Archive for May, 2015

Exchange 2010 Mailbox Recovery

Restore the database files to a location with enough space to hold the entire database and its logs. I created a full system (bare metal) backup using Windows Server Backup. I recovered using the following options:
Select Recovery Type: Applications
Select Application: Exchange
Specify Recovery Options: Recover to another location
Under Confirmation, I presume you would be able to choose the database you want to restore. I only had one, so it was selected.

This will restore the database and logs to the location you specified. I suspect the process will be very similar for other backup solutions that support Exchange.

Check database State:

[PS] >eseutil /mh ‘E:\WSBRecovery\Mailbox Database 1234567890\Mailbox Database 1234567890.edb’

Filter output for the State:

[PS] >eseutil /mh ‘E:\WSBRecovery\Mailbox Database 1234567890\Mailbox Database 1234567890.edb’ | findstr “State”

Check status of the logs:

[PS] >eseutil /ml ‘E:\WSBRecovery\Mailbox Database 1234567890\E00’

Replay the logs and update the database. The /l option is the log location, and the /d is the database location.:

[PS] >eseutil /r E00 /i /l ‘E:\WSBRecovery\Mailbox Database 1234567890’ /d ‘E:\WSBRecovery\Mailbox Database 1234567890’

Check the State again. It should be Clean Shutdown now.:

[PS] >eseutil /mh ‘E:\WSBRecovery\Mailbox Database 1234567890\Mailbox Database 1234567890.edb’ | findstr “State”

If the State still say Dirty Shutdown, you can try to repair the database. However, this should be your last resort:

[PS] >eseutil /p ‘E:\WSBRecovery\Mailbox Database 1234567890\Mailbox Database 1234567890.edb’

Create a new recovery database using the restored clean database (make sure to use an empty directory for the logs):

[PS] >New-MailboxDatabase RecoveryDatabase -Server MY-EXCHG01 -Recovery:$true -EdbFilePath ‘E:\WSBRecovery\Mailbox Database 1234567890\Mailbox Database 1234567890.edb’ -LogFolderPath ‘E:\WSBRecovery\Mailbox Database 1234567890\Logs’

Mount the recovery database:

[PS] >Mount-Database RecoveryDatabase

If you have an old recovery database open, you may need to dismount the old and delete it first. Not sure if that is applicable for all Exchange versions, but this was the case in Exchange Server 2010 Standard version:

[PS] >Dismount-Database ‘MY-EXCHG01 DB01 Recovery’
[PS] >Remove-MailboxDatabase -Identity ‘MY-EXCHG01 DB01 Recovery’

Check for the mailboxes in the recovered database:

[PS] >Get-Mailboxstatistics -Database RecoveryDatabase

Restore the database to a Restore folder, so the lost messages can be copied from the Restore folder. Once the lost messages are moved out of the Restore folder, the Restore folder can be deleted.

[PS] >Restore-Mailbox -Identity “JGZ Test” -RecoveryDatabase RecoveryDatabase -RecoveryMailbox “JGZ Test” -TargetFolder Restore

If you are restoring a mailbox for one user and putting it in another users mailbox, you need to make sure you have the order right.
Identity is the mailbox you are going to be restoring to (target), and the RecoveryMailbox is the mailbox you are restoring (source).

[PS] >Restore-Mailbox -Identity “put-IT-here” -RecoveryDatabase RecoveryDatabase -RecoveryMailbox “get-IT-here” -TargetFolder Restore


Exchange Management Shell Commands (work in progress)

This is more a reference for myself:

I covered the basics of message tracking in:

How to get the full Exchange version:

Get-Command ExSetup | Format-List

Get-Command ExSetup | ForEach {$_.FileVersionInfo}

Here is a link to cross-reference the result to determine the service pack, etc.:

Create a mailbox (and account):

New-Mailbox -Name ‘FirstName LastName‘ -Alias ‘Username‘ -OrganizationalUnit ‘Oranizational Unit‘ -UserPrincipalName ‘Username@DOMAIN.NAME‘ -SamAccountName ‘Username‘ -FirstName ‘FirstName‘ -Initials ” -LastName ‘LastName‘ -Password ‘TemporaryPassword‘ -ResetPasswordOnNextLogon $false -Database ‘MailboxDatabase

Database size:

Get-MailboxDatabase -Status | Select Name,DatabaseSize

PublicFolderDatabase size:

