Search a users mailbox for a "missing" email

Is there a command line or script used to locate an email that a user claims was moved or never came in, yet the server states it was delivered?
I am basically looking for a way to search a users mailbox thru command or powershell and have it display the folder/path in Outlook where the message was dragged to accidentally.
I tried the Search-Mailbox -Identity "Fred Flintstone" -SearchQuery 'from:[email protected]' but I don't want to delete or export the message, just find the path where its located in Outlook.
Thanks in advance.

Hi,
Try this command:
Search-Mailbox -Identity "Fred Flintstone" -SearchQuery 'from:[email protected]' -TargetMailbox “your mailbox” -TargetFolder “folder name” -logLevel Full
This command just copy the message from source mailbox as attachment to target mailbox with full log level. Then you can open that attachment to see more details.
Note: we cannot use the EstimateResultOnly switch with the
TargetMailbox and Loglevel parameter.
Best Regards.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Lynn-Li
TechNet Community Support

Similar Messages

O365 EWS API - search one or more mailboxes for specific email, check if read?

Howdy All -
Can anyone point me as to how you can search a single or multiple mailboxes for a specific email by sender or subject to find out if the email was read?
I have scoured the net and can not find anything related to this for O365 or even Exchange 2013.
Thx!
Domran

You could use EWS to search mailboxes.
https://msdn.microsoft.com/EN-US/library/office/dn579422(v=exchg.150).aspx. You can easily check the
IsRead property on mail items.
However, I would point out that finding out if a mail is read is somewhat troublesome. How do you know a mail was read? If it is marked read? Users can toggle the read/unread state of a message, so that's kind of unreliable. You can also right-click a folder
and choose "Mark all as read", without ever actually reading the message. So depending on what you're trying to do, this may not be something you can programmatically determine.

How to move an email from user mailbox to shared mailbox using apps for office mail app

How can I move an email from a users main mailbox to a shared mailbox using apps for office. I know I can do this manually but i am creating an for owa/outlook that would be a button to move the item. I have tried using ews but can only find
the commands to move emails inside the users mailbox
for example :
'<?xml version="1.0" encoding="utf-8"?>' +
'<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"' +
' xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages"' +
' xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types"' +
' xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">' +
' <soap:Header>' +
' <t:RequestServerVersion Version="Exchange2013" />' +
' </soap:Header>' +
' <soap:Body>' +
' <m:MoveItem>' +
' <m:ToFolderId>' +
' <t:DistinguishedFolderId Id="junkemail" />' +
' </m:ToFolderId>' +
' <m:ItemIds>' +
' <t:ItemId Id="' + id + '" ' +
' ChangeKey="' + changeKey + '" />' +
' </m:ItemIds>' +
' </m:MoveItem>' +
' </soap:Body>' +
'</soap:Envelope>';
Can I create a xml that would would do this? Is there a way to do it using the EWS service reference. I do not want to use import/export to do this.

yes I was able to make it work using Microsoft.Exchange.WebServices.Data and writing it as a web API, however i am unable to to authenticate the user if it is hosted on another server (without them retyping their password. I assume that
their is a matching java script version of what i am doing on the api side. I am just stuck trying to figure it out. the below code works as a Web Api if i could authenticate the user.
ExchangeService service = new ExchangeService(ExchangeVersion.Exchange2013);
service.Url = new Uri("Ews url");
service.Credentials = CredentialCache.DefaultCredentials;
//service.UseDefaultCredentials = true;
// Create a new folder view, and pass in the maximum number of folders to return.
FolderView view = new FolderView(5);
// Create an extended property definition for the PR_REPLICA_LIST property.
ExtendedPropertyDefinition PR_REPLICA_LIST = new ExtendedPropertyDefinition(0x6698, MapiPropertyType.Binary);
view.PropertySet = new PropertySet(BasePropertySet.IdOnly, FolderSchema.DisplayName, PR_REPLICA_LIST);
// get to the inbox folder of spam mailbox
Mailbox SpamMailbox = new Mailbox("Smtp of other mailbox");
FolderId SpamInbox = new FolderId(WellKnownFolderName.Inbox, SpamMailbox);
Folder SpamFolder = Folder.Bind(service, SpamInbox);
FindItemsResults<Item> findItems = service.FindItems(WellKnownFolderName.JunkEmail, new ItemView(10));
foreach (Item item in findItems)
item.Load();
ItemId ItemToMoveId = new ItemId(item.Id.UniqueId.ToString());
Item ItemToMove = Item.Bind(service, ItemToMoveId);
ItemToMove.Move(SpamFolder.Id);
//item.Move(SpamFolder.Id);

