Exchange Shell命令

Get-TransportServer | Get-MessageTrackingLog -Sender:[email?protected] -EventId send -Start "2017-08-07 08:38" -End "2017-08-07 08:45" | Select-Object Timestamp,ClientIp,ClientHostname,ServerIp,ServerHostname,connectorid,Source,EventId,{$.recipients},{$.RecipientStatus},TotalBytes,RecipientCount,MessageSubject,Sender | Export-Csv -Path d:exlog_sender_2017011301.csv -Encoding Unicode -NoTypeInformation
收邮件记录------

Get-TransportServer | Get-MessageTrackingLog -Recipients:[email?protected] -EventId send -Start 2016-12-01 | Select-Object Timestamp,Sender | Export-Csv -Path d:exlog_recipients_2017011301.csv -Encoding Unicode -NoTypeInformation

Get-Mailbox -Identity "590031i" | Ft Alias,Database
ExChange Shell API文档
https://docs.microsoft.com/en-us/powershell/module/exchange/mailbox-databases-and-servers/get-mailboxdatabase?view=exchange-ps
查看服务器集群的名字及版本信息
Get-ExchangeServer | Ft Name,ServerRole,Edition,AdminDisplayVersion -auto
获取DB列表及所在服务器信息
Get-MailboxDatabase | Format-List
查询MBX03_New DB所在的服务器信息
Get-MailboxDatabase -Identity MBX03_New | Format-List
查看某用户使用邮箱大小及所在DB情况
Get-Mailbox -Identity [email?protected] | Get-MailboxStatistics | select DisplayName,TotalItemSize,Database
查询队列使用情况
Get-Queue

查看邮箱使用容量

get-mailboxstatistics -identity 590031i | format-list

get-mailboxstatistics -identity 590031i | ft displayname,totalitemsize,lastlogontime
查看ExchangeServer版本

Get-exchangeserver | format-list name,edition,admindisplayversion

删除某用户某时间段内邮件内容

Search-Mailbox -Identity "[email?protected]" -SearchQuery "Received:01/01/2017..07/20/2017" -DeleteContent

1，按邮件主题删除特定用户特定邮件：
以下示例为删除用户sky里的邮件主题含有‘Product Discussion‘关键字的邮件。
Search-Mailbox -Identity "sky" -SearchQuery "Subject:‘Product Discussion‘" -DeleteContent

2，按发信人地址删除特定用户特定邮件：br/>?
以下示例为删除用户sky里的发信人为‘[email?protected]‘的邮件。
?
Search-Mailbox -Identity "sky" -SearchQuery "From:‘[email?protected]‘" -DeleteContent
删除来自某一邮箱的某一时间段的邮件；
Search-Mailbox -Identity "sky" -SearchQuery "From:‘[email?protected]‘ and Received:01/01/2001..11/01/2011" -DeleteContent

按内容关键字删除特定用户特定邮件：
?
以下示例为删除用户sky里的邮件内容里含有为Modify my alert settings的邮件。（因为sharepoint里更换发信人只是最近一个月的事，以前的sharepoint邮件要进行更仔细的甄别。）
?
Search-Mailbox -Identity "sky" -SearchQuery "body:‘Modify my alert settings‘" -DeleteContent
? ??? ??? ?? (from ?? [email?protected]? ??)
-?????? Get-Mailbox -Resultsize Unlimited | Search-Mailbox -SearchQuery ‘from:"[email?protected]"‘ -DeleteContent
1.???? ?? ?? ? ??? ??（电子邮件删除前用户查询）
Get-Mailbox -ResultSize unlimited | Search-Mailbox -SearchQuery ‘Subject:"离职感言"‘ -EstimateResultOnly | Measure-Object
?
2.???? ?? ??（删除邮件）
Get-Mailbox -ResultSize unlimited | Search-Mailbox -SearchQuery ‘ Subject:"离职感言"‘ -DeleteContent?
?
3.???? ?? ? ??? ???（删除后用户查询）

Get-Mailbox -ResultSize unlimited | Search-Mailbox -SearchQuery ‘ Subject:"离职感言"‘ -EstimateResultOnly | Measure-Object