Get All AIP encrypted files - SharePoint Online

One of the recent project merger and acquisition.  Technology - M365 tenant to Tenant migration Areas of consolidation 1. Mailboxes  2. SharePoint online data 3. OneDrive for Business data 4. Teams data migration 5. Security and Compliance Migration  Area of concern from security and compliance side was the encrypted files within EXO, SPO, Teams, ODB. Issue with encrypted data migration - end users will not be able to access the documents once the Source tenant is decommissioned.   Solution available -  Ask end users to unencrypt the data before migration  Alternet Solution - 1. Decrypt the files, mails using eDiscovery - This will give us output in PST format will is available for offline access, but the data in source will still be encrypted.  Decryption in eDiscovery - Microsoft Purview (compliance) | Microsoft Docs   2. Use Get-AIPfileLabel and Get-AIPFileLabel but in order to use this you must be aware of all the files paths.  Challenges -  1. We do not want end user intervention

Delete corrupt rules using MFCMAPI

Delete corrupt rules using MFCMAPI


Following steps to be followed if you need to delete any corrupt/hidden rules using MFCMAPI.

• Export a backup of all Inbox rules from Outlook:

                                1. In Outlook 2007, please click the Tools > Rules & Alerts.
                                    In Outlook 2010 and 2013, please click the Rules > Manage Rules & Alerts in the Move group on the Home tab

                                2. Click the Options on the E-mail Rules tab.

                                3. Now the Options dialog box comes out, click Export rules.

                                4. And then in the Save Exported Rules as dialog box, open a folder to save the exported file firstly; secondly enter a name for the exported file in the File name: box, and at last click the Save button.

                                5. You can also refer to: https://support.office.com/en-au/article/Import-or-export-a-set-of-rules-91e357da-3026-4fb6-8b0e-5e7c8a0fbf5b


• Turn off the cached mode for Outlook.

                                1. Click the File tab.
               
                                2. Click Account Settings, and then click Account Settings.

                                3. On the E-mail tab, click the Exchange account, and then click Change.
               
                                4. Under Microsoft Exchange server, select or clear the Use Cached Exchange Mode check box.

                                5. Exit and then restart Microsoft Outlook.


• Delete all the rules using MFCMAPI.
                                1. Download the 32-bit or 64-bit version of MAPI tool as per the Outlook version.

                                                -> http://mfcmapi.codeplex.com/

                                2. Open the folder to which you extracted MFCMapi, double-click mfcmapi, and then click OK.
               
                                3. On the Session menu, click Logon and Display Store Table.

                                4. If you are prompted to select a profile, click the profile name in the Profile Name list, and then click OK.
               
                                5. Double-click the mailbox that contains the inbox rules that you want to delete.

                                6. Expand Root Container, and then expand Top of information Store.
                                Note: Outlook should be in Online mode to use MFCMAPI. If you see IPM_SUBTREE instead of Top of information Store, Outlook Cache mode is enabled. Disable Outlook Cache mode before you use MFCMapi.

                                7. Right-click Inbox, and then click Open Associated Contents Table.
                                The Open Associated Contents Table contains the hidden messages of the Inbox.

                                8. In the Inbox window, locate and then click the items that have the following message class, and then click Delete.
                                                a. IPM.Rule.Message
                                                b. IPM.Note.Rules.OofTemplate.Microsoft
                                                c. IPM.Note.Rules.ExternalOOFTemplate.Microsoft
                                                d. IPM.ExtendedRule.Message

                                9. Select Permanent delete passing DELETE_HARD_DELETE (unrecoverable) in the drop-down list, and then click OK.

                                10. Close the tool by logging off the session.

                                11. Additionally, this link can be referred: https://support.microsoft.com/en-us/kb/924297

• Launch the Outlook to test.
• Import the backed up rules (if any).


Links which can be referred:
  1. http://blogs.msdn.com/b/hkong/archive/2015/02/27/how-to-delete-corrupted-hidden-inbox-rules-from-a-mailbox-using-mfcmapi.aspx
  2. https://support.microsoft.com/en-us/kb/924297

Comments

Popular posts from this blog

Error - AttributeValueMustBeUnique in Azure AD connect sync

Error - QuarantinedAttributeValueMustBeUnique

Add members to office 365 Security Group Using PowerShell and CSV

Analyze Office 365 Message headers

Enforce MFA using CSV