Networks

Ask something
Discussion Locked

Deleted GroupWise mailbox

0 helpful
5 replies

by cranflake

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

One user's mailbox "disappeared" along with all her addresses, folders, etc. in GroupWIse 5.5. One of the administrator's had just had a disagreement with this particular user whose mailbox "disappeared". Strangely enough the log files in GroupWise "disappeared" for this particular period of time too. Could this really have been a "glitch" in the system? How could it be proved that this administrator deleted the mailbox? Is there any way the information could be recovered since supposedly this administrator doesn't do back-ups on the mailboxes at this site?

If you have knowledge of the possibility of such a glitch happening - what would cause it and what would correct it?

Thanks

5 replies

by jimbb

Accidents do happen, but log files and everything is a bit strange indeed. If GroupWise would have done this all by itself - wouldn't really surprise me - then there would still be traces of files, maybe in the problem directory or so. And by rebuilding or recovering a mailbox chances are good you can recover quite a lot, if not all.
Have you tried to salvage some files, using filer.exe? If the files haven't been purged, you can recover them, and also see who has deleted them...

Jim

by bpalmer

I've got to agree with the other answer here. In my GroupWise environment, sometimes an individual message or cabinet folder will disappear on it's own, sometimes after normal maintenance, but I've never heard of an entire mailbox disappearing, along with related log files. If the mailbox was removed with the NWAdmin tool and not simply deleted off the volume, it's possible the auditing software caught it. I'd run Auditcon to check the auditing logs during the time in question, as adding or removing a mailbox is considered an NDS event, and should have been recorded. This assumes the auditing logs have not been erased, and that auditing is turned on for these types of events. If auditing is turned on, and the log has been erased, I'd say that there were too many specific erasures, and I'd have to question the admin pretty heavily.

This discussion is closed to new replies.