Recovery of single or multiple Exchange 2003 mailbox using Recovery Storage Groups

Spanish keywords: Restaurar uno o múltiples buzones de Exchange 2003 utilizando Grupos de almacenamiento de recuperación
Source:
http://www.youtube.com/watch?v=pcCtJdRn79U (include errors not quickly fixed)
http://www.youtube.com/watch?v=odP4GqwRF-Q
http://www.youtube.com/watch?v=_j7Hv3nQIec (good video, steps missing, long and slow  introduction, and it copies not merge backup - so there is duplicity)


Types of backup

BACKUP FOR SYSTEM HARDWARE FAILURE
1. You need a backup (use ntbackup and make a full backup on sunday  - stopping exchange services with a script), call the file Exchange Full SysRecovery Backup.bkf

BACKUP FOR Recovery Storage Groups
2. You'll also need a full backup with Exchange services running.  It means "select checkboxes" on the side of "Exchange Information Store" when you select the scope of Ntbackup, call the file Exchange Full IS Backup.bkf

For use this instructions you need the second type of backup listed and at least Exchange 2003 SP2 installed

Steps:
1. Connect an USB or USB Hard disk drive with almost USB 2.0 and at least free same with the same size of priv1.edb or priv1.stm
2. Create a folder G:\Recovery
3. Start Exchange System Manager
4. Browse to Servers - ServerName - First Storage Group
5. Right Clic on First Storage Group and clic "New Recovery Storage Groups", go to General Tab and point both "Transaction Log Location" and "System Path Location" to G:\Recovery (USB)
6. Now clic on "Recovery Storage Group" and right clic to "Add Database to Recover", select your Database the default it's called "Mailbox Store"
7. Now go to "Database Tab" and be sure to have checked "The database can be overwritten by a restore"
8. Now open ntbackup.exe, go to Restore Tab, look for more recent Catalog file of "Exchange Full IS Backup", and check "Mailboxes and LogFiles", clic Start Restore. You'll be asked to select the "hostname" of your production server or a temporary server (more complex), create a second folder on drive G:\ called temp, so you can point the "Temporary location for log and..." to G:\temp
9. I've recomend to mark both checkboxes "Last restore set (Log File Replay)" and mount to finish.
10. Wait until restoration is Finished
11. Wait at least 5 minutes to see the "Recovery Storage GRoup" mounted and two subfolers "mailboxes and logon"
12. When you can access to Mailbox subfolder, you'll notice that all mailboxes are marked as "deleted" with a "Red X"
13. You right clic on one or select several mailboxes and you'll open a wizard of Exchange Tasks called "Recover Mailbox Data", clic on next, select the "Destination Storage Group\Database", clic next
14. Select Merge to copy only "missing items", if you chose Copy you'll create duplicates of all elements even if exist on the destination. Clic Next
15. You can schedule the task, or can clic next to start the process
16. That's all, only inexistent items will be restored, it could take more time than just copying but is better for the final user


Greetings

BADBOY

PS: If you have questions play the source videos, understand it and do your own tests.

 

Iomega Home Media Network Hard Drive (MHNDHD) file recovery after "Factory Self Erase"

Spanish keywords: recuperar archivos de un Iomega Home Media Network Hard Drive (MHNDHD) después de qué automáticamente retornó a su estado de fábrica

Tools:

• Standard Screwdriver

Hardware:

• Desktop PC with Windows 7 installed 
• an adittional free SATA connector
• Enough free space on drive C:

Software:

• Raise Data Recovery for SGI/XFS at http://www.ufsexplorer.com/rdr_xfs.php
• You need to buy the online serial via paypal to recover files greater tan 256KB

Objectives:

• Try to find a Iomega XFS Data Partition
• Try to restore overwrited XFS Data Partition by accidental factory reset
• Try to restore overwrited files on XFS Data Partition by "SELF factory reset"

Steps:

1. Warranty that you have 1 hard drives with enough space
2. Install Windows on drive in SATA 0 port
3. Shutdown computer

To dissasemble the drive

• Unplug LAN and Power Cord and Carefully Disasembly Iomega Hard Drive, take out the two screws on the back, BE EXTREMLY CAREFUL the disk could slide out and crash, take out the "fan connector" just the white connector, if you pull from cable you'll broke the fan plug.  Later take out the four screws from the side of the internal sata disk
• A dissasembly video from Geek Street is on YouTube (http://www.youtube.com/watch?v=RLAGPBaixbw)

1. Install the internal SATA on your Desktop computer on port SATA 1 (don't use SATA-to-USB adapters these are extremely slow if you need to recover a bunch of files)
2. Click NO if Windows Ask to format a "x: drive" letter
3. Just don't try to browse the partitions from Windows.  Run compmgmt.msc to open "Disk Management" to see if the drive appears, again Click NO if Windows ask to initialize disk or "Reactivate Disk", just check that you see your C:\ drive and a second disk with three partitions (two small and one large)
4. Install and actívate the Raise Data Recovery for XFS
5. Open the program and right clic on "the biggest XFS partition" that you found on the secondary disk, and clic "Recover", don't forget to check "Intelligent RAW" checkbox
6. Once you see the file tree on Raise Data Recovery Program, restore on drive C:\ or a network share.  The recovery chances is 100% but the recovery of filenames is only about 80%, so you will need to rename several or hundred of files.  (install msoffice, adobe , etc) you'll have a lot of time to spent putting the right name on files.
7. To get the initial FileTree will take about 8 hours on a 50% used 1TB hard drive.
8. Later you could have a 24 hour wait for total recovery of the files.

Good Luck

Captions soon