Get-PublicFolderDatabase -Status | Select Name,DatabaseSize

To determine role assignments:


Create a recovery mailbox:

New-MailboxDatabase -Recovery -Name “Recovery DB Name” -Server EXCHANGESERVERNAME

To check mailbox stats:

Get-MailboxDatabase -Status | Format-List Mame,DatabaseSize,AvailableNewMailboxSpace

Delete a mailbox database. Once removed, you can delete the files from the file system.:

Remove-MailboxDatabase -Identity “Recovery DB Name”

The right way to create a recovery database:

New-MailboxDatabase -Recovery -Name “Recovery DB Name” -Server EXCHANGESERVERNAME -EdbFilePath Drive:\Directory\Filename.edb -LogFolderPath Drive:\Directory

Move a mailbox:
You can use the canonical name of the object with the mailbox ( DOMAIN.LOCAL/OU/OU/Name ) to move from EMS.

Note: You may need to enable inheritance. This can be dome from the ADUC. Access the Properties for the user and click on Security tab. If it is not visible, you need to enable your ADUC view for Advanced Features. Once on the Security tab, click Advanced, and then down in the bottom left click “Enable inheritance”. This is on a Windows 2012 R2 domain controller. It might a little different dialog on older versions of Windows server.

[PS] >’DOMAIN.LOCAL/TahityOU/SurfingOU/Cool Dude’ | New-MoveRequest -TargetDatabase ‘My Exchange Database’

DisplayName Status TotalMailboxSize TotalArchiveSize PercentCompl
———– —— —————- —————- ————
Cool Dude Queued 5 B (5 bytes) 0

Check the status of all move requests:

[PS] >Get-MoveRequest

Check Cool Dude’s move request:

[PS] >Get-MoveRequest -Identity ‘cooldude@tahiti.surfing’

Nice, but what do I do to get all those canonical names?
The following will give you all the canonical names for all objects in your domain. From a domain controller, fire up powershell:

PS > Get-AdUser -Properties CanonicalName -Filter ‘*’ | Select CanonicalName

I am sure there is a better way to do this, but this will give some output that will have the CanonicalName and Exchange mail server for an object. You can work with this output to come with a list that of objects that need to be moved.

PS > Get-AdUser -Properties CanonicalName,msExchHomeServerName -Filter ‘*’ | Select CanonicalName,msExchHomeServerName | Format-List

I have noticed that sometimes when I move a mailbox from one database to another and then I display mailbox statistics, I will have two different results for the same mailbox. To find these, you need you use Get-MailboxStatistics and filter for MailboxState of SoftDeleted:

PS > Get-MailboxStatistics -server servername | Select DisplayName,DisconnectReason,Database | findstr “SoftDeleted”

And then to remove the SoftDeleted version of the mailbox:

PS > Remove-StoreMailbox -Identity “mailboxidentity” -Database “mailboxdatabase” -MailboxState SoftDeleted

If you have previously moved a mailbox and need to move it again, you will need to remove the old move request even though it is completed. To do so:

PS> Remove-MoveRequest -Identity ‘Cool Dude’

This will create a Send Connector for use in your LAN. In my case, it is a linux server. Create a Send Connector:

New-SendConnector -Name ‘Some Name’ -Usage ‘Internal’ -AddressSpaces ‘SMTP:hostORdomainname;1’ -IsScopedConnector $false -DNSRoutingEnabled $false -SmartHosts ‘[aaa.bbb.ccc.ddd]’ -SmartHostAuthMechanism ‘None’ -UseExternalDNSServersEnabled $false -SourceTransportServers ‘MY-EXCHG01’

Create a new mail contact:

New-MailContact -ExternalEmailAddress ‘SMTP:mycontact@email.address’ -Name ‘mycontact’ -Alias ‘mycontact’ -FirstName ‘My’ -Initials ‘MC’ -LastName ‘Contact’ -OrganizationalUnit ‘DOMAIN.LOCAL/OU/OU’

To create and email box to an existing ADS account:

Enable-Mailbox -Identity ‘DOMAIN.LOCAL/OU/ADSAccount‘ -Alias ‘myownalias

Enable a contact for a existing contact:

Enable-MailContact -Identity ‘DOMAIN.LOCAL/OU/ContactName‘ -ExternalEmailAddress ‘SMTP:my@external.emailaddress’ -Alias ‘myAlias’

