Look in TechNet for "dumpsteralwayson" and implement that registry change on your machine, then log into his mailbox and recover deleted items from his Inbox (not the deleted items folder).
------------------------------------------------------ Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA > -----Original Message----- > From: John Orban [mailto:[EMAIL PROTECTED]] > Sent: Sunday, January 12, 2003 1:24 AM > To: Exchange Discussions > Subject: Missing emails > > > I have a user who tells me that he has lost some important emails. He > says they were in his inbox just after Christmas and are not > there now. > He has Outlook 2002 on his desktop and we are running Exchange 5.5 - > SP4. > > 1.) We looked at "Recover Deleted Items" (I keep deleted items for > 30 days.) Nothing there - so it is obvious he didn't delete them. > 2.) We did a search of all his mail folders and could turn up only > an email that he forwarded to another individual within the > school. The > original was not found in the same search. > 3.) We searched his computer for archive files (and found two). We > examined the archives but the files were not there. > 4.) We searched his computer for all .pst files but other than the > archive files there were none. > 5.) I asked him about his home computer possibly pulling the email > messages down from the Exchange server without keeping a copy on the > server, but he had recently bought a new computer and had not had a > chance to set up the email client. > 6.) He does use Mail2Web to get email when he's out of the office, > but M2W doesn't appear to download mail from a server, it > just looks at > it. However, if you delete it in M2W it will delete it from > the server. > 7.) We looked at all the quarantine folders (we use iHateSpam), but > there was nothing there. > 8.) I sent him the help file that Outlook has concerning filtering > messages. I though maybe, by accident, he turned on a filter that > filtered out these messages somehow - although his mailbox is pretty > full. > > He SWEARS he didn't delete it and due to the nature of the email I'm > pretty sure that he didn't. > > When I posted this to an NT/W2K group I did get a response > from someone > who said they had a similar problem when using Outlook rules to filter > spam. Evidently existing emails would just disappear. > > The only other thing I can think of is that I do a weekly mailbox scan > of the Exchange Server running McAfee GroupShield 5.0. Prior to this I > had GroupShield delete any questionable email (now, I > quarantine it for > exactly this situation). Obviously the email had not been deleted > before. Perhaps when a new DAT file was downloaded it could then have > figured this email was virus infected and deleted it?? > > I do have backup tapes of the Exchange database but to try > and find them > would require building a new Exchange server, restoring the database, > etc. > > Anyone have any ideas where else these files could be? > > Thanks, > > John Orban > System Administrator > The Country School > > --- > [This E-mail scanned for viruses by friend.ly.net.] > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
