 Apr 2006 15:43:26 +0100
author: Mark Arnold [MVP]
Re: Restoring Mailboxes to Recovery Server
Thanks Mark for responding: To answer your question - we are using this
process for all Public Information Requests, General Mailbox recoveries for
internal investigation (level of proof not critical) and even Legal/Court
investigations. Your comments give me concern....if this is not a good
method , then what procedure would give us the level of investigative
scrutiny that we would need?
Btw...still would like to know why the emails are being labeled with our
Restore Acct? Also, recently discovered that I was wrong....the emails are
not coming from the Dumpster information but rather are emails that already
exist in the mailbox.
Thanks
"Mark Arnold [MVP]" wrote:
> On Fri, 14 Apr 2006 06:28:02 -0700, Pearl
> wrote:
>
> >We have a server located in a separate forest to conduct Legal and other
> >special Mailbox recovery requests. Generally speaking we perform our
> >recoveries as follows:
> >1. Create a separate Restore acct called "restore" on the Restore Server in
> >the separate Forest
> >2. Perform Tape restore to the Restore Server ( the Restore server has
> >exact configuration as production server and all storage grps/stores are
> >identically labelled)
> >3. We restore from tape Week by Week mailbox information (commit the logs
> >as we process each week) then Exmerge Copy the files to a separate folder on
> >the Restore Server. We also recover DUMPSTER information at this time.
> >4. When all the weeks are recovered, we Exmerge/Import each week's PST file
> >into a single PST
> >5. We then Exmerge/copy that last PST for our Investigation/Special mailbox
> >recovery file.
> >
> >Now, here's the issue. Somehow during the Exmerge/Import process "some"
> >emails going into the Deleted Items folder show up with the RESTORE acct in
> >the TO: field vs the username. In other words, if the Exmerge copied the
> >mailbox (including the dumpster data) to the reconnected RESTORE acct, some
> >of the emails show up as "restore" in the To: field. My guess is that these
> >emails are those that were recovered from the dumpster. On the Weekly PSTs
> >copied from the mailbox there is no indication of the RESTORE acct being
> >addressed in the TO field, however. They only occur after Exmerge/Import.
> >
> >Am looking for a reason or solution? If this is normal, I just need to know
> >this so I can explain it to our Legal folks who are wondering why this occurs.
> >
> >Thanks very much
>
> Not one single thing, not one, of what you are doing would stand up to
> scrutiny in court. You are utterly, totally and completely wasting
> your time.
>
> Unless you run some form of archiving solution that does not involve
> data being bandied about all over the shooting match and losing
> original information you may as well not bother.
>
> My question is are you using this for genuine legal work or just
> delving into stuff internally where the level of proof is not as high?
>
>
date: Fri, 14 Apr 2006 11:40:02 -0700
author: Pearl
|
|