To check and make active components:

[PS] C:\> Get-ServerComponentState

Server Component State
—— ——— —–
VMEXCHG2013.greattechhelp.local ServerWideOffline Inactive
VMEXCHG2013.greattechhelp.local HubTransport Inactive
VMEXCHG2013.greattechhelp.local FrontendTransport Inactive
VMEXCHG2013.greattechhelp.local Monitoring Inactive
VMEXCHG2013.greattechhelp.local RecoveryActionsEnabled Inactive
VMEXCHG2013.greattechhelp.local AutoDiscoverProxy Inactive
VMEXCHG2013.greattechhelp.local ActiveSyncProxy Inactive
VMEXCHG2013.greattechhelp.local EcpProxy Inactive
VMEXCHG2013.greattechhelp.local EwsProxy Inactive
VMEXCHG2013.greattechhelp.local ImapProxy Inactive
VMEXCHG2013.greattechhelp.local OabProxy Inactive
VMEXCHG2013.greattechhelp.local OwaProxy Inactive
VMEXCHG2013.greattechhelp.local PopProxy Inactive
VMEXCHG2013.greattechhelp.local PushNotificationsProxy Inactive
VMEXCHG2013.greattechhelp.local RpsProxy Inactive
VMEXCHG2013.greattechhelp.local RwsProxy Inactive
VMEXCHG2013.greattechhelp.local RpcProxy Inactive
VMEXCHG2013.greattechhelp.local UMCallRouter Inactive
VMEXCHG2013.greattechhelp.local XropProxy Inactive
VMEXCHG2013.greattechhelp.local HttpProxyAvailabilityGroup Inactive
VMEXCHG2013.greattechhelp.local ForwardSyncDaemon Inactive
VMEXCHG2013.greattechhelp.local ProvisioningRps Inactive
VMEXCHG2013.greattechhelp.local MapiProxy Inactive
VMEXCHG2013.greattechhelp.local EdgeTransport Inactive
VMEXCHG2013.greattechhelp.local HighAvailability Inactive
VMEXCHG2013.greattechhelp.local SharedCache Inactive

To make all your configured components active:

[PS] C:\>Set-serverComponentState -Identity vmexchg2013 -Component ServerWideOffline -State Active -Requester Functional

Check again:

[PS] C:\> Get-ServerComponentState
Server Component State
—— ——— —–
VMEXCHG2013.greattechhelp.local ServerWideOffline Active
VMEXCHG2013.greattechhelp.local HubTransport Active
VMEXCHG2013.greattechhelp.local FrontendTransport Active
VMEXCHG2013.greattechhelp.local Monitoring Inactive
VMEXCHG2013.greattechhelp.local RecoveryActionsEnabled Inactive
VMEXCHG2013.greattechhelp.local AutoDiscoverProxy Active
VMEXCHG2013.greattechhelp.local ActiveSyncProxy Active
VMEXCHG2013.greattechhelp.local EcpProxy Active
VMEXCHG2013.greattechhelp.local EwsProxy Active
VMEXCHG2013.greattechhelp.local ImapProxy Active
VMEXCHG2013.greattechhelp.local OabProxy Active
VMEXCHG2013.greattechhelp.local OwaProxy Active
VMEXCHG2013.greattechhelp.local PopProxy Active
VMEXCHG2013.greattechhelp.local PushNotificationsProxy Active
VMEXCHG2013.greattechhelp.local RpsProxy Active
VMEXCHG2013.greattechhelp.local RwsProxy Active
VMEXCHG2013.greattechhelp.local RpcProxy Active
VMEXCHG2013.greattechhelp.local UMCallRouter Active
VMEXCHG2013.greattechhelp.local XropProxy Active
VMEXCHG2013.greattechhelp.local HttpProxyAvailabilityGroup Active
VMEXCHG2013.greattechhelp.local ForwardSyncDaemon Active
VMEXCHG2013.greattechhelp.local ProvisioningRps Active
VMEXCHG2013.greattechhelp.local MapiProxy Inactive
VMEXCHG2013.greattechhelp.local EdgeTransport Active
VMEXCHG2013.greattechhelp.local HighAvailability Active
VMEXCHG2013.greattechhelp.local SharedCache Active

Enter Product License Key:

Set-ExchangeServer -Identity ‘MY-EXCHG01’ -ProductKey ‘AAAAA-BBBBB-CCCCC-DDDDD-EEEEE’

