Exchange Deleted

My questions are, is there anyway these pemanently deleted items are retreivable of Exchange?

It depends.

XCLN Understanding Deleted Item Recovery

And obviously if there are any backups performed (and why would IT not backup Exchange as a normal business practice?) Using Recovery Storage Group (RSG) in Exchange 2007

These are just two of many possible ways to recover messages.

My questions are, is there anyway these pemanently deleted items are retreivable of Exchange?

It depends.

XCLN Understanding Deleted Item Recovery

And obviously if there are any backups performed (and why would IT not backup Exchange as a normal business practice?) Using Recovery Storage Group (RSG) in Exchange 2007

These are just two of many possible ways to recover messages.

I considered the backup, but the backup would not "back up" messages that have been deleted out the inbox, deleted out the recycle bin, and then purged out the recovery option. Or am I wrong?

The backups between the time the message arrived and the time they were "pemanently deleted" would.

The backups between the time the message arrived and the time they were "pemanently deleted" would.

Think thats out as the cost of restoring exchange to a time it could have been deleted is probably not worth the effort. I just wondered how emails physically deleted from an exchange store sat on the server, if at all. That knowledge base article doesnt mention that. Just the difference between a logical and physical delete, mindyou if the days set on Deleted Items Recovery is high, then that would be another option, I guess.

Think thats out as the cost of restoring exchange to a time it could have been deleted is probably not worth the effort.

Restoring is just a few minute process. There are also log files that are automatically stored. Really many options to find messages.

Think thats out as the cost of restoring exchange to a time it could have been deleted is probably not worth the effort.

Restoring is just a few minute process. There are also log files that are automatically stored. Really many options to find messages.

Not familiar with the logs, can you give me some more information about them. The backups in our company are charged and it equates to a fortune four figures at least, by our useless outsourcer…

Your Exchange admin should know about these, but the following TechNet article should give an overview http//technet.microsoft.com/en-us/library/bb124452(EXCHG.65).aspx

Which is part of this larger series http//technet.microsoft.com/en-us/library/aa998782(EXCHG.65).aspx

Deleted items are not removed from the store until the retention time runs out. So if the server is set to 30 days, (The default I believe), then deleted items will not be removed until that window is up.

If you can work against the exchange store directly, you can see deleted items in programs like Encase.

In that case you would want a COPY of the exchange folder. (Not a back up of it as that has to be restored before Encase can mount it)

If you have to do s restore from a back up, then you are in for a lot of fun.

Having done restores to virtual machines to duplicate the suspect server, it is a pain in the rump.