Recover a deleted mailbox in hybrid

Recover a deleted mailbox in hybrid

Action Plan:

-First of all, we can recover a mailbox only if it was removed within last 30 days

-So, if the user was synced with active Directory then please first check under "Deleted users" on Admin Dashboard in Office 365 portal

-Also, if you see the same user listed under Deleted users and if you also see the same user under "Active Users" showing as Synced with active Directory

-then that would mean that the original account is under Deleted Users and the duplicate one which is showing as Synced with Active Directory under Active users

-Whenever a user is removed from the On-Premise Active Directory or is removed from the OU which is getting synced to Office 365, the same user on Office 365 moves to Deleted users and becomes in cloud

- In such scenarios, we restore the user from the Deleted users and then we do a Hard Match i.e. we get the Object Guid of the On-Premise account and we set the Immutable ID as the Object ID of the On-Premise AD account which makes the user back as " Synced with Active Directory"

-Now First of all open Azure PowerShell and if you do not have it on your machine, then download it from the below mentioned Link:

-Download Microsoft Online Services Sign-In Assistant for IT Professionals RTW from the link:  http://www.microsoft.com/en-us/download/details.aspx?id=41950

And download 32-bit or 64-bit as per your machine's specifications.

Then, ctrl+click on: Azure Active Directory Module for Windows PowerShell (64-bit version) if you have a 64-bit machine and Azure Active Directory Module for Windows PowerShell (32-bit version) if your machine is a 32-bit machine.

Then Save and Run.

-Once you have Azure PowerShell on your machine then, run it as Administrator:

and it enables us to make changes to the UPNs, passwords, Licenses, get the list of Deleted Users, Restore users etc.

-Then you would need to use Azure PowerShell and run:

Connect-MsolService

(gets you connected to Admin Dashboard)

Then,

$Session = New-PSSession -ConfigurationName Microsoft.exchange -ConnectionUri https://ps.outlook.com/powershell -Credential $Usercredential -Authentication Basic -Allowredirection

Import-PSSession $session

( The above two commands gets you connected to Exchange Admin Center and this way it enables you to run all the commands on the same PowerShell but it's possible only on Azure)

-Now, In order to restore users from Deleted Users in Office 365, use the below mentioned command:

Get-MsolUser -ReturnDeletedUsers | FL UserPrincipalName,ObjectID

(It gives you the list of the users which are listed under the Deleted users with their UserPrincipalName and ObjectID)

-Now in order to simply restore the user, we can use : Restore-MsolUser -ObjectId <GUID> -AutoReconcileProxyConflicts

In the box <GUID> type in the Object ID value which you would get after running Get-MsolUser -ReturnDeletedUsers | FL UserPrincipalName,ObjectID  

-If you want to restore the user with the new User Principal Name, then type: Restore-MsolUser -ObjectId <GUID> -AutoReconcileProxyConflicts -NewUserPrincipalName

Note: If you want to permanently delete the user from the Deleted users list, then it can be done only via PowerShell, please type: Remove-MsolUser -ObjectId <GUID> -RemoveFromRecycleBin -Force but do not use this command until and unless you are not sure of which one of the two accounts is original.

(We used the above mentioned command to remove the duplicate account which was mistakenly created and was showing as Synced with Active Directory)

-After removing the duplicate user, we wanted to have the correct account on Office 365 same as on your On-Premise Active Directory, so we then followed the below mentioned steps:

-Go to the On-Premise AD and open the command prompt as administrator and Run: ldifde -f export.txt -r "(Userprincipalname="Username of the user")" -l "objectGuid, userPrincipalName"

It gives us  the ObjectGuid value of the on-Premise account, copy the ObjectGuid value of the user from the exported file

-After that go to the office 365 PowerShell and set the immutable ID for the user on Office 365 to the same ObjectGuid value of the On-Premise user so as to do the Hard Match via PowerShell and use the below mentioned command:

Set-MsolUser -UserPrincipalName User@domain.com -ImmutableId "ObjectGUID value of the On-Premise user"

After that run the DirSync and it will change the user on Office 365 which was " in Cloud" to "Synced with Active Directory"

You'll have everything (user and it's mailbox) as it was earlier.