Forensic examiners can recover the Exchange database needed to preserve the email, and they can then extract any end user’s email for examination. They can also create a local version usable with Outlook or for reloading to the new Exchange server.