This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 78%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFF%3C/text%3E%3C/svg%3E)
Hi all,
My colleague has arrived at work today after the weekend and found all of her emails missing from her Outlook.
These emails are missing both locally and on Outlook online.
The only emails she has access to are ones she has sent to herself.
She is receiving emails fine now.
Thank you for any help
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(208, 87%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMR%3C/text%3E%3C/svg%3E)
Hi Freddie,
Is your friend's mailbox storage showing as empty?
Hi Midhun, no it is not
Is he checked from deleted emails, recovery storage, and Archive storage?
Yes, we have checked the archive, all folders, online, deleted, junk everywhere
Check any retention policy or rule applied or PST/OST file may be corrupted...Please check with your admin Team
If mails are deleted if Litigation Hold is enabled or retention policy applied ....if enabled your admin can restore all mails please check with them
PST file is irrelevant here as the emails are also not present on Outlook on the web, they are permanently deleted from exchange
check eDiscovery or check if using Journaling to get the total mailbox storage
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(252.8, 50%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETS%3C/text%3E%3C/svg%3E)
Hey,
You'd be best in this case running an Audit Log Search within the Purview Admin Center, providing Audit Log Recording is enabled within your tenancy.
You should be able to pinpoint which user/device/service initiated the deletion of these emails.