Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
VGSOURCES
Get listed

eDiscoveryPATCH 2026.10.18

How to Recover Deleted Emails in Exchange Online and Exchange Server

By VGSources Team 8 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If an Exchange message was just deleted, open Deleted Items first. If it is not there, use Recover Deleted Items in Outlook or Outlook on the web. Messages removed from Deleted Items normally move to the mailbox’s Recoverable ItemsDeletions folder, where Exchange Online keeps them for 14 days by default (administrators can configure up to 30 days). Recovery can still be possible after a purge when Single Item Recovery or a retention hold preserved the item, but success depends on the platform, configured retention and how long ago the deletion occurred.

Identify your Exchange platform before trying to recover mail

The recovery menus look similar to users, but the retention defaults and administrator controls differ. Determine whether the mailbox is hosted in Exchange Online (Microsoft 365) or on an organization-managed Exchange Server. Also confirm that you are working in the intended mailbox, especially if Outlook has several accounts or shared mailboxes.

As an Amazon Associate I earn from qualifying purchases.

Platform Deleted-item retention default Single Item Recovery when a mailbox is created Administrative recovery notes
Exchange Online 14 days for items removed from Deleted Items; an administrator can raise this to 30 days Enabled by default Authorized administrators can use the Exchange admin center (EAC), PowerShell and Microsoft Purview/eDiscovery workflows while retention or a hold still protects the item
Exchange Server 14 days at the mailbox database level by default; an administrator can override it per mailbox or database Disabled by default Microsoft documents separate Exchange Server procedures, including Search-Mailbox for a single mailbox and eDiscovery or compliance search for broader searches

The 14-day value is not a universal promise. An administrator may have changed it, a hold may preserve data beyond it, or an item may have been permanently purged after the applicable retention period.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recover a message yourself in Outlook

1. Check Deleted Items

  1. Open the affected mailbox in Outlook.
  2. Select Deleted Items (called Trash in some Outlook on the web views).
  3. Search or sort by sender, subject and received date. Shared mailboxes and conversation view can make a message appear in a different thread than expected.
  4. Move the message back to Inbox or another folder. If you find it here, no recoverable-items operation is needed.

2. Open Recover Deleted Items

If the message is absent from Deleted Items, open Recover Deleted Items (the command may appear as Recover items deleted from this folder) from the Deleted Items view. Outlook displays items that Exchange still holds in the recoverable area.

#1 Best Overall
Sale
Lexar D40E 128GB Dual USB 3.2 Gen 1 Type-C Jump Drive, Champagne Silver | USB-C Flash, Metal Housing, Swivel Design, Thumb Drive
  • USB-C 2-in-1 storage OTG: The Lexar JumpDrive Dual Drive D40E features USB Type-A and Type-C connectors in a slim, portable form factor for easy device compatibility
  • Transfer speeds up to 100MB/s: Based on internal testing, performance may vary depending upon the host device, interface, and usage conditions. 1MB=1,000,000 bytes
  • Plug and Play: Widely compatible with USB Type-C smartphones, tablets, laptops, Macs, and traditional Type-A devices, no software installation required. The 360° swivel design allows for easy switching between connectors without the hassle of losing a cap
  • Durable & Compact: The Lexar D40E USB memory stick features a metal enclosure, withstands temperatures from 0° to 50° C (32°F to 122°F), and is lightweight at 26g with dimensions of 70.4 x 16.9 x 11.7mm
  • Security & Warranty: Securely protects files using an advanced security software solution with 256-bit AES encryption. Backed by a Lexar 3-year limited warranty
  1. Search the list by subject, sender or deletion date.
  2. Select the message or messages.
  3. Choose Restore to return them to their original folder, or choose the option to restore them to another folder when your Outlook version offers it.
  4. Open the destination folder and verify the message, attachments and conversation position.

Run this check as soon as possible. In Exchange Online, the normal path after removal from Deleted Items is Recoverable ItemsDeletions, and the default retention clock is 14 days from that move. An administrator can configure a maximum of 30 days in Exchange Online. Exchange Server uses its mailbox or database retention setting instead.

3. Consider whether Shift+Delete was used

Shift+Delete bypasses Deleted Items and sends the message directly to Recoverable Items. Therefore, an empty Deleted Items folder does not prove that the message is gone; check Recover Deleted Items even when nobody remembers seeing the message in Deleted Items.

