How to recover deleted items in Office 365 dedicated/ITAR

Symptoms
In Office 365 dedicated/ITAR, you find that an item is unexpectedly deleted from a mailbox.
Cause
This behavior occurs because deleted items are stored in several mailbox locations before they are completely removed.
Resolution
Microsoft Exchange Server and Microsoft Outlook provide several methods to let users recover content that's mistakenly deleted. For more information about recovery options in Exchange, see the following TechNet topics:

Outlook

If an item is removed from the Deleted Items folder, it remains in the Recoverable Items folder of that mailbox up to 30 days. (This is the default setting in Office 365 dedicated/ITAR). To find the item, follow these steps:

  1. In Outlook, click the Folder option, and then click Recover Deleted Items.

    • Outlook 2010

      Screen shot of the Recover Deleted Items option
    • Outlook 2007

      Screen shot of the Recover Deleted Items option
  2. The Recover Deleted Items feature makes messages visible after they are permanently deleted (Shift+Delete) or removed from the Deleted Items folder. The Subject, Deleted On, From, Received, and Sent To columns are exposed for all items. You can click the column headers to reorder the contents to make it easier to find specific items.

    Note You may have to expand the window or scroll to the right to expose the Received and Sent To columns.

    Screen shot of the Recover Deleted Items page

  3. Highlight a specific item or group of items, and then click Recover Selected Items to recover the content by moving it to the Deleted Items folder.

Note If an item is purged from Recover Deleted Items, it's saved in the Purges folder. Only an administrator can recover the contents of the Purges folder. For more information, see the Administrator Only section.

OWA - Exchange 2013 only

To search for items in the Recover Deleted Items folder in Outlook Web App (OWA) in Exchange 2013, follow these steps:

  1. In the Folders list, select Deleted Items.

    Screen shot of the Recover Deleted Items folder

  2. In the Deleted Items folder, click the “Retrieve messages that were recently deleted or emptied from this folder” link.

    Screen shot of the message “Retrieve messages that were recently deleted or emptied from this folder”

    Note A new window opens and displays items in the Recover Deleted Items folder.

    Screen shot of the Recover Deleted Items folder

  3. To search for messages that were sent by a specific user or that contain specific content, click the Search icon (magnifying glass).

    Screen shot of the search icon in Recover Deleted Items folder

  4. Select the item that you want to recover. After a check box appears next to the item, click Recover.

    Screen shot of the Recover Deleted Items folder with Recover option highlighted

    Note The item is recovered to a specific folder, depending on the item type.

    Screen shot of the recover items page

Administrators only

If a user accidentally deletes an item from the Deleted Items folder, the content is moved to the Purges folder. Only administrators can access this folder. To do this, use Microsoft Exchange Server MAPI Editor (MFCMAPI).

Requirements:
  • The administrator must have Full Access permissions to the mailbox.
  • An online Outlook profile is required.
To recover items form the Purges folder, follow these steps:

  1. Download the MFCMAPI tool.
  2. Double-click Mfcmapi.exe.
  3. Click OK.

    Screen shot of the MFCMAPI tool page

  4. Click Session, and then click Logon.

    Screen shot of the logon option

    Notes
    • You're prompted to select a profile. You can also create a profile by clicking New.
    • To recover purged content, an online Outlook profile is required.

      Screen shot of choose profile page

  5. Double-click the user.

    Screen shot of the user listed in result list

  6. Expand Root Container, and then expand Recoverable Items.

    Screen shot of the Root Container and the Recoverable Items page

    You see the following Recoverable Items subfolders:

    • Calendar Logging: This subfolder contains calendar changes that occur in a mailbox. This folder isn’t available to users.
    • Deletions: This subfolder contains all items that are deleted from the Deleted Items folder or permanently deleted (Shift+Delete). These items are available for recovery by users, as described earlier in this article.
    • Purges: This subfolder contains items that are removed from the Deletions folder. If a user is on Litigation hold, content that's expired from the Deletions folder remains in this folder. This folder isn't visible to users.
    • Versions: If In-Place Hold or Litigation Hold is enabled, this subfolder contains the original and changed copies of the deleted items. This folder isn't visible to users.
  7. If the user suspects that an item was accidentally sent to the Purges folder, double-click Purges.

    Screen shot of the purges page

  8. Highlight the item that you want to recover, and then click Copy messages.

    Screen shot of the Copy messages option

  9. Close the window, and then expand Top of Information Store to expose the folders that are visible to users in Outlook.

    Screen shot of the the Top of Information Store

  10. Right-click the folder that you want to recover the items to, and then click Paste.

    Screen shot of the paste option

    Notes
    • You’re prompted to select the "Move the item instead of Copy" option. We recommend that you use this option to avoid the confusion of having multiple copies of the item.
    • The recovered item is available to the user in the specified folder in Outlook.

      Screen shot of the move the message option
Properties

Article ID: 3139942 - Last Review: 02/18/2016 05:06:00 - Revision: 3.0

Microsoft Business Productivity Online Dedicated, Microsoft Business Productivity Online Suite Federal

  • vkbportal226 kbgraphic kbgraphxlink KB3139942
Feedback