Exchange 2013 - Missing Emails sent internally

Can someone please help me diagnose what has happened with the following problem
User1 sends an email at 23:18 from his works laptop at home which is connecting to exchange using Outlook Anywhere
User1 sends an email to 4 users: "User2, User3, User4, UserEx" - UserEX is an external user.
User3, User4 & UserEX - Received the email
User2 - Did not received the email
User1 - Travels to place of works and logs onto his works PC (not the laptop which is at home)
User1 - Also receives a copy of all messages sent to User2 and notices that he doesn't have a copy of the email he sent to User2 at 23:18.
User1 - Checks his sent items, there is no email there from 23:18
User1 - Confirms that User3, User4 received the email, which they have.
He contacts me (support) asking what is going on. I investigate by looking at his OWA (thinking it could be a syncing issue), the email doesn't show up UNLESS I do an advance search on his OWA Email Box, which tells me there are two emails 1 in his Inbox
and 1 in his drafts. Move away from the advanced search and the email cannot be found.
I complete a Deliver Report for User2 for this missing email; Results below
Submitted
19/01/2015 23:18 EXC01
The message was submitted to exc01.*.
Pending
19/01/2015 23:18 exc01.
Message was received by exc01. from EXC01.
19/01/2015 23:18 exc01.
This message was redirected to another email address.
19/01/2015 23:18 exc01.
The message has been transferred from exc01. to EXC01.
Delivered
19/01/2015 23:18 exc01.
The message was successfully delivered.
Even the Get-MessageTrackingLog tells me the message was sent. Though there was a HAREDIRECTFAIL & AGENTINFO in the processing.
If anyone can help me workout what the heck is happening here, id be very appreciative.
Thanks
Neil

Hi there Amy,
User1 sends about 10-20 emails a day to User2 and they have been fine since and beforehand. Its just this instance.
User1 = Director
User2 = PA
It was an Email not a Meeting Request.
The email in question was being replied to.
To: UserEX
Cc: User2; User3; User4
The Director receives a copy of all emails sent to his PA. In this instance neither one of them received the email. The only people to receive the email was UserEX, User3, User4.
Also the Directors email (User1) wasn't in his sent items on his work PC in the morning. (Remember he sent it from his laptop at home during the late evening the day before).
The trackinglogs & delivery reports, say that the email got delivered to all recipients. Further investigation suggests that this email is there but not visible to them.
Its a strange one I know, but I'm wondering what would cause an email to be there but not invisible?.

Mailbox Converted from Shared Mailbox to User Mailbox; Unable to log on using Outlook

Hi,
We set up Office 365 couple of weeks ago and set up a shared mailbox "sales". This didn't meet our needs as we wanted the users to be send email from the sales email box and have these email appear in the set items folder of the sales mailbox,
not from the users mailbox.
Therefore following some instructions, we used the shell to convert the mailbox to a user mailbox. Correctly, this email box now no longer appears in the list of shared mailboxes in the admin site, it appears in the user section.
We have also successfully assigned this sales user a licence <label boxtype="Label" class="BOX-MainTertiary o365-ns-c LicenseProduct" for="sku0">Office 365 MidSize Business including of course </label>"<label
boxtype="Label" class="BOX-MainBodyText" for="sku0_Service2">Exchange Online Plan 1".</label>
However, when we try and add this email box into outlook, it fails, after requesting the password several times. We have checked the password by signing into webmail and this has no issue, it works correctly. We therefore have the correct password, but this
conversion seems to have caused a problem?!<label boxtype="Label" class="BOX-MainBodyText" for="sku0_Service2"></label>
The second issue is that the shared mailbox still appears within the users outlook as a shared mailbox, it hasn't removed itself. trying to right click and close complains it is associated with an email account, meaning it wants us to remove the whole
account and add it again? Surely if its no longer shared it should vanish?

