A user has deleted some emails from their Sent Items and Deleted folders (Calendars, Contacts, etc.) on a single email address and would like to recover them. This article provides the steps to accomplish this, whether it is from an external backup or using the Kerio Connect backup functionality.
- Admin access to Kerio Connect server
Recovering data from a backup will replace the current data. If you only want to restore the missing emails, you will need to go to the backup, locate the email, calendar, and contacts you want to restore, and copy them to the user's folder.
The Kerio mailbox is structured as below:
The emails, calendars, and contacts have the .eml extension, but the filename is randomly generated in hex format (e.g., 0000000a.eml).
- From the backup, you need to locate the missing items and copy them to the appropriate #msgs folder.
- If, for instance, the filename already exists, you can change the filename as long as it is in hex format.
- If you are not sure how to change the filename, you can simply follow the format of the filenames in that folder. For example, if the newest file is 0000000a.eml, you can change it to 0000000b.eml.
The challenge here is how to check if you have the correct item to restore, as you will need to open the .eml file in Outlook or Notepad. You can also try the native search in Windows or run scripts to search for the emails (if you know specific keywords in the email like the recipient, etc.).
If the user has an external backup (using third-party backup software):
Locate the Sent Items and Deleted folders in the external backup.
Copy the .eml files from the
...Deleted/#msgsfolder to the current folders.
If the user has a standard Kerio Connect built-in backup functionality:
Check the .eml files in the last full backup.
Move the necessary or missing .eml files to the appropriate folders.
After restoring the emails from a backup, the user needs to re-index the affected mailbox.