This article providers step by step instruction on how to restore individual mail items back to user mailboxes in Exchange 2007.
Scenario: a user deleted a folder in his mailbox
User Billy has accidentally deleted his IMPORTANT folder, and by the time he discovered that folder is missing, the item had already been purged from the Recoverable Items storage container.
Here is screenshot of his original folder:
Steps to recover
1. Determine which database hosts user mailbox
We need to find out which mailbox database hosts Billy's mailbox. If your environment uses a single mailbox for all users, skip this step.
Run the following command in the Exchange Management Shell (Powershell)
Get-MailboxStatistics -identity billy | fl
2. Create a "Recovery Storage Group" using the Exchange Management Console
A Recovery Storage Group will be used as temporary storage for our restored mailbox.
Open the Exchange Management Console (EMC). In the Toolbox node, click on Database Recovery Management.
Type the names of your Exchange server and Domain Controller.
In Manage Recovery Storage Group, click on Create a Recovery Storage Group
Select the Storage Group that you want to restore from.
Choose the location of the original Storage Group.
3. Use ZCB to restore the mailbox data to the Recovery Storage Group
Launch ZCB, and visit the Restore page. Select the backup run containing your mailbox database. Restore to the Recovery Storage group and enter the appropriate information.
Once restore begins, you will be taken to the Monitor page where you can track the progress of your restore.
4. Mount Recovery Database
In the EMC, select "Mount or dismount databases in the recovery storage group".
Select your mailbox database and mount it.
5. Restore Mailbox Items from a database in the Recovery Storage Group
In Manager Recovery Storage group, select "Merge or copy mailbox content".
Select the restored mailbox database, and click "Gather merge information".
A list of available mailboxes will be displayed. Make sure you have only selected the mailbox that you wish to recover items for, then click on “Perform merge actions”.
The items will be visible in the end user’s mailbox after the merge has completed!
Other restore options
Restore Items into a sub-folder of the user's Mailbox
It is possible to use the Restore-Mailbox cmdlet to restore items into a sub-folder.
If you want perform more granular restores, like specifying subject of the message for example, see more detailed information about Restore-Mailbox cmdlet.
The following command will restore the user's entire Inbox\Important folder to a sub-folder named "Restored".
restore-mailbox -RSGMailBox "Billy Gates" -RSGDatabase "RSG1\2NDMailbox" -id "billy" -TargetFolder "Restored" -IncludeFolders \Inbox\Important
Verify results in Outlook
Restore to an Outlook PST file
In some scenarios, you might want to get restored items in the form of PST file, rather then recover them directly to user mailbox. For example you need to recover emails of an employee who is not longer with your organization.
Create a temporary user with its own mailbox, recover email items to it, and then extract recovered content to PST file.
The following Microsoft article will help you to export a mailbox to a PST file: How to Export and Import mailboxes to PST files in Exchange 2007 SP1
5. Perform cleanup operations
Once the mailboxes have been recovered, it is a good idea to clean up any unnecessary databases, user accounts, and files.
- Dismount the recovery database and storage group. Delete files from database folders.
- If you used a temporary user for recovery, delete its mailbox and account in Active Directory, along with any associated files, like PSTs.