We have a server located in a separate forest to conduct mailbox recovery
requests . Generally speaking we perform our
recoveries as follows:
1. Create a separate Restore acct called "restore" on the Restore Server in
the separate Forest
2. Perform Tape restore to the Restore Server ( the Restore server has
exact configuration as production server and all storage grps/stores are
identically labelled)
3. We restore from tape Week by Week mailbox information (commit the logs
as we process each week) then Exmerge Copy the files to a separate folder on
the Restore Server. We also recover DUMPSTER information at this time.
4. When all the weeks are recovered, we Exmerge/Import each week's PST file
into a single PST
5. We then Exmerge/copy that last PST for our Investigation/Special mailbox
recovery file.

Now, here's the issue. Somehow during the Exmerge/Import process "some"
emails going into the Deleted Items folder show up with the RESTORE acct in
the TO: field vs the username. In other words, if the Exmerge copied the
mailbox (including the dumpster data) to the reconnected RESTORE acct, some
of the emails show up as "restore" in the To: field. My guess is that these
emails are those that were recovered from the dumpster. On the Weekly PSTs
copied from the mailbox there is no indication of the RESTORE acct being
addressed in the TO field, however. They only occur after Exmerge/Import

While I understand that this procedure may not be the most optimum way to
handle mailbox recoveries, our limited budget forces us to use it for the
time being. So, my current interest is not with the procedure but with a
reason why the RESTORE ACCTs are showing up vs the UserName.

As our budget improves, we will be interested in other alternatives to
perform our mailbox recoveries more efficiently.

Am looking for a reason or solution? If this is normal, I just need to know
this so I can explain it to our Legal folks who are wondering why this occurs.

Thanks very much

Archived from group: microsoft>public>exchange2000>misc