{"id":2580,"date":"2010-05-06T00:05:06","date_gmt":"2010-05-05T23:05:06","guid":{"rendered":"http:\/\/www.itwriting.com\/blog\/2580-exchange-2007-eseutil-beats-the-wizard.html"},"modified":"2010-05-06T00:05:06","modified_gmt":"2010-05-05T23:05:06","slug":"exchange-2007-eseutil-beats-the-wizard","status":"publish","type":"post","link":"https:\/\/www.itwriting.com\/blog\/2580-exchange-2007-eseutil-beats-the-wizard.html","title":{"rendered":"Exchange 2007: ESEUTIL beats the wizard"},"content":{"rendered":"<p>Today I was asked to help find missing email in Small Business Server 2008, in other words Exchange 2007. Somehow, thousands of emails had disappeared from a user\u2019s mailbox. They were there a couple of days earlier, so we restored a backup. The procedure is <a href=\"http:\/\/blogs.technet.com\/sbs\/archive\/2009\/01\/26\/how-to-use-a-recovery-storage-group-in-sbs-2008.aspx\" target=\"_blank\">nicely explained by John Bay<\/a>. You restore the Exchange database to a temporary directory, leaving Exchange up and running. Then you mount the restored backup into a \u201crecovery storage group\u201d, from where you can merge items from the recovered mailbox into the live one.<\/p>\n<p>All went well, until the point where you mount the restored backup. The database would not mount. The event viewer said it was in an inconsistent state. Bay anticipates this, and suggests using the Exchange Troubleshooting Assistant to repair the database. The repair chugged away and completed; but the database still would not mount. I tried again, same result.<\/p>\n<p>I gave up on the Assistant and reverted to the traditional command-line tools. I used the sequence:<\/p>\n<p>ESEUTIL \/P<\/p>\n<p>ESEUTIL \/D<\/p>\n<p>ISINTEG<\/p>\n<p>running against the recovered database. The first does a repair; the second defragments; and the third runs integrity checks and applies fixes. <\/p>\n<p>Now, you would have thought that the Troubleshooting Assistant would use these very same tools underneath its pretty GUI, but that cannot be the case. Apart from anything else, ESEUTIL \/P took much longer than the Assistant. In particular, it appeared to hang while doing something mysterious called Deleting Unicode fixup table.<\/p>\n<p><a href=\"http:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2010\/05\/image4.png\"><img loading=\"lazy\" decoding=\"async\" style=\"border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px\" title=\"image\" border=\"0\" alt=\"image\" src=\"http:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2010\/05\/image_thumb4.png\" width=\"404\" height=\"335\" \/><\/a> <\/p>\n<p>It carried on saying this for around 7 hours. There was evidence that the process was still alive though, so I left it be. <\/p>\n<p>It worked. I ran the other two commands, mounted the database, and merged the mailbox to recover about 4,000 emails.<\/p>\n<p><a href=\"http:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2010\/05\/image5.png\"><img loading=\"lazy\" decoding=\"async\" style=\"border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px\" title=\"image\" border=\"0\" alt=\"image\" src=\"http:\/\/www.itwriting.com\/blog\/wp-content\/uploads\/2010\/05\/image_thumb5.png\" width=\"362\" height=\"156\" \/><\/a> <\/p>\n<p>The question remains: where did the emails go? All I know is that the problem coincided with a newly installed Windows and Outlook, which I\u2019m guessing is significant.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Today I was asked to help find missing email in Small Business Server 2008, in other words Exchange 2007. Somehow, thousands of emails had disappeared from a user\u2019s mailbox. They were there a couple of days earlier, so we restored a backup. The procedure is nicely explained by John Bay. You restore the Exchange database &hellip; <a href=\"https:\/\/www.itwriting.com\/blog\/2580-exchange-2007-eseutil-beats-the-wizard.html\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Exchange 2007: ESEUTIL beats the wizard<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[32,55],"tags":[374,586,836],"class_list":["post-2580","post","type-post","status-publish","format-standard","hentry","category-exchange","category-microsoft","tag-exchange","tag-microsoft","tag-small-business-server"],"_links":{"self":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/posts\/2580","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/comments?post=2580"}],"version-history":[{"count":0,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/posts\/2580\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/media?parent=2580"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/categories?post=2580"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/tags?post=2580"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}