Home > BackupExec, Exchange, Exchange 2010, Exchange 2010 AKA E14, Exchange and UC, Exchange Server 2013, Symantec > How to Restore Exchange 2010 Mailbox or Mailbox Item using Backup Exec 2012 #msexchange #backupexec #symantec

How to Restore Exchange 2010 Mailbox or Mailbox Item using Backup Exec 2012 #msexchange #backupexec #symantec

In This post we will explore how to restore a mailbox or a single mailbox item using Backup Exec 2012 to Exchange 2012.

Setting up the stage:

you need to make sure that you have a working backup set, we will continue from our configuration we have committed in the first part of this series: https://autodiscover.wordpress.com/2012/09/04/how-to-backup-exchange-2010-using-symantec-backup-exec-2012-msexchange-microsoft-symantec-backupexec/

To Restore a single item from the backup set:

Note: your backup job must have been configured to use GRT, otherwise you will not be able to recover single item from the mailbox database.

select your Exchange server, and choose restore:


In the data selection page, select the Exchange data and click next:


In the following screen and for the sake of this part of the article select mailbox item and click next:


In which mailbox and items do you want to restore, explore the database and mailbox to find the item you want to restore, in my case I want to restore the mail item “Test 5” which was in the administrator mailbox and I have deleted it:


Select the location of the restore, in our case I will restore it to the original location (the administrator inbox):


in the following screen, Select the options as per your restore preference, in my case I will select none and continue:


In the additional tasks, you have the option to notify some users or run pre-commands, it is a nice option and new to Backup Exec 2012 “I Loved it”, in my case I will continue:


In the summary page click next and then the restore job starts.

Now if you believe that the restore will work, I would like to tell with a lot of joy it will not Open-mouthed smile.

I spent 2 days trying to figure out the reason why the restore is not working, I was getting this misleading error:

The job failed with the following error: Cannot log on to EWS with the specified credentials. Review the resource credentials for the job, and then run the job again

I searched for the error and found a knowledge base from Symantec stating that I need to configure the service account in the form of “account@domain.name” not “domain\account”, I did that and even suspected in the SSL certificate and created a new one with no luck no matter how hard I tried, it didn’t work.

so back to the basics, I read the BE admin guide, and went to the GRT restore part to find interesting statement:

Backup Exec also creates an impersonation role and a role assignment for Exchange
Impersonation. Exchange Impersonation role assignment associates the
impersonation role with the Backup Exec resource credentials you specify for the
restore job.
Backup Exec creates and assigns the following roles:
■ SymantecEWSImpersonationRole
■ SymantecEWSImpersonationRoleAssignment

and all of a sudden things started to make sense, to access EWS and restore item for another mailbox, you MUST have the impersonation rights, well powershelling my Exchange server, I didn’t find the mentioned roles, it looks like setup is broken and didn’t create them or they weren’t created on my server for a reason or another.

to fix this issue, assign the BEadmin the impersonation permissions using the following cmdlets:

1- Command to create a new role called SymantecEWSImpersonationRole:
New-ManagementRole -Name SymantecEWSImpersonationRole -Parent ApplicationImpersonation

2- Command to assign a user to SymantecEWSImpersonationRoleAssignment:
New-ManagementRoleAssignment -Role SymantecEWSImpersonationRole -User Username SymantecEWSImpersonationRoleAssignment

Reference: http://www.symantec.com/business/support/index?page=content&id=TECH125119

trying again I got a very nice error “again” Smile:

The job failed with the following error: Cannot restore one or more mailboxes. The database that the mailboxes reside in is dismounted or is not accessible. Ensure that the server is available and that the database is mounted, and then run the job again.

Honestly I was trying to restore the administrator mailbox, so I tried to restore a normal user and it worked Open-mouthed smile.

Lessons learnt: don’t be misled by error messages, and it is always reading the architecture again and again for every feature you are using.

by now you should be able to restore single item from your Backup Exec 2012 backup, next blog post will talk about restoring an entire database.

have fun !!!

  1. yos
    November 21, 2012 at 1:30 am

    try Veeam Exchange Explorer Much better!

