Shulou(Shulou.com)06/02 Report--

When users use the client to access their personal mailbox, sometimes they will delete the mail because of some misoperation. If the mail contains important information, it will bring great inconvenience and loss to the enterprise. For exchange administrators, it is a very important work to be able to recover deleted mail quickly. If the exchange administrator wants to recover, he must understand that the erroneous deletion was caused in that way.

For exchange servers, there are three types of deletions:

Delete: delete an item from any folder, which is automatically placed in the deleted items folder

Soft deletion: refers to deleting items from the deleted items folder, or the user uses the shift+delete key combination to delete items (the data in the mail server has not been deleted)

Hard delete: refers to marking an item to be deleted from the mail database.

The exchange mailbox database provides a retention period for messages that are soft deleted, during which users can recover deleted items without requesting an administrator. After the expiration of the period, the mail will be completely deleted from the server.

In our experiment, we use exchange server 2010 to realize how to recover email.

Let's first look at how to set the default retention time for messages on the server. (by default, the retention period for exchange servers is 14 days, with a maximum of 24855 days. )

The following simulates the use of an outlook client to recover specified messages

In this way, the mail can not be found on the client, and we use the client to recover the specified mail.

This is the case with simple client recovery messages.

If the client's "restore deleted items" can restore items that have been "soft deleted" within the specified period, but for messages that have exceeded the specified period or "hard delete", they can only be restored using existing backups.

Backup is implemented using Windows server backup. We first install Windows server backup.

Windows server backup installation is complete!

To open the Services console, you need to:

You also need to add a disk to the exchange server to hold the backup.

Then you can use Windows server backup to back up the data of the exchange server.

In the actual production environment, it is recommended to select "whole server" for the first backup, and first make a full backup of the server data, application and system status, and then implement the incremental backup through the backup plan.

Now restore the data using regular restore methods

First uninstall the database

Delete all files under the C:\ Program Files\ Microsoft\ Exchange Server\ V14\ Mailbox\ Mailbox Database 0035626591 path (depending on your actual situation).

Now begin to recover.

Load the database

You will find that all the data and emails that have just been deleted have come back.

This kind of recovery has a lot of disadvantages:

When the data is recovered, no one can access the exchange server (because the database has been uninstalled)

You can only recover the data of the entire database, not the messages of the specified user.

Another recovery method: restore database (RDB), which obviously solves the disadvantages of the first two. Implementation method:

1. Simulate misoperation and delete data and related data (no need to uninstall the database)

two。 Create an empty folder rdb to hold the recovery database

3. Restore the data backed up by Windows server backup to the newly created empty folder rdb (roughly the same as regular recovery, with different screenshots)

Next, use the command:

C:\ Users\ Administrator > cd c:\ rdbc:\ rdb > eseutil / mh "Mailbox Database 0035626591.edb" # use the command to see if the database is in the "clean shutdown" state. Mailbox Database 0035626591.edb is the file name of the restored mail database.

It can be seen that the database status returned by the system is not normally closed "Dirty shutdown".

Need to use this command

C:\ rdb > eseutil / r E00 / I / d # replay the log to the restored mailbox database to restore it to its normally closed state

Check the status of the database again

Next, use the shell that comes with the exchange service to complete the following command:

[PS] C:\ Windows\ system32 > New-MailboxDatabase-recovery-name rdb1-server WIN-7K2H4UIC7KT-edbfilepath "c:\ rdb\ MailboxDatabase 0967116714.edb"-logfolderpath "c:\ rdb" # create recovery database (WIN-7K2H4UIC7KT is the name of the mail server) [PS] C:\ Windows\ system32 > restart-service msexchangeis# restart information storage service [PS] C:\ Windows\ system32 > Mount-Database-identity rdb1# mount recovery database [PS] C:\ Windows\ System32 > Get-MailboxStatistics-database rdb1# check whether the mounted recovery database contains the user mailbox to be restored [PS] C:\ Windows\ system32 > Restore-Mailbox-identity administrator-recoverydatabase rdb1# to restore the specified mailbox from the recovery database to the online database

Recovery complete! Obviously the second recovery method is more used, which is executed through the command, which is a little more troublesome!

Verify the implementation effect!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.