How can I pull messges from a specific timeframe from an outside smtp email address to and from internal users, during a specific time frame without removing htem from the mailboxes? Does anyone have the export mailbox command with these parameters?

Do you have message tracking logs for the timeframe involved?

Clarification. If you have message tracking logs for the time frame in question, BACK THEM UP NOW. They will have a record of the mailboxes those messages went to, and the message ids. That information could potentially save you a huge amount of time getting the messages out of the mail store.If you wait, the logs may get overwritten before you can get that data.

yes i do have them. how do i get just that data out of them?

Exchange Management Shell, get-messagetrackinglog. Narrow it down to the timeframe and sender, and do an export-clixml on the results.

Hi,Use Export-Mailbox with parameter -SenderKeywords , -StartDate ,-EndDate .without removing them from the mailboxes = don't use -DeleteContent More information: Export-Mailbox<!----> http://technet.microsoft.com/en-us/library/aa998579(EXCHG.80).aspx Frank Wang