A Forum reader recently asked:
I need to restore a user so that we can do an investigation about some allegations, and I need to do so in a way that the user doesn’t know about the initial investigation (it is feared that the person will start deleting all messages).
How can I get access to restored content without having to change person’s password on the production system? I do have a restore point set up.
And here’s the reply from Dave Parkes …
1. Restore the system somewhere else.
2. Use the standalone GWCheck program to clear the passwords on the restored system.
3. Use a client to connect directly to that restored area. For example: