Extract mailboxes with GAM

2,817 views
Skip to first unread message

keyma

unread,
Jun 13, 2012, 9:46:09 AM6/13/12
to google-ap...@googlegroups.com
Hello all,

I have been tasked by our legal department to come up with a way to extract users' email boxes to comply with FOI requests. I understand there is a way to do this using Google Apps Manager. Has anyone done this before? I have searched for the switches/commands to do this all over the Web, with little luck. Any advice or help is desperately needed and would be appreciated! Thanks!

Keyma

Allen Schmidt

unread,
Jun 13, 2012, 9:52:07 AM6/13/12
to google-ap...@googlegroups.com
Another AWESOME tool from Jay will solve your problem. Been tinkering with it lately and works like a champ.


Allen Schmidt
IT Department
The Free Lance-Star Companies






Keyma

--
You received this message because you are subscribed to the "Google Apps Manager" group.
To post to this group, send email to
google-ap...@googlegroups.com
To unsubscribe from this group, send email to
google-apps-man...@googlegroups.com
For more options, visit this group at
https://groups.google.com/forum/#!forum/google-apps-manager

keyma

unread,
Jun 13, 2012, 9:59:43 AM6/13/12
to google-ap...@googlegroups.com
Thanks Allen! One question, though...it seems you need to be logged in as the account that you want to download. I'm not sure management wants the users to know that they are being audited (again with the legal business). Is it possible with this tool to get mailboxes, say, with super admin access rather than the user's credentials?


On Wednesday, June 13, 2012 9:52:07 AM UTC-4, Allen Schmidt wrote:
Another AWESOME tool from Jay will solve your problem. Been tinkering with it lately and works like a champ.


Allen Schmidt
IT Department
The Free Lance-Star Companies





On Wed, Jun 13, 2012 at 9:46 AM, keyma <ke...@dhec.sc.gov> wrote:
Hello all,

I have been tasked by our legal department to come up with a way to extract users' email boxes to comply with FOI requests. I understand there is a way to do this using Google Apps Manager. Has anyone done this before? I have searched for the switches/commands to do this all over the Web, with little luck. Any advice or help is desperately needed and would be appreciated! Thanks!

Keyma

--
You received this message because you are subscribed to the "Google Apps Manager" group.
To post to this group, send email to

To unsubscribe from this group, send email to

Allen Schmidt

unread,
Jun 13, 2012, 10:04:46 AM6/13/12
to google-ap...@googlegroups.com
That is what the magic of the two-legged auth provides. Its all in the wiki instructions. Works great but you do need to be an admin to get the OAuth key and secret from the link under Advanced Tools.

Allen 




To unsubscribe from this group, send email to

Jay Lee

unread,
Jun 13, 2012, 10:09:23 AM6/13/12
to google-ap...@googlegroups.com
User's can see got-your-back IMAP access if they look under Account Activity in Gmail.

If you need an audit that the user will be unaware of, use a mailbox export audit:

http://code.google.com/p/google-apps-manager/wiki/ExamplesAccountAuditing#User_Mailbox_Exports

note that Google limits a domain to 100 audits / day and they should only be used for legal purposes, not regular backups.

Regards,

Jay Lee
LCS Deployment Lead  | Dito
(267) 712-9533
j...@ditoweb.com


Key, Mark A.

unread,
Jun 13, 2012, 7:29:27 PM6/13/12
to google-ap...@googlegroups.com
@Godfried: This was the GAM command line, correct?

On Wed, Jun 13, 2012 at 4:57 PM, Godfried Borremans <godfried....@dbz.be> wrote:
I did test the mailbox dump via audit: it works fine.
The user has no indication of this action, you do not need account credentials (you might want to check this with your legal dept.)
You submit a request and then you can start polling for a confirmation which contains a download link.
Please note: it is a very slow process, style submit request and return the day after.

--
You received this message because you are subscribed to the "Google Apps Manager" group.
To post to this group, send email to
google-ap...@googlegroups.com
To unsubscribe from this group, send email to
google-apps-man...@googlegroups.com
For more options, visit this group at
https://groups.google.com/forum/#!forum/google-apps-manager



--

Mark Key
Information Resource Consultant II
PHSIS - Information Technology Services
S.C. Department of Health and Environmental Control
2600 Bull Street
Columbia, SC 29201
Phone: (803) 898-4475
Fax: (803) 898-3812


Sandip Shah

unread,
Jun 13, 2012, 7:32:02 PM6/13/12
to google-ap...@googlegroups.com
The backup via IMAP is GYB.

The audit is using GAM.

S

keyma

unread,
Jun 14, 2012, 12:29:21 PM6/14/12
to google-ap...@googlegroups.com
When using GPG to upload my audit key using this command:
gpg --export --armor | gam audit uploadkey

I get the following error:

Enter your Primary Google Apps Domain (e.g. example.com): Traceback (most recent
 call last):
  File "gam.py", line 3075, in <module>
  File "gam.py", line 2799, in doUploadAuditKey
  File "gam.py", line 173, in getAuditObject
  File "gam.py", line 2866, in doRequestOAuth
EOFError: EOF when reading a line

Can someone tell me what I'm doing wrong?



On Wednesday, June 13, 2012 7:32:02 PM UTC-4, Sandip Shah wrote:
The backup via IMAP is GYB.

The audit is using GAM.

S

On Wed, Jun 13, 2012 at 4:29 PM, Key, Mark A. <ke...@dhec.sc.gov> wrote:
@Godfried: This was the GAM command line, correct?
On Wed, Jun 13, 2012 at 4:57 PM, Godfried Borremans <godfried....@dbz.be> wrote:
I did test the mailbox dump via audit: it works fine.
The user has no indication of this action, you do not need account credentials (you might want to check this with your legal dept.)
You submit a request and then you can start polling for a confirmation which contains a download link.
Please note: it is a very slow process, style submit request and return the day after.

--
You received this message because you are subscribed to the "Google Apps Manager" group.
To post to this group, send email to

To unsubscribe from this group, send email to

For more options, visit this group at
https://groups.google.com/forum/#!forum/google-apps-manager
--

Mark Key
Information Resource Consultant II
PHSIS - Information Technology Services
S.C. Department of Health and Environmental Control
2600 Bull Street
Columbia, SC 29201
Phone: (803) 898-4475
Fax: (803) 898-3812


--
You received this message because you are subscribed to the "Google Apps Manager" group.
To post to this group, send email to

To unsubscribe from this group, send email to

Jay Lee

unread,
Jun 14, 2012, 12:52:46 PM6/14/12
to google-ap...@googlegroups.com
You need to authorize GAM to run with other GAM commands before trying to upload the GPG key.

Try running just:

gam info domain

once you get that to print out details about your Google Apps domain, proceed to the GPG key upload command.


Regards,

Jay Lee
LCS Deployment Lead  | Dito
(267) 712-9533
j...@ditoweb.com






To unsubscribe from this group, send email to
Reply all
Reply to author
Forward
0 new messages