Replay Inbound Messages

Document created by user.oxriBaJeN4 Employee on Aug 18, 2016Last modified by user.oxriBaJeN4 Employee on Jul 24, 2017
Version 2Show Document
  • View in full screen mode

Replaying messages allows administrators to reconstitute mailbox content from Mimecast into their Exchange environment (e.g. due to corruption or data loss). Replaying is a Microsoft Exchange feature that results in correctly formatted email files being submitted for delivery, when copied into the correct folder.




  • Ensure the messages you are replaying are inbound messages to your internal users. Replaying will reprocess and redeliver the selected messages, so any outbound messages will be redelivered to their intended recipient/s.


Replaying Messages


To replay messages requires tasks to be performed in Mimecast, and on your Exchange Server.


Exporting Messages from Mimecast


You'll need to export the emails from Mimecast:

  1. Ensure a Blocked Senders Policy has been configured to prevent open relay, with the From and To variables set to "External".
  2. Create a Saved Search for the relevant emails. These should be Inbound emails only.
  3. Export the data to a zipped file containing the individual EML files (default format).


Move EML Files to the Pickup folder (Exchange 2007)


  1. Locate the Pickup folder on your Exchange server. By default, this is stored in the C:\Program Files\Microsoft\Exchange Server\TransportRoles directory, and may contain other folders (e.g. Shared and Replay).
  2. You can find the location of the Pickup folder by using the Exchange Management Shell.
    1. Open the Shell.
    2. Type the Get-transportserver <servername> | List pickup* command.


Moving EML Files to the Pickup Folder (Exchange 2003)


  1. Locate the Pickup folder on your Exchange server. By default, this is stored in the C:\Program Files\Exchsrvr\Mailroot\vsi 1 directory, and may contain other folders (e.g Queue and Badmail). 
    If the Pickup folder doesn't exist, complete the steps in the "Creating the Pickup Folder" section below.
  2. Extract the EML files from the export to a folder of your choice.
  3. Open the folder that contains your exported EML files and Pickup folder so the two windows are displayed side by side.
  4. Select groups of EML files from your Export folder and move them (drag and drop) to the Pickup folder. Once these emails have been moved into the Pickup Folder, Microsoft Exchange will reprocess and redeliver these emails to the relevant recipients.


Creating the Pickup Folder


The Pickup folder can be created by using the ADSI Edit tool provided by Microsoft in the Windows Resource Kits.

If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. This may require you to reinstall Microsoft Windows 2000 Server, Microsoft Windows Server 2003, Microsoft Exchange 2000 Server, Microsoft Exchange Server 2003, or both Windows and Exchange. Microsoft cannot guarantee that problems caused by incorrectly modifying Active Directory object attributes can be solved.

  1. Install the Microsoft Windows 2000 Resource Kit on your Exchange 2003 computer or on a client computer.
  2. Enable diagnostics logging of Directory Service to Metabase replication. To do this:
    1. Start the Exchange System Manager.
    2. Ensure that you can view administrative groups in Exchange System Manager. To do this:
      1. Right click on your organization.
      2. Click on the Properties menu item.
      3. Ensure the Display Administrative Groups option is selected.
      4. Expand the Administrative Groups | Servers.
      5. Right click on the Exchange Server.
      6. Click on the Properties menu item.
      7. Click on the Diagnostics Logging tab.
      8. Select the MSExchangeMU item under the Services list.
      9. Click Maximum under Logging Level (by default the Logging Level is none).
      10. Click on the OK button. 
    3. Stop all Exchange / Internet Information Service (IIS) services on the Exchange 2003 computer.
    4. Create a backup of the Program Files\Exchsrvr\Mailroot folder.
    5. Move the following folders from C:\Program Files\Exchsrvr\Mailroot to the new location:
      • VSI 1
      • All VSI 1 subfolders
      • The contents of the VSI 1 folder. Do not move the Mailroot folder itself.
    6. Register the Adsiedit.dll file. To do this:
      1. Click on the Start button.
      2. Click on the Run menu item.
      3. Type regsvr32 “drive:\program files\support tools\adsiedit.dll.
      4. Click OK.
    7. Open a new Microsoft Management Console (MMC). To do this:
      1. Click on the Start button.
      2. Click on the Run menu item.
      3. Type MMC.
      4. Click on the OK button.
    8. Add an ADSI Edit Snap In. To do this:
      1. Click on the Add/Remove Snap-in menu item.
      2. Click on the Add button.
      3. Click on the ADSI Edit option in the console tree.
      4. Click on the Action | Connect To menu item.
      5. Click on the Naming Context menu item.
      6. Click on the Configuration Container in the Naming Context list.
      7. Click on the OK button. 
  3. Locate the following Microsoft Active Directory directory in the configuration container:

    CN=Configuration\ CN=Services \CN=Microsoft Exchange \CN=YourOrganizationName\ CN=Administrative Groups\CN=YourAdminGroupName\ CN=Servers \CN=YourServerName \CN=Protocols\CN=SMTP \CN=1

  4. Right click on the CN=1 container.
  5. Click on the Properties menu item.
  6. Click on the Both option in the "Select Which Properties To View" list.
  7. Edit the attributes for the following properties, ensuring you click Set after you edit each one:
    • msExchSmtpBadMailDirectory
    • msExchSmtpPickupDirectory
    • msExchSmtpQueueDirectory
  8. Either wait for Active Directory replication to replicate these changes to the:
    • Rest of the forest.
    • Domain controllers and global catalog servers that your Exchange 2003 computer references.
  9. Start only the Exchange System Attendant service. This copies the paths that you have changed from Active Directory to the Metabase. If you've enabled Directory Service to Metabase diagnostics logging as described in step 2, an event that indicates that the paths in the metabase have updated successfully is recorded three times in the event log. (Event ID: 1005, Source: MSExchangeMU, Category: General). This event is recorded shortly after initialization. 
  10. Restart the Exchange 2003 computer.