Finding ALL messages

Charles Lavin

unread,

Nov 21, 2009, 11:39:28 PM11/21/09

to

Hi --

SBS 2003 SP2 w/ Exchange 2003

What is the (best?) way to retrieve all messages in all mailboxes in an
Exchange 2003 message store that were sent to or received from a particular
(outside) address?

I am the administrator for the whizbangcorp.com Exchange 2003 server. I need
to find and retrieve every message that any whizbangcorp.com employee either
sent to or received from j...@schmo.com.

Thanks,
CL

Mark Arnold [MVP]

unread,

Nov 22, 2009, 9:49:32 AM11/22/09

to

If you already had Message Tracking enabled you could use that. Google
for Message Tracking Center for help on that. If you didn't have it
running you can't do is retrospectively.

If none of your users delete anything they send or receive you could
run exmerge against all the mailboxes using whatever keywords you see
fit to find them but I am sure that if you're trying to track
something then someone is doing something dodgy and will be covering
their tracks which you won't be able to trace.

Why are you wanting to do this?

Rich Matheisen [MVP]

unread,

Nov 22, 2009, 11:47:56 AM11/22/09

to

On Sun, 22 Nov 2009 09:49:32 -0500, "Mark Arnold [MVP]"
<ma...@mvps.org> wrote:

[ snip ]

>If you already had Message Tracking enabled you could use that. Google
>for Message Tracking Center for help on that. If you didn't have it
>running you can't do is retrospectively.
>
>If none of your users delete anything they send or receive you could
>run exmerge against all the mailboxes using whatever keywords you see
>fit to find them but I am sure that if you're trying to track
>something then someone is doing something dodgy and will be covering
>their tracks which you won't be able to trace.

True. And if it's something that's required (by legislation,
regulation, company policy, etc.) then journaling is the way to make
sure you have ALL the mail. 3rd-party archiving/compliance
software/hardware are also good ways to deal with this, especially if
searching all that email is a requirement.
---
Rich Matheisen
MCSE+I, Exchange MVP

Charles Lavin

unread,

Nov 23, 2009, 4:53:08 AM11/23/09

to

Hi --

Right now, the aim is to retrieve any email message currently in the
information store with a particular email address either as the sender or
the recipient. What facility is available for me to do that?

Thanks,
CL

"Rich Matheisen [MVP]" <rich...@rmcons.com.NOSPAM.COM> wrote in message
news:ekqig59rgd4ql4omd...@4ax.com...

Mark Arnold [MVP]

unread,

Nov 23, 2009, 7:36:48 AM11/23/09

to

On Mon, 23 Nov 2009 04:53:08 -0500, "Charles Lavin" <x@x.x> wrote:

>Hi --
>
>Right now, the aim is to retrieve any email message currently in the
>information store with a particular email address either as the sender or
>the recipient. What facility is available for me to do that?
>
>Thanks,
>CL

You were told.
Google, read, download, test and use EXMERGE.
It will only capture what is currently left in the system, not what
went through the system and has been deleted.

Rich Matheisen [MVP]

unread,

Nov 23, 2009, 7:41:06 PM11/23/09

to

On Mon, 23 Nov 2009 04:53:08 -0500, "Charles Lavin" <x@x.x> wrote:

>Right now, the aim is to retrieve any email message currently in the
>information store with a particular email address either as the sender or
>the recipient. What facility is available for me to do that?

Free: ExMerge.

There are other 3rd-party apps that can do this sort of stuff even
from backup tapes.

Charles Lavin

unread,

Nov 24, 2009, 12:06:31 AM11/24/09

to

Thanks.

Would you happen to know of any app that can do this same thing across a
collection of PST files as well?

CL

"Rich Matheisen [MVP]" <rich...@rmcons.com.NOSPAM.COM> wrote in message

news:aramg5t689q2ek66d...@4ax.com...

Charles Lavin

unread,

Nov 24, 2009, 12:08:11 AM11/24/09

to

Yes, you did. But I was replying to Rich's post ...

Exmerge will do fine for this particular job. All I'm looking for is what is
currently in the information store.

Thanks
CL

"Mark Arnold [MVP]" <ma...@mvps.org> wrote in message
news:9b0lg5te5q6fjenmr...@4ax.com...

Rich Matheisen [MVP]

unread,

Nov 24, 2009, 9:24:51 PM11/24/09

to

On Tue, 24 Nov 2009 00:06:31 -0500, "Charles Lavin" <x@x.x> wrote:

>Would you happen to know of any app that can do this same thing across a
>collection of PST files as well?

Not offhand. Sorry. But a quick search looking for "pst search
discovery" turned up several.

Just another reason to intensely dislike PST files.

Charles Lavin

unread,

Nov 24, 2009, 10:21:23 PM11/24/09

to

:)

Thanks!

CL

"Rich Matheisen [MVP]" <rich...@rmcons.com.NOSPAM.COM> wrote in message

news:b25pg55go28uagave...@4ax.com...