Archive for July, 2016

Find and Delete Email Messages

July 26, 2016

We had some malware sneak through our email security this morning.  Here’s how I deleted those messages.

Connect to the Compliance area of 365:

$UserCredential = Get-Credential

PS U:\> $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri -Credential $UserCredential -Authentication Basic -AllowRedirectio

Import-PSSession $Session

Find the messages and view the results (I was able to search by subject but there are other options):

 New-ComplianceSearch -Name “Remove Phishing Message” -ExchangeLocation all -ContentMatchQuery ‘subject:”TOP URGENT”‘

 Start-ComplianceSearch -Name “Remove Phishing Message”

Get-ComplianceSearch -identity “Remove Phishing Message” | fl

Delete the messages:

New-ComplianceSearchAction -SearchName “Remove Phishing Message” -Purge -PurgeType SoftDelete