What you're trying to do will have its own problems because Outlook does not serve two masters well. Trust me on this, trying to open two mailboxes simultaneously this way, rather than opening the mailbox as a second mailbox (which doesn't give you
the Sent Items behavior you crave), will cause you plenty of other problems.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

How do I create an Archive Mailbox for a pop3 account on an iPhone4?

How do create an Archive Mailbox for a pop3 email account on an iPhone4 running iOs6?

You can use classifications but there is no auto feature to archive like that on web apps.
In terms of the blog, Like I have said to everyone that has posted about blog preview images:
http://www.prettypollution.com.au/business-catalyst-blog
Just one example of an image at the start of the blog post rendering out, not hard at all.

New User Mailbox not showing up in GAL - Created wrong?

I have a strange issue that is causing me angst and making me argue with my network manager. Here's the lowdown. Please shed some light on it if you can.
Every place I have worked prior to my current company I would do the following steps to create a new user (new employee). In AD I would
copy an existing user with the same/similar permissions, distro list membership, etc... Then go into
EMC and create a new mailbox for an existing user
and link it to the new AD object I had just created. This always worked for me. Here it doesn't. When I do it that way, the new user mailbox does not get added to the GAL. If you go to
All Users they show up. I have read several articles about using cached mode and if I turn it off the user will show up. Unfortunately most of our employees are in the field for long periods of time so we need to run in cached mode.
The way the network manager wants them created (and this way works) is to create a new user mailbox for a
new user in EMC which also creates the AD object. Then I have to go back to AD and manually add the user to permissions groups, distro lists, add profile settings, etc... Very tedious and manual process.
Can someone help me understand why doing it my way, which I have done for years on other networks, is not working here? Since we are using cached mode do I have to create the user object and mailbox the way he does it?

I believe the way you are doing it and the way he is doing it is doing exactly the same thing as far as when it shows up in the GAL. The problem sounds like exactly what you said in that you are using cached mode which uses an Offline Address Book
(OAB). If you look in EMC under Organization Configuration/Mailbox/Offline Address Book, you will see the update schedule. What happens is when you create the account it shows up in the address book right away however it only shows up in the OAB
when that updater runs. Even after that is done, the outlook client needs to go out and download the OAB file, which happens 24 hours from the time it last downloaded the OAB. I'm not sure if there is a fix for your problem as it appears to be
by design. Perhaps your old company may have been running in online mode? You may want to look at
http://support.microsoft.com/kb/841273/en-us for more details.
Q1: What is cached mode?
A1: Cached mode is the new default configuration for Outlook. It provides an experience that is similar to the offline configuration in earlier versions of Outlook. When you are running in cached mode, your Exchange mailbox is synchronized to a local
file (an .ost file), and the offline address list from your Exchange computer is synchronized to a collection of files (.oab files) on your client computer. Outlook directly accesses the .ost file and the .oab files on your hard disk instead of communicating
directly with your server or servers. Therefore, network communication between Outlook and Exchange is significantly reduced.
Q2: Why does cached mode generate an offline address book?
A2: The offline address book contains a set of all the properties of a user (such as e-mail addresses and names) that Outlook requires. With an offline address book, Outlook does not have to connect to the global catalog to resolve names, nor
does it have to open a person’s details record. Instead, Outlook easily obtains this information from the local offline address book.
Q5: How frequently is the offline address book updated on the Outlook client?
A5: If left constantly running, Outlook in cached mode automatically updates the offline address book on the client every 24 hours. The 24-hour time period is measured from the time that the offline address book was last downloaded successfully. For
example, if you complete an offline address book download at 09:00 today, Outlook will start the offline address book download the next day at approximately 09:00. Therefore, different people will receive updates at different, random times.
Note The default setting on the Exchange computer is to generate an offline address book differential file every morning at 04:00. For a change that is made in Active Directory to reach the client computer, the following events must occur:
The change must be picked up by the Exchange computer that generates the offline address book files. This can take several hours. At worst, it can take 24 hours. This variable will be referred to as "x."
The Outlook clients must download the offline address book updates every 24 hours. This update can take several hours. At worst, it can take 24 hours. This variable will be referred to as "y."
The update reaches the client machines x+y hours later. It would be rare for a client to ever experience a 48-hour delay or more unless there were some Active Directory or public folder replication issues.

