Email audit using Exchange Backups?

[kduvall]

A server admin accidentally ran a PS script that deleted a lot of email throughout a pretty large Exchange cluster. They caught the script after it had run for some time. The admins are having a difficult time locating which mailboxes were actually impacted due to the lack of logging on the PS routine. Basically any mailbox that has reduced in size significatly over the past 24 hours would be suspect.

I'm wondering if I can help them out by doing a mailbox compare/audit between last nights backup and tonights. Does anyone know if this is possible? I'm open to other suggestions as well.

Thank you

[Gostev]

Unfortunately, this capability is coming in the next update only I know it's a long shot, but may be you can try to get on beta through your Veeam sales rep, and use the updated Veeam Explorer against the latest backup? This is the only way I see.