In order to search a mailbox, the account you are using must be a member of the “Discovery Management” role group. <\/p>\n
To check:
\n[PS] >Get-RoleGroupMember \u00e2\u20ac\u0153Discovery Management\u00e2\u20ac\u009d<\/p>\n
To add somebody to a role:
\nWhen you add somebody as follows, you will prompted for the member. For example, Administrator.
\n[PS] >Add-RoleGroupMember \u00e2\u20ac\u0153Discovery Management\u00e2\u20ac\u009d<\/p>\n
If you are doing this as Administrator and are adding the Administrator account, you will need to restart your EMS (Exchange Management Shell).<\/p>\n
Once you have added the role, you will be able to use the Search-Mailbox cmdlet. There are many search options. Below is a simple example searching the subject of a mailbox. The way this works is that the search results are sent to a target mailbox and folder. <\/p>\n
[PS] C:\\> Get-Mailbox alias<\/em> | Search-Mailbox -SearchQuery {Subject:”searchfor<\/em>“} -TargetMailbox mailbox<\/em> -TargetFolder “foldername<\/em>”<\/p>\n Example: So, in this example, the mailbox jim will be searched for any message with “work rules” in the subject line. Any results, will be put in the mailadmin’s mailbox in a folder called SearchJim.<\/p>\n You can do the same thing for the body of the message: Or a date range, except you have to specify sent or received: Or if you want to search for more than one criteria: To search To or From with a date with an estimate instead of copy to TargetMailbox: In order to search a mailbox, the account you are using must be a member of the “Discovery Management” role group. To check: [PS] >Get-RoleGroupMember \u00e2\u20ac\u0153Discovery Management\u00e2\u20ac\u009d To add somebody to a role: When you add somebody as follows, you will prompted for the member. For example, Administrator. [PS] >Add-RoleGroupMember \u00e2\u20ac\u0153Discovery Management\u00e2\u20ac\u009d If you are [&hellip<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[125,398,247],"class_list":["post-1416","post","type-post","status-publish","format-standard","hentry","category-documentation","tag-exchange","tag-mailbox","tag-search"],"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/1416","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1416"}],"version-history":[{"count":7,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/1416\/revisions"}],"predecessor-version":[{"id":1556,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/1416\/revisions\/1556"}],"wp:attachment":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1416"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1416"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1416"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n[PS] C:\\> Get-Mailbox jim<\/em> | Search-Mailbox -SearchQuery {Subject:”work rules<\/em>“} -TargetMailbox mailadmin<\/em> -TargetFolder “SearchJim<\/em>”<\/p>\n
\n-SearchQuery {Body:”somethinginthbody”} <\/p>\n
\n-SearchQuery {Received:(1\/1\/2010..12\/31\/2010)}
\n-SearchQuery {Sent:(1\/1\/2010..12\/31\/2010)}<\/p>\n
\n[PS] C:\\> Get-Mailbox alias<\/em> | Search-Mailbox -SearchQuery {Subject:”searchfor<\/em>” AND Body:”searchsomethingelse<\/em>” AND Sent:(01\/01\/2010..12\/31\/2010<\/em>)} -TargetMailbox mailbox<\/em> -TargetFolder “foldername<\/em>”<\/p>\n
\nSearch-Mailbox alias<\/em> -SearchQuery {Sent:(01\/01\/2015..12\/31\/2015) AND To:user1@domain1.com AND From:user2@domain2.com} -EstimateResultOnly<\/p>\n","protected":false},"excerpt":{"rendered":"