What Exchange means by soft delete and hard delete

Soft deletion

Microsoft uses soft delete for an item that has left its visible folder but remains in the recoverable area. This includes a message moved out of Deleted Items and a message sent there directly with Shift+Delete. User recovery normally exposes the Deletions portion of Recoverable Items.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Hard deletion

A hard delete is a purge from the recoverable area. Once purged and no preservation mechanism applies, the message is no longer available through the ordinary user recovery dialog. A purge can be initiated by a user, an administrator or an automated retention process.

Rank #2
SANDISK 128GB Ultra Flair, USB-A Flash Drive, Up to 150MB/s Read Speeds | USB Flash Drive, Up to 15x Faster than standard 2.0, Password Protection, Durable, Sleek Metal Casing, USB 3.0, Silver/Black
  • High-speed USB 3.0 performance of up to 150MB/s(1) [(1) Write to drive up to 15x faster than standard USB 2.0 drives (4MB/s); varies by drive capacity. Up to 150MB/s read speed. USB 3.0 port required. Based on internal testing; performance may be lower depending on host device, usage conditions, and other factors; 1MB=1,000,000 bytes]
  • Transfer a full-length movie in less than 30 seconds(2) [(2) Based on 1.2GB MPEG-4 video transfer with USB 3.0 host device. Results may vary based on host device, file attributes and other factors]
  • Transfer to drive up to 15 times faster than standard USB 2.0 drives(1)
  • Sleek, durable metal casing
  • Easy-to-use password protection for your private files(3) [(3)Password protection uses 128-bit AES encryption and is supported by Windows 7, Windows 8, Windows 10, and Mac OS X v10.9 plus; Software download required for Mac, visit the SanDisk SecureAccess support page]

Other Recoverable Items locations

When preservation is enabled, Exchange can keep copies in areas that users cannot browse as ordinary folders:

  • Purges can retain content that a user purged when Single Item Recovery or a hold applies.
  • Versions can preserve earlier versions of items when recovery or compliance features require them.
  • DiscoveryHolds can contain content retained by an eDiscovery or compliance hold.

Recoverable Items also supports auditing and calendar logging functions. Those internal locations explain why an administrator may recover a message even though the user’s Recover Deleted Items list is empty, but they do not guarantee recovery after the retention period and all holds have expired.

How long Exchange keeps permanently deleted mail

There is no single answer for every mailbox. Use the configured value for the specific platform and mailbox, then compare it with the time since deletion.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Situation Where the message is Normal recovery route What controls the deadline
Message still visible Deleted Items User moves it back No recoverable-items retention deadline has been reached
Removed from Deleted Items or deleted with Shift+Delete Recoverable ItemsDeletions User selects Recover Deleted Items Exchange Online: 14-day default, configurable up to 30 days; Exchange Server: mailbox/database setting, 14-day default
User purged the message while preservation applies Recoverable ItemsPurges, Versions or DiscoveryHolds Authorized administrator uses EAC, PowerShell or eDiscovery/compliance tools Single Item Recovery, Litigation Hold, In-Place Hold, eDiscovery hold or Microsoft 365 retention policy, plus the relevant retention period
Retention and holds have expired No retained copy Standard Exchange recovery cannot restore it Data has passed the configured deletion and preservation limits

When Recover Deleted Items is empty: administrator recovery

An empty user dialog is the point to involve an authorized administrator, not to keep retrying the same Outlook command. Before anyone searches, record the mailbox address, approximate deletion time, sender, recipients, subject, attachments and the folder where the message originally lived.

Rank #3
Sale
2 Pack 64GB USB Flash Drive USB 2.0 Thumb Drives Jump Drive Fold Storage Memory Stick Swivel Design - Black
  • What You Get - 2 pack 64GB genuine USB 2.0 flash drives, 12-month warranty and lifetime friendly customer service
  • Great for All Ages and Purposes – the thumb drives are suitable for storing digital data for school, business or daily usage. Apply to data storage of music, photos, movies and other files
  • Easy to Use - Plug and play USB memory stick, no need to install any software. Support Windows 7 / 8 / 10 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, compatible with USB 2.0 and 1.1 ports
  • Convenient Design - 360°metal swivel cap with matt surface and ring designed zip drive can protect USB connector, avoid to leave your fingerprint and easily attach to your key chain to avoid from losing and for easy carrying
  • Brand Yourself - Brand the flash drive with your company's name and provide company's overview, policies, etc. to the newly joined employees or your customers