User exit for checking the vendor emailid in me22n or me21n

hi all,
     can anybody suggest me a user exit for checking the email id of the vendor in me21n or me22n or me29n.
   plz suggest me a solution its urgent.

hi yaan,
       i checked with the user exit that u suggested me, it is getting triggered, i am able to check whether the vendor email id is present or not, but this is happening all the time that is even when the user dont want to send a email to the vendor i.e. he just wants to print the purchase order, even at that time this user exit is getting triggered and giving a message that the vendor email id is not maintained.
the reson why this is happening is there is no import parameter to this user exit which gives the "medium of data transfer" the user has entered. if i get this parameter visible inside the user exit, then i can check this parameter inside the user exit and do the required operation.   i checked up with all the user exits in "me" package and even the other related packages but none of them is getting triggered,
do u know a user exit or badi which imports this parameter and also gets triggered at the time of creation of purchase order.
plz give me a solution.
regards,
santosh.

KOB5 - User Exit for automatically final settlement

Hi Experts,
I'm searching any user exits for the transaction KOB5 because I want to create automaticaly the final settlement when I run this transaction.
Does anybody know any user exits that I can use?
Thanks in advance.
Best regards
Giampaolo

Hi,
Please check the configuration for automatic generation of Settlement Rules. Internal Orders > Actual Postings > Settlement > Automatic Generation of Settlement Rules.
Regards
Sreekanth

Missing Emails and Call Log

I woke up this morning and realized all my emails and call was missing. After getting over my fustration I learned that this is because I ran out of memory so the phone automatically deletes the logs.
So I have two questions:
1: Is that the cause for my missing emails and logs?
2: Would buying a micro sd card help? Would the logs be stored on the sd card or does the sd card only help for media storage?
Thanks
S
Solved!
Go to Solution.

The microSD card is only used to store media files
If someone has been helpful please consider giving them kudos by clicking the star to the left of their post.
Remember to resolve your thread by clicking Accepted Solution.

Legacy mailboxes to user mailboxes

Hello,
1) I need to provid a list of legacy mailboxes. How can I get that lsit using pwer shell command?
2) from that list I will later need to change the legacy mailbox to User Mailbox.
I only know how to change legacy mailbox to User Mailbox for one user but not from a list of many user (prior questions)
Set-Mailbox -Identity "alias" -ApplyMandatoryProperties
Can you please help me?

~ First of all, Exchange 2003 mailboxes show as Legacy Mailboxes in EMC and there isn't any problem in it.
~ If mailboxes are on Exchange 2007 server and shows as Legacy then it should have either created or moved with Exchange 2003 management tools which is the cause of showing it legacy. For your reference :)
Now back to your answer...
1) Use below cmdlet to get the list of legacy mailboxes...
Get-Mailbox -ResultSize Unlimited | Where{$_.RecipientTypeDetails -eq "LegacyMailbox"}
2) Use below cmdlet to get the list of legacy mailboxes and apply mendatory properties (But use this if you have all mailboxes on Exchange 2007 server ONLY)
Get-Mailbox -ResultSize Unlimited | Where{$_.RecipientTypeDetails -eq "LegacyMailbox"} | Set-Mailbox -ApplyMandatoryProperties
Amit Tank | MVP – Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com

Individual mailboxes for .mac mail

I love this software. The only thing i'm trying to figure out is how to create individual mailboxes for each alias I've created. I would love to have each alias mail delivered to its appropriate box. If you can give some feedback on this topic I'd really apreciate it.
Thanks

Assuming you are referring to a .Mac account alias email address, messages addressed to your .Mac email alias will arrive in your .Mac account inbox which cannot be changed. All mailboxes under Inbox, Drafts, Sent, Trash and Junk in the Mail.app mailboxes drawer are created and managed automatically by Mail.
You can create an "On My Mac" location mailbox for each alias email address and then create a Rule in Mail to automatically transfer messages addressed to an alias email address to the designated mailbox for the address but none of these mailboxes will be located under Inbox in the mailboxes drawer.

Created mailbox for new user in Exchange 2010, user not visible in AD.

