Search and Delete messages from mailboxes

Search-mailbox cmdlet can mainly be used for:

1. Copying messages to a another target mailbox

2. Deleting messages from a mailbox

3. Recovering items from a user’s Recoverable Items

4. Deleting items from Recoverable Items

To search for a specific emails in the mailbox and to delete them:

First, in order to be able to see and run this cmdlet in the EMS, the user running it should have “Discovery Management” rights. The “Discovery Management” role group bu default doesn’t have any members including administrators. This role group also grants “Mailbox Import Export” RBAC role, and it can also be used to export and/or import emails from/to user mailboxes.

To add your account to this group:

Add-RoleGroupMember “Discovery Management” –Member theadmin

Then, for example, to delete all emails that contains “your mailbox is full” in the subject of a user the following cmdlet can be used:

Search-Mailbox -Identity testuser –SearchQuery “Subject:’Your mailbox is full'” ` –DeleteContent –Force

For detailed information on parameters of this cmdlet: http://technet.microsoft.com/en-us/library/dd298173(EXCHG.141).aspx

#Exchange #Powershell