Checks an administrator should make first

  • Confirm the mailbox identity and whether it is Exchange Online or Exchange Server.
  • Read the mailbox’s actual deleted-item retention value. The Exchange Online default is 14 days, not a fixed rule for every tenant.
  • Check whether Single Item Recovery is enabled.
  • Check for Litigation Hold, In-Place Hold, eDiscovery hold or a Microsoft 365 retention policy that could preserve the content.
  • Establish the administrator permissions required for the chosen search and restore action.
  • For legal, regulatory or internal-investigation work, preserve chain-of-custody records before exporting or restoring anything.

Exchange Online workflow

For Exchange Online, an authorized administrator can search the mailbox with the documented EAC or PowerShell recovery workflow. If the item is still within deleted-item retention, the administrator can target the recoverable content even when the user interface no longer lists it. If a person purged the message or an automated policy removed it, the administrator must determine whether Single Item Recovery or a hold placed a copy in Purges, Versions or DiscoveryHolds.

For a compliance or legal request, use the Microsoft Purview eDiscovery or compliance-search process rather than treating a user restore as an evidence export. Search criteria should be as narrow as the facts allow, and the administrator should document the mailbox, query, dates, permissions and destination of any recovered copy.

Exchange Server workflow

Exchange Server has separate procedures and permissions. Microsoft documents Search-Mailbox for searching one mailbox and eDiscovery or compliance search for broader investigations. The administrator should first inspect the mailbox or database retention configuration and verify whether Single Item Recovery was enabled; it is disabled by default for newly created Exchange Server mailboxes. A database-level 14-day default may have been overridden for this mailbox or database.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Do not apply Exchange Online assumptions to an on-premises server. The available commands, administrative roles, versions and hold implementation depend on the Exchange Server deployment. Use the procedure documented for that server version and record every search and restore action.

Rank #4
Sale
SIMMAX 32GB Memory Stick USB 2.0 Flash Drives Swivel Thumb Drive Pen Drive (32GB Purple)
  • GOOD VALUE PACKAGE - 1 Pack 32GB Memory Stick USB 2.0 Flash Drives with great cost performance and high quality.
  • BIG CAPACITY - The available capacity: 29.10GB-29.8GB, You can save the data of movies, music, photos, designs, programs, manuals, handouts in a high speed.Good performance in digital data storing, transferring and sharing with families, friends, workmates, clients and machines.
  • EASY TO USE & PLUG AND WORK - Support windows 7 / 8 / 10 / Vista / XP / 2000 / ME / NT Linux and Mac OS, Compatible with USB2.0 and below.
  • TWISTTURN DESIGN & EASY CARRY - The metal clip rotates 360° round the ABS plastic body which with rubber oil skin feeling finish. The capless design can avoid lossing of cap, and providing efficient protection to the USB port.
  • WARRANTY & SUPPORT - SIMMAX logo is laser printed on the USB connector surface, our products are of good quality and we promise that any problem about the product within one year since you buy.

How Single Item Recovery and holds change the outcome

Single Item Recovery protects deleted and purged mailbox items for administrator recovery during the configured retention window. In Exchange Online, Microsoft states: “In Exchange Online, single item recovery is enabled by default when a new mailbox is created.” In Exchange Server, it is disabled by default when a mailbox is created, so an administrator must verify its status rather than assume protection exists.

A hold changes the question from “Is it still in Deleted Items?” to “Does a preserved copy still exist in the mailbox’s compliance locations?” Litigation Hold, In-Place Hold, eDiscovery hold and a Microsoft 365 retention policy can preserve content after a user purge. The hold’s scope, retention configuration and expiry determine whether the copy remains recoverable.