    • November 22, 2012 at 8:17 am

      shall I buy a dedicated product for Exchange, backup exec is not an Exchange only product

  2. Wade Chestnut
    November 21, 2012 at 10:05 pm

    Are those commands executed from BEMCLI? According to the Get-BEcommand list, those New commands don’t exist?

    • November 22, 2012 at 8:15 am

      these commands are Exchange powershell commands to give the permissions to the BE account, they are not backup Exec commands

  3. April 29, 2013 at 6:29 pm

    Please help!

    While i am able to restore DB level Exhcange 2010 DBs on BEWS2012sp1a just fine i’m still having no luck with any mailbox level restore combination (not with redirection to other existing mailbox, not with exporting to pst, nor with plain inplace active DB mailbox level restore for existing user)

    the credentials are seems to be ok since DBlevel restore is working….
    the test-webservicesconnectivity -MailboxCredential $(get-credential) -TrustAnySSLCertificate | FL is giving me all good…

    Get-ManagementRoleAssignment -Role “SymantecEWSImpersonationRole”.
    is giving the the right roles for my backup@ogup.local account

    still.. while the restore jobs are finishing with always success status – i dont see any changes in restored mailbox… (i’m trying to restore deleted items which were deleted after the full backup) no luck! they are just to there anymore.. still with all success status on restore jobs… have no idea what to do!

    • April 29, 2013 at 6:50 pm

      sorry for the lame question, but those deleted items where hard deleted ?!

  4. April 29, 2013 at 7:17 pm

    nop just moved to deleted items… does it matters?

  5. April 29, 2013 at 7:21 pm

    and you can see those items in the deleted items folder in the backup
    and yes if they hard deleted you won’t be able to recover them

    • April 29, 2013 at 7:25 pm

      sorry didn’t get it, please re-phrase! upon restore, i still see the deleted items, which were deleted after the initial full backup… and i don’t see inbox items which were there on backup phase and before i’ve deleted ’em from inbox….

  6. April 29, 2013 at 7:22 pm

    i have exchange 2010 sp1 with all latest rollups on CAS
    i have DAG with 2 nodes both same ver.
    but i’m trying to restore to a single instance DB (no passive copies on the nodes)
    the mgmt tools on a BEWS server are the same ver as on all other Exchange servers…
    no errors are given even in debug logs for SGmon all seems to be fine there… i’ve also tried to enable the EWS extended degub tracing through the regedit…

  7. April 29, 2013 at 7:25 pm

    I am confused, the issue you are having with single item recover or DB level restore

  8. April 29, 2013 at 7:29 pm

    sorry for that! 🙂 i can be confusing sometimes! i’m not a native speaker! 🙂
    well. DB level restore is working great! so i get the very same state of my test mailbox, as it was prior to backup… skip it for this case ok? now i delete some inbox items (to the deleted items folder) and trying to restore mailbox level… after successful restore i get the very same state as BEFORE the restore… i mean the deleted inbox items are still in the deleted folder and the inbox is empty…

  9. April 29, 2013 at 7:34 pm

    i’ve read all the manuals on Symantec KBs… still now luck… i’m out of options… for now… 😦 ot may be i’m just misunderstanding the principals of mailbox-level restore… i mean may be the items have to be perm removed…

  10. April 29, 2013 at 7:35 pm

    hhhhhhhhhhhhhhhhhhhhhhhhh, tricky, well, this is because the item still exists in the mailbox, it just moved to the deleted folder, so you can think about it as a shortcut or something, to test it, hard deleted the item from the deleted folder then try to restore from the backup, but make sure that you are restoring the item only

  11. April 29, 2013 at 7:38 pm

    hmmmm… good idea! will try it right now!

  12. April 29, 2013 at 7:55 pm

    Dear Mahmoud,

    You was absolutely right!!!!! right after i’ve perm removed the items from inbox (not just soft delete to deleted items) and them committed restore – everything restored by mailbox-level restore just grate! i again got the same items in inbox!!!!! Thank you very much! i’ve tried to figure it out for about a week… may be i’m just a dumbass!
    Best regards
    from Russia, Ekaterinburg,
    Vladimir Nikiforov
    IT dept. head

  13. April 29, 2013 at 8:07 pm

    no worries, I failed in that also, it is tricky, glad that i helped and let me know anytime if you want any help

  1. September 6, 2012 at 1:57 pm

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: