Deleted Item Recovery and Data Security
People are always asking us if we do backups. Good grief. Of course we do. We've been offering Exchange Hosting since 1998, and we haven't lost any data yet. You are well protected against the unlikely event of server-related disaster.
But usually when people ask about backups, what they really want to know is whether we can help when they accidentally delete something. This page will explain the issues involved and answer that question.
The good news is Exchange provides a deleted item retention period. It is configured for 10 days. So generally speaking, you can recover things that have been deleted within the past 10 days.
Here's how it works. When you delete an item from your inbox, calendar or other mailbox folder, it goes into the deleted items folder in your mailbox. Normally, it will stay there until you delete it from that folder.
Here are some exceptions to that.
- Outlook can be configured to empty the deleted items folder every time you close Outlook.
- Outlook's auto-archive feature can be configured to periodically delete the items in your deleted items folder.
- Accessing your mailbox with a non-Exchange Internet mail client such as Outlook Express, can cause items in your inbox to be "permanently" deleted, bypassing the deleted items folder.
- Holding down the Shift key while deleting an item causes it to be "permanently" deleted, bypassing the deleted items folder.
After you delete items from the deleted items folder, or "permanently" delete them, then the clock starts to run on the 10-day deleted item recovery period. During the 10 day period, items can normally be recovered using the deleted item recovery feature.
After the 10 day period, what's gone is gone.
Here's how to use the Recover Deleted Items feature.
- You might need to go to the View menu in Outlook and choose Folder List in order to see your deleted items folder. Click the deleted items folder in the folder list to select it. Its contents will be displayed. The presence of entire folders will be indicated by a plus sign next to the deleted items folder icon.
- The Recover Deleted Items menu choice is only available if you're currently in your deleted items folder or a public folder. While your deleted items folder is selected, go to the Tools menu and choose Recover Deleted Items. The Recover Deleted Items window will appear.
- Select the items you want to recover and click the Recover Selected Items button. They will be restored to the deleted items folder.
Public Folders
When you delete something from a public folder, it does not go into anyone's deleted items folder. It is "permanently" deleted immediately.
In order to recover items from a public folder, first select the public folder which contained those items, then choose Recover Deleted Items from the Tools menu.
In order to recover an entire public folder, select the parent folder which contained it, then choose Recover Deleted Items from the Tools menu.
Please note, there is a known issue (bug) with Exchange relative to recovering entire public folders that had been deleted. Unfortunately, it often does not work. When you try, it throws up an error message about inadequate permissions, even though the permissions are adequate. It is important for users to be aware of this limitation, and plan accordingly.
We have successfully deleted and recovered entire public folders. Nonetheless, we think you would be wise to avoid betting your life on the ability to recover deleted public folders. See the tips below and make sure you always have backup copies of important folders.
Data Security - A Word To The Wise
Here are some technical tips for how to protect your company against accidental deletion of important Exchange server data.
- Periodically export a copy of your important data, especially public folders, into a pst file and store the pst file in a safe place, such as a CD-ROM. Use the import/export wizard on the Outlook File menu. If your folders are large, it is important to do this while you're working in cached mode, so it goes at the speed of your machine, not the speed of your network connection.
- Reduce permissions on all public folders, especially your top level public folder. When your organization is created at Exchange Hosting Service, the All ... Recipients group will be given Owner permissions on your top level public folder. This means anyone in your group could potentially delete that folder, and everything in it, which means all your public folders and everything they contain.
- Give people only the public folder permissions they need. Only your lead person should have more than read-only on your top level public folder. Right click any folder, choose properties, then permissions to see the controls. They are very specific and easily adjustable.
- Be aware that an offline folder file (ost file) is not the same as a personal folder file (pst file). Recovering data from a pst file is as simple as drag and drop. Recovering data from an offline folder file, if that data has been deleted from the server, can sometimes only be accomplished with special tools at great expense. There are companies on the Internet who will perform this service for several hundred dollars.
- If you discover that important data has been deleted, and you know it still exists on some other machine's offline folder file, rush to any machine that has been offline. Do not even connect that machine to the Internet. Make a copy of the ost file immediately. Start Outlook and work offline. Create a pst file on that machine and drag (or export) a copy of the folders into the pst file. Be aware, once that machine connects to the server, it will request updates and changes, and the server will instruct it to delete the data from the ost file.
- Confirm that Outlook's option is activated to download public folder favorites. See public folder performance for explanation and illustration.
If you are not able to recover what you need from the recover deleted items feature. It might still be possible for us to restore it for you. First the bad news. The Exchange server backup system is a disaster recovery system. If we lose a server, we can recreate it. But this system does not make it easy to browse through historical points in time and find particular items that have been deleted.
Restoring a particular mailbox to retrieve a deleted item is a costly operation because it takes several hours of an engineer's time. If the deleted item is worth spending hundreds of dollars to retrieve, let us know. We'll explain further.
By choosing Exchange Hosting Service, you have taken a big step toward keeping your data safe. If you go even further and follow the steps outlined above, especially the periodic export to pst file, you will greatly reduce the likelihood of ever finding yourself in the position of having lost important data.
Thank you for your confidence, and for doing your part.