Preservation is not the same as a normal user restore. The copy may be accessible only to authorized administrators through compliance tools, and restoring it to a user’s folder can alter the mailbox’s operational state. For investigations, search and export the preserved item according to your organization’s evidence procedure.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Decision guide for common recovery situations

Your situation Next action Likely result
The message is in Deleted Items Move it to the desired folder Immediate user recovery
Deleted Items is empty, but deletion was recent Open Recover Deleted Items and search Possible recovery from Deletions while retention remains
Shift+Delete was used Go directly to Recover Deleted Items Possible recovery without a Deleted Items copy
Recover Deleted Items is empty and the mailbox has a hold or Single Item Recovery Ask an authorized administrator to search recoverable and compliance locations Possible administrator recovery
No hold, retention has expired, or the item was purged beyond all configured limits Check whether an independently managed backup exists Exchange’s standard recovery path cannot restore the item
You need an entire mailbox rolled back to an earlier date Contact your organization’s backup or compliance administrator Exchange Online does not provide arbitrary point-in-time mailbox-item restoration as a standard service feature
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Why a recovery attempt can fail

The wrong mailbox or folder was searched

Verify the SMTP address, shared-mailbox context, account profile and date range. A message delivered to a rule-created folder, an archive mailbox or another recipient will not appear in the expected Deleted Items list.

Best Value
IMEASON Swivel Design 16GB USB Flash Drive with Keychain, USB 2.0 Portable Thumb Drive Memory Stick, FAT32 Format Flashdrive for Data Storage, Photos, Music, Files (Black, 16 GB)
  • 【16GB Flash Drive】USB flash drives with 16GB capacity, meet your needs of daily use on work, school, home and travelling for photos, music, videos, files storage and transfer. IMEASON thumb drives can be used to store different files, easy to data backup.
  • 【Metal Swivel Cap Design】USB thumb drive is metal swivel cover provides extra protection for the usb thumbdrive connector, no usb drive cap to lose; keychain design makes it easier to carry without worrying lose it.
  • 【Wide Compatibility】USB drive supports Windows 7/8/10/11 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, also Supports USB 2.0 and 1.1 ports. USB Stick support TV, desktop, notebook computer, car, audio and other device. The USB Memory Stick is your great data storage and transfer companion with traveling and working.
  • 【Easy to use】usb memory stick is plug and play without any software installation. Just simply plug the Flashdrive into the port of your USB-compatible devices such as computer, laptop to start data storage or transmission.
  • 【What You Get】16 GB USB Flash Drive Thumb Drive, The default format of the usb storage flash drive is FAT32.

The retention clock expired

Exchange Online’s 14-day default begins after removal from Deleted Items, and the tenant may have configured a different value up to 30 days. Exchange Server follows its mailbox or database setting. Once the applicable period ends without a preserved copy, the user dialog cannot bring the message back.

Single Item Recovery was not enabled

This is especially important on Exchange Server, where new mailboxes have Single Item Recovery disabled by default. A later enablement does not recreate content that was already purged.

A hold exists, but the search used the wrong scope

Compliance copies may be in Purges, Versions or DiscoveryHolds and may require eDiscovery permissions. Ask the administrator to verify the hold, query the correct mailbox and use the documented compliance workflow rather than relying only on Outlook.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The request is for a point-in-time rollback

Exchange Online does not offer arbitrary point-in-time restoration of individual mailbox items as a standard service feature. A separate backup system may have its own recovery capabilities, but that is outside the Microsoft recovery procedure described here.

Prevention and administration checklist

  • Set a deleted-item retention value that matches the organization’s recovery requirements; in Exchange Online, the configurable ceiling is 30 days.
  • Confirm Single Item Recovery status for every platform, especially newly created Exchange Server mailboxes.
  • Document which Litigation Hold, In-Place Hold, eDiscovery hold and Microsoft 365 retention policies apply to each mailbox class.
  • Give help-desk staff a written first response: check Deleted Items, then Recover Deleted Items, then escalate promptly.
  • Limit administrative permissions and record searches, exports and restores for compliance-sensitive messages.
  • Maintain an independently managed backup strategy when business requirements exceed Exchange Online’s retention and recovery scope.

If Outlook on Windows is crashing or local Windows components are interfering with the desktop app, Outbyte PC Repair is an optional shortcut that can address more than 100 common Windows issues, clean temporary and cache files, check settings and missing updates, and provide an app-crash log. It runs on Windows 11, 10, 8 and 7; its free trial is offered by category for at least two days before a subscription. It complements an antivirus rather than replacing one, results vary, and no tool repairs every crash or replaces Exchange administrator recovery.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

eDiscoveryemail recoveryExchangeExchange ServerMicrosoft 365Outlook

Leave a reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.