How to recover deleted mailbox items in Office 365
Occasionally, Office 365 users will delete important mailbox items accidentally. Fortunately, in most cases such items can be recovered for a short period of time after their deletion. In this article we will discuss what happens when mailbox items are deleted and the circumstances required to successfully recover them.
What happens when mailbox items are deleted?
When Office 365 end users soft-delete (Ctrl+D) an item from their mailbox, it goes to the Deleted Items folder from which it can returned to the original location very easily. This procedure is simple as the end user has direct access to the Deleted Items folder.
The items stay in the Deleted Items folder until
they are automatically cleared or removed by the end user. In earlier
Office 365 versions, soft-deleted items remained in the Deleted Items
folder for 30 days. Now they remain there for period of time determined
by the Office 365 (Exchange Online) administrator. This duration can be
changed by updating the Messaging Records Management (MRM) policy.
How to update the MRM policy
Administrators can create a new MRM policy by editing the default one from the Exchange admin center. To edit the Default MRM policy, go to compliance management > retention policies, select the Default MRM Policy, and click the edit icon. Change the policy name, set the retention time and click Save.
Permanent deletion of items
An item is permanently deleted if any of the following occurs:
The end user deletes it from the Deleted Items folder
The end of the retention period is reached
The end user hard-deletes (Shift + Delete) the item from any folder
Permanently deleted items go to the Deletions folder (inside the invisible Recoverable Items
folder of the mailbox). Whilst the end user has no direct access to
this folder, the items can still be recovered for a short period after
How to recover permanently deleted items
To recover permanently deleted items, click Recover Deleted Items (in the Folder ribbon) in Outlook. A new window with the list of all the recoverable items appears. Select the required items and click Restore Selected Items. When recovered, the items go back to their original location.
By default, the permanently deleted items stay in the Deletions
folder for 14 days, and are recoverable for this period. Office 365
administrators can increase this duration to 30 days if they wish to do
For detailed information on changing the retention period for an
Exchange Online mailbox, see the links in the resources section at the
Can the deleted items be recovered from on-premises Exchange?
Deleted items from user mailboxes can be recovered using the inbuilt features of on-premises versions of Exchange. However, the process is slightly time-consuming and there are much easier ways to go about it. One such way is to deploying a specialized third-party exchange recovery solution . This solution displays the deleted items on the preview pane, highlighting them in red, and can be used to recover deleted items from multiple user mailboxes at once.