Hi everyone!
This morning I created a mailbox for a new user on my Exchange 2010 box.
Everything works fantastically but I am unable to view the new user in AD except by searching. If I run a search the results say the user exists in my Users container, and I can view the properties of the user account from the search results, but I
am unable to actually see the user profile object in the Users container.
I notice in EMC that the mailbox has a user icon on the mailbox icon instead of the regular standard icon - I'm not sure what this implies.
Can anyone offer some advice as to why this happens and how to resolve it?
Thanks!

Hi,
AD objects store in the Domain partition Database.
Its replication Scope is :Domain Wide
Its replication model is: Multi Master
There are two possible cause.
1. AD replication latency if you have several DCs.
You could wait for AD replication or force replication, Click
refresh on ADUC.
2. You create the new user
in other OU, not Users.
You could run this command to get
the user’s DistingushedName attribution.
Get-mailbox –identity
[email protected] |fl
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Search-Mailbox for Message Header Content in Management Shell

Can I use the search-mailbox command to search for message header content?
The reason I ask is because I need to search for any emails that came in to an email alias address.
I am searching a journaling mailbox.
Normally, I would do soemthing like...
Search-Mailbox -Identity "journalbox" -SearchQuery '"To: [email protected]"' -TargetMailbox "exportbox" -TargetFolder "exported_messages"
The problem is, because I'm looking to find the emails coming to [email protected], when the messages are journaled they appear as "To: [email protected]" in the journaled envelop message.
In this scenario if I could simply search header content for the email ([email protected]) that would accomplish what I need.

Hi,
We can use the Search-Mailbox cmdlet to search messages in a specified mailbox and perform any of the following tasks:
Copy messages to a specified target mailbox.
Delete messages from the source mailbox.
Copy messages from the source mailbox and delete them from the target mailbox.
Perform single item recovery to recover items from a user's Recoverable Items folder.
Clean up the Recoverable Items folder for a mailbox when it has reached the Recoverable Items hard quota.
To search for message header content, we can use Get-MessageTrackingLog cmdlet.
Here is an article for reference:
http://exchangeserverpro.com/exchange-2010-message-tracking-log-search-powershell/
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety,
or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Best Regards.

All user mailbox search not working correctly

I have just started a job at a new company as their exchange admin. One of the tasks they want me to do is delete a few
spam emails that went out to many users. I planned on using the search-mailbox cmd to find them and then delete the email messages. However I cannot seem to get this to work right for me.
The commands I've tried are
Get-Mailbox -server server01 | Search-Mailbox -SearchQuery 'Subject:"Alert:Somebody has run a back*"' -TargetMailbox "mymailbox" -TargetFolder "test" -LogOnly -LogLevel Full
Get-Mailbox -database database1 | Search-Mailbox -SearchQuery 'Subject:"Alert:Somebody has run a back*"' -TargetMailbox "mymailbox" -TargetFolder "test" -LogOnly -LogLevel Full
Get-Mailbox -resultsize unlimited | Search-Mailbox -SearchQuery 'Subject:"Alert:Somebody has run a back*"' -TargetMailbox "mymailbox" -TargetFolder "test" -LogOnly -LogLevel Full
These all run normally, however the results message in outlook that I get is "The search has Failed." Says errors:
None. Searched 173 mailboxes.
If I change the command to this:
Get-Mailbox -identity user1 | Search-Mailbox -SearchQuery 'Subject:"Alert:Somebody has run a back*"' -TargetMailbox "mymailbox" -TargetFolder "test" -LogOnly -LogLevel Full
The search comes back and I get the email i'm looking for. So it works as expected with only one user selected.
Does anyone have any ideas on what could cause the multi-mailbox search to not function as expected?

Is the account you are using a member of the domain admins group?
I think there is a Full Access = Deny permission that might come into play.
By default, domain admins cannot access mailboxes (even though, of course, they could change permissions to make that possible).
EDIT - I do see it worked on one mailbox - I'm not sure how the permissions may have been configured.
This is the cmdlet I used to see permissions. Domain Admins *do* have full ADPermissions
Get-Mailbox user1 | Get-MailboxPermission
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

Search a users mailbox for a "missing" email

Similar Messages

Maybe you are looking for