List Services:

[PS] C:\>Get-Service

Status Name DisplayName
—— —- ———–
Stopped AeLookupSvc Application Experience
Stopped ALG Application Layer Gateway Service
Stopped AllUserInstallA… Windows All-User Install Agent
Running AppHostSvc Application Host Helper Service
Stopped AppIDSvc Application Identity
Stopped Appinfo Application Information
Stopped AppMgmt Application Management
Stopped aspnet_state ASP.NET State Service
Stopped AudioEndpointBu… Windows Audio Endpoint Builder
Stopped Audiosrv Windows Audio
Stopped AxInstSV ActiveX Installer (AxInstSV)
Running BackupExecAgent… Backup Exec Remote Agent for Windows
Running BackupExecAgent… Backup Exec Agent Browser
Running BackupExecDevic… Backup Exec Device & Media Service
Running BackupExecJobEn… Backup Exec Job Engine
Running BackupExecManag… Backup Exec Management Service
Running BackupExecRPCSe… Backup Exec Server
Running bedbg Backup Exec Error Recording Service

Find a service:

[PS] C:\>Get-Service | findstr Inform
Stopped Appinfo Application Information
Running MSExchangeIS Microsoft Exchange Information Store

Restart and service:
[PS] C:\>Restart-Service MSExchangeIS
WARNING: Waiting for service ‘Microsoft Exchange Information Store (MSExchangeIS)’ to finish stopping…
WARNING: Waiting for service ‘Microsoft Exchange Information Store (MSExchangeIS)’ to finish stopping…
WARNING: Waiting for service ‘Microsoft Exchange Information Store (MSExchangeIS)’ to finish stopping…
WARNING: Waiting for service ‘Microsoft Exchange Information Store (MSExchangeIS)’ to finish stopping…
WARNING: Waiting for service ‘Microsoft Exchange Information Store (MSExchangeIS)’ to finish stopping…
WARNING: Waiting for service ‘Microsoft Exchange Information Store (MSExchangeIS)’ to finish stopping…
WARNING: Waiting for service ‘Microsoft Exchange Information Store (MSExchangeIS)’ to finish stopping…
WARNING: Waiting for service ‘Microsoft Exchange Information Store (MSExchangeIS)’ to finish stopping…

Check and Modify Role Memberships:
First, the “Organization Management” Role is the most powerful role in Exchange 2010 and Exchange 2013.

To list the members of a role:

[PS] >Get-RoleGroupMember “Organization Management”
Creating a new session for implicit remoting of “Get-RoleGroupMember” command…

Name RecipientType
—- ————-
Administrator UserMailbox

To add somebody to a role:

[PS] >Get-RoleGroupMember “Organization Management”

Name RecipientType
—- ————-
Administrator UserMailbox
Jim Zimmerman UserMailbox

Here is list of Exchange roles in Exchange 2010. I believe most of these are in Exchange 2013 too:

Connector commands:
List Connectors:

[PS] C:\>Get-ReceiveConnector

Identity Bindings Enabled
——– ——– ——-
MYEXSERVER\Non-Exchange Relay Support {} True

[PS] C:\>Get-SendConnector

Identity AddressSpaces Enabled
——– ————- ——-
Production SMTP Connector {SMTP:*;1} True

To see all the settings for a single connector:

[PS] C:\>Get-ReceiveConnector “MYEXSERVER\Non-Exchange Relay Support” | Format-List

To change a setting for a connector:

[PS] C:\>Get-ReceiveConnector “MYEXSERVER\Non-Exchange Relay Support” -ProtocolLoggingLevel Verbose

A note on connector logging:
The connector logs are stored on the Transport Hub server in the ExchangeInstallPath\TransportRoles/Logs/ProtocolLog/SmtpReceive for the receive connectors, and ExchangeInstallPath\TransportRoles/Logs/ProtocolLog/SmtpSend for the send connectors.

Also, in a mixed version environment, the connector may have to be “upgraded” to support logging. I was not able to turn on the the logging for my old Exchange 2003 connectors. Upgrading basically consists of deleting and creating again.

