Professional Documents
Culture Documents
mailbox
29/1/2015
Aditya Mediratta
Microsoft Exchange Server
Overview
Here Ill demonstrate the step by step process for recovering individual mailbox items for an Exchange
Server 2010 mailbox using Windows Server Backup.
The mailbox user Aditya is being used for this tutorial, and he has sent following items to neloy.
Steps:
2.) to start with exchange server backup, we choose following from windows backup utility:
We select the volume containing exchange server 2010 installed files (in this case c:/ )
Once backup is successful, Ill now delete all the emails from Adityas mailbox (including the one from deleted items)
As of now well restore the backup to alternate location and proceed with recovery process. To start we choose
following from windows backup utility:
3.) BRINGING THE RESTORED DATABASE TO A CLEAN SHUTDOWN STATE WITH ESEUTIL
The restored database file will be in a state known as dirty shutdown. You can confirm this by running the
following ESEUtil command, specifying the path to the restored .edb file on your server.
Next check the state of the log files with the following ESEUtil command, specifying the path to the restored log files.
Note the end of the path is the log file prefix, in this case E00
Now we can run ESEUtil in recovery mode to bring the database into a clean shutdown state.
However I found even after running above command our database is still in dirty state, now well use eseutil /p to
clean the DB
Note the warning about the database not being in a clean shutdown state. Since weve already
brought the database to a clean shutdown state we can now mount the recovery database.
With the recovery database mounted we can now proceed with mailbox item restores. You can see the available
items to restore by looking at the mailbox statistics for the recovery database.
Again to verify, Ill show you that mailbox of user Aditya is empty as emails have been deleted
To restore all mailbox items into a sub-folder of the existing mailbox so that they can be inspected use the following
command.
Recovery successful