Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We have a customer that is considering using S/MIME in Outlook 2010 (with Exchange 2010 although I don't think that matters) for all internal e-mail communications.

If they do this, then is the recovery scenario for "I need to get into another user's mail" the following?

  1. use recovery agent to get private key from the certificate authority

  2. import cert with target user's cert into recovery agent cert store

  3. grant recovery agent full control over target mailbox

  4. Open target mailbox as recovery agent and find information or whatever

If that's not right, what would the process be?

(Note: I'm not really looking for "don't use that process" as an answer right now - there are other alternatives already being discussed - this is more just around understanding this very specific case.)


share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.