In Exchange Server, mailbox data is a crucial aspect of overall business communication. It contains sensitive information in the form of emails, attachments, calendars, and contacts. Sensing the importance of mailbox data, you cannot afford to lose it and let your operations face continuous disruptions. Instead, you must be careful when performing directory cleanup, deleting data of off-boarded employees, or similar tasks.
If, despite being vigilant, you accidentally delete crucial data, you would need to recover it promptly. This can be a challenging task in case of an expired retention period of the mailbox. Likewise, recovery would be difficult in case of a corrupted database or if you do not have a backup file.
This article explores these scenarios in detail and discusses the Recovery Database method to recover permanently deleted mailboxes from the Exchange server. It will also briefly discuss the use of Exchange server recovery tools as a viable alternative for the manual and comparably more complicated methods.
An insight into mailbox deletion in Exchange Server
Recovering the deleted mailboxes relies largely on their current deletion state. For example, your mailboxes could be in a disabled, soft-deleted, or permanently deleted state.
Disabled or disconnected mailbox
This results from the disconnection of the mailbox from its associated Active Directory user account while the latter remains active. It will not delete the mailbox, but you cannot access it either. Before permanent deletion, the disabled mailbox serves a fixed retention period, which is often 30 days by default. You can reconnect it to a different directory account within this duration.
Soft-deleted mailbox
A soft-deleted mailbox results from mailbox move operations or several deletion scenarios, such as the deletion or disconnection of an entire user account or license removal in Exchange Online. Even after deletion, it remains stored in the server database for a specifically configured duration, mostly 30 days. You can recover a deleted Exchange mailbox and its contents during this retention period.
Permanently deleted mailbox
After the expiration of the grace period of the soft-deleted mailbox without any restoration, the mailbox gets hard-deleted permanently and becomes irrecoverable through native Exchange. Permanent deletion also happens if you purge the mailbox intentionally in several cases:
- Privacy requests
- Delete old and unnecessary data of a previous employee
- Storage optimization
- Compromised mailbox
Once you delete the mailbox permanently, you cannot recover it through the standard recovery method in the Exchange server. Perhaps, you may still recover it using EDB recovery, backup file, or through Exchange recovery tools.
Prerequisites for recovering permanently deleted mailboxes
In case of an expired retention period, you cannot use standard administrative shortcuts anymore. To the contrary, you need advanced recovery methods. Here are the major prerequisites for recovering permanently deleted mailboxes
- Make sure to have the requisite Exchange server permissions to carry out mailbox recovery operations
- Confirm the availability of an existing account for recovered mailbox reconnections
- In case of no existing account, create a new Active Directory user account to reconnect or restore mailboxes
- The deleted mailbox to which you want to connect a user account should exist in the mailbox database, and make sure it is not soft-deleted. Here is the PowerShell command to verify the same:
Get-MailboxDatabase | foreach {Get-MailboxStatistics -Database $_.name} | where {$_.DisplayName -eq “<display name>”} | Format-List DisplayName,Database,DisconnectReason
Consider these crucial points:
- Check if the DisconnectReason property is Disabled
- A mailbox, purged from the database, will not return any result.
- You must be a member of the Organization Management role group to perform Exchange recovery of permanently deleted mailboxes
- Permissions for Recipient management would be necessary to perform mailbox-related operations, such as creating, reconnecting, or restoring mailboxes, depending on the recovery method used.
How to recover permanently deleted mailboxes
Here is the complete Recovery Database (RDB) process for the recovery of mailboxes deleted permanently from the Exchange Server.
Restore permanently deleted mailboxes using the Recovery Database (RDB)
A Recovery Database (RDB) enables you to mount and extract data from a restored mailbox database. The process lets you recover data from a backup file or a copy of a database, keeping user access to the existing data undisturbed.
You can use a newly created RDB to restore a mailbox database with the help of a backup application. Alternatively, you can also copy a database along with its log files into the RDB folder. You can extract the data from the recovered database by using the New-MailboxRestoreRequest cmdlet. Finally, you can merge or export the extracted data to a folder included in an existing mailbox.
Here are the PowerShell commands to restore the permanently deleted mailboxes using this method.
- Copy a recovered or a restored database and its log files to the target location for the recovery database
- Bring the recovered database into a clean shutdown state.