To view basic information about a mailbox:

[PS] C:\>Get-Mailbox “mailboxname

To view detailed information about a mailbox:

[PS] C:\>Get-Mailbox “mailboxname” | Format-List

To filter that list:

[PS] C:\>Get-Mailbox “mailboxname” | Format-List properties

[PS] C:\>Get-Mailbox “mailboxname” | Select properties

To see mailbox usage, number of items, etc:

[PS] C:\>Get-MailboxStatistics “mailboxname

Which you can filter as well:

[PS] C:\>Get-MailboxStatistics “mailboxname” | Format-List properties

[PS] C:\>Get-MailboxStatistics “mailboxname” | Select properties

View mailboxes and sort them by size:

[PS] C:\>Get-MailboxStatistics | Select DisplayName,TotalItemSize,LastLoggedOnUserAccount,LastLogonTime | Sort-Object -Property TotalItemSize

This works too:

[PS] C:\>Get-MailboxStatistics -Server servername | Select DisplayName,ItemCount,TotalItemSize | Sort TotalItemSize

To view mailbox logon information:

[PS] C:\>Get-LogonStatistics ‘mailboxname’

To view who has access to a mailbox:

[PS] C:\>Get-MailboxPermission “mailboxname

Add mailbox permission:

[PS] C:\>Add-MailboxPermission -Identity ‘mailboxidentity‘ -User ‘domain\username‘ -AccessRights ‘FullAccess’

Remove mailbox permission:

[PS] C:\>Remove-MailboxPermission -Identity ‘mailboxidentity‘ -User ‘domain\username‘ -AccessRights ‘FullAccess’

Move a mailbox:

[PS] C:\>’cntouseraccount’ | New-MoveRequest -TargetDatabase ‘databasename


[PS] C:\>’MY.DOMAIN/MYOU/my name’ | New-MoveRequest -TargetDatabase ‘MYEXCHANGEDB’

To check move request statuses:

[PS] C:\>Get-MoveRequest

For more detail, like how far a move has progressed:

[PS] C:\>Get-MoveRequestStatistics -IncludeReport

To set the bad item limit for a mailbox that has partially been transferred:

[PS] C:\>Set-MoveRequest -Identity “my name” -BadItemLimit numberofitems

To resume a failed mailbox move:

[PS] C:\>Resume-MoveRequest ‘my name’

To move a mailbox that has some corrupted items (in this case, one):

[PS] C:\>’MY.DOMAIN/MYOU/my name’ | New-MoveRequest -BadItemLimit 1 -TargetDatabase ‘MYEXCHANGEDB’

If you have a lot of issues:

[PS] C:\>’MY.DOMAIN/MYOU/my name’ | New-MoveRequest -BadItemLimit 100 -AcceptLargeDataLoss -TargetDatabase ‘MYEXCHANGEDB’

Note: these items will then not be migrated over the new location.

To count the number of items in some output use Measure-Object:

This more of a PowerShell tip than an EMS tip, but it is good to know when using EMS.

[PS] C:\>Get-Mailbox | Measure-Object

Count : 124
Average :
Sum :
Maximum :
Minimum :
Property :

To check the mail queues:

To retry or process messages in a queue:

Queue notes:

Check queues:

[PS] C:\>Get-Message -Server servername

To check the queues:


To force the messages in a queue to try again:

Retry-Queue -Filter {status -eq “retry”}

To try one queue again”

Retry-Queue -Identity Server\Queue

Remove a message from a queue:

[PS] C:\>Remove-Message -Identity messageidentity

[PS] C:\>Write-Output Output something.

To count the number message received on a day:

[PS] C:\>Get-MessageTrackingLog -Start “mm/dd/yyyy 00:00″ -End “mm/dd/yyyy 23:59″ -EventID RECEIVE | Measure-Object

To find mailbox sizes and sort by size:

[PS] C:\>Get-MailboxStatistics -Server servername | Select DisplayName,TotalItemSize | Sort TotalItemSize

To remove automapping. Or how to grant access to a mailbox and not enable AutoMapping like the UI does:

[PS} C:\>Add-MailboxPermission -Identity mailboxname -User username -AccessRight FullAccess -InheritanceType All -Automapping $false

How to restore Outlook views

To restore your Outlook views to the default, you just need to start Outlook with a cleanviews switch. In Windows 7 and up, it is easiest to let search do the work for you. Just type in the command:

outlook.exe /cleanviews

There are quite a few other switches available for Outlook 2010 and Outlook 2013.

I have used the /safe switch many times in the past for older versions when I have trouble with Outlook crashing.

Return top