Wednesday 8 March 2023

Quick guide on recovering a delete item in Exchange online

  1. Sign in to the Microsoft 365 admin center using your admin credentials.
  2. Navigate to the Exchange admin center.
  3. In the Exchange admin center, go to the recipients tab and select mailboxes.
  4. Find the user's mailbox that contains the deleted email item and click on it.
  5. Under the mailbox properties section, select the "..." option and then select "Recover deleted items".
  6. A dialog box will appear showing the deleted items that can be recovered. Select the email item that needs to be recovered and click on "Recover".
  7. A message will appear asking for confirmation to recover the item. Click on "OK" to recover the item.
  8. The recovered item will be restored to the original folder in the user's mailbox.

Note: The ability to recover deleted items may depend on your organization's retention policies and the length of time since the item was deleted. If the item was permanently deleted, it may not be recoverable.


  1. Connect to Exchange Online PowerShell using your admin credentials.
  2. Run the following command to get a list of all the mailboxes that have deleted items:

    Get-Mailbox -ResultSize Unlimited -Filter {RecipientTypeDetails -eq "UserMailbox"} | Get-MailboxFolderStatistics -FolderScope RecoverableItems | Where-Object {$_.DeletedItemCount -gt 0} | Select-Object Identity

  3. From the list generated in step 2, identify the mailbox containing the deleted email item that you want to recover.
  4. Run the following command to recover the deleted email item:

    New-MailboxRestoreRequest -SourceMailbox "MailboxName" -SourceStoreMailbox "MailboxName" -TargetFolder "RecoveredMessages" -ContentFilter {(Received -lt 'DateOfDeletion')} -AllowLegacyDNMismatch

    Replace "MailboxName" with the name of the mailbox that you want to recover the deleted email item from. Replace "DateOfDeletion" with the date the email item was deleted.

  5. After the command completes, the recovered email item will be located in the "RecoveredMessages" folder of the mailbox that was specified in the command.

No comments:

Post a Comment