Eseutil /R EXX /l <RDBLogFilePath> /d <RDBEdbFolder>
In the above example, EXX is the log generation prefix for the database, where EXX can be E00, E01, and so on.
Eseutil /R E01 /l E:\Databases\RDB1 /d E:\Databases\RDB1
This example shows a log generation prefix of E01 with RDB1 as a recovery database and the path of the log file.
- Create a recovery database with a unique name, while using the database name and path for the EdbFilePath parameter.
New-MailboxDatabase -Recovery -Name <RDBName> -Server <ServerName> -EdbFilePath <RDBPathandFileName> -LogFolderPath <LogFilePath>
For the LogFolderPath parameter, use the location of the recovered log files. Here is an example:
New-MailboxDatabase -Recovery -Name <RDBName> -Server <ServerName> -EdbFilePath “E:\Databases\RDB1\DB1.EDB” -LogFolderPath “E:\Databases\RDB01”
- Restart the Microsoft Exchange Information Store service
Restart-Service MSExchangeIS
- Proceed with recovery database mounting
Mount-database <RDBName>
- Make sure that the mounted RDB consists of the mailboxes you wish to restore by using Get-MailboxStatistics cmdlet
Get-MailboxStatistics -Database <RDBName> | Format-Table DisplayName,MailboxGUID -AutoSize
- Restore a mailbox or items from the RDB to a production mailbox by using the New-MailboxRestoreRequest
New-MailboxRestoreRequest -SourceDatabase DB01 -SourceStoreMailbox 1d20855f-fd54-4681-98e6-e249f7326ddd -TargetMailbox FIFAMail
Example: New-MailboxRestoreRequest -SourceDatabase DB01 -SourceStoreMailbox “FIFAMail USA” -TargetMailbox Fifamail@fifa2026.com -TargetIsArchive
This example restores the data of the source mailbox with the display name FIFAMail on mailbox DB01 to the archive mailbox for Fifamail@fifa2026.com
- Using the following cmdlet Check the Mailbox Restore Request status
Get-MailboxRestoreRequest | Get-MailboxRestoreRequestStatistics
- After verification of success restoration of the mailbox remove complete restore requests by using the command below:
Get-MailboxRestoreRequest -Status Completed | Remove-MailboxRestoreRequest
To ensure successful recovery of the mailbox data, open the target mailbox using the Outlook Web App (OWA) or Outlook and verify the presence of recovered data.
Limitations of Manual Exchange Mailbox Recovery
Manual recovery can work successfully in recovering permanently deleted mailboxes, but they entail certain limitations:
- The RDB recovery method depends on the availability of a valid copy of the database backup
- You must have technical knowledge of the involved PowerShell commands
- Mailbox mapping may suffer a setback because of wrong PowerShell commands
- Corrupt EDB files are likely to create an obstruction in mailbox recovery
- In case of large databases with bulk mailboxes, recovery becomes comparably slower
- Absence of Active Directory accounts may lead to reconnecting errors
To address these issues and to recover a permanently or a hard-deleted Exchange mailbox with due satisfaction, admins prefer using Exchange recovery tools as a viable alternative.
Use third-party Exchange recovery tools to restore permanently deleted mailboxes
Several advanced tools available online can overcome the limitations of manual methods, enabling you to perform hassle-free recovery. These applications offer several crucial benefits:
- Restore deleted Public Folders and Exchange mailbox items
- Repair corrupt or damaged EDB files
- Perform Granular Recovery and eDiscovery Search
- Help to resolve inconsistent Exchange database files
- Export mailboxes to different formats, including PST, Office 365, or Live Exchange
Stellar Repair for Exchange is a feasible Exchange recovery tool that provides all these benefits and makes the recovery task easier.
Conclusion
You may want to recover a deleted mailbox or its items from the Exchange Server. If the deleted item is still in its retention period, which is 30 days by default, you can recover it easily by using soft-deleted mailbox recovery. However, if you want to restore the mailbox after the expiration of the retention period, you cannot adopt the usual methods. Using the Recovery Database is another thinkable option in this regard.
Though these manual methods are workable and functional, they entail certain limitations in terms of technical expertise, reliance on retention period, slow process, and more. To overcome these restrictions and to recover a deleted Exchange mailbox without hassles, you can use Exchange recovery tools, such as Stellar Repair for Exchange. In addition to mailbox recovery, it can help you to perform several other productive tasks.
