Rogue backup mode script/trigger

April 22, 2015, 4:02 am

≫ Next: Permissions requirements for the VSA changed at some point?

≪ Previous: Exclude one Folder from archiving in Symantec EV 11.0

$

0

0

I need a solution

Hi everyone, I've a bit of a head scratcher. A system I'm working on is going into backup mode and I can't tell how

Basically if I test backup mode scripts triggered from (local) windows Task Scheduler, and set an archiving task to run, everything works perfectly. If I change the schedules and leave it to run over night, the system doesn't come out of backup mode and the archiving task can't run. So far I've removed the windows scheduled tasks, removed the batch scripts from the location they were being run from, removed anybody listed in the Storage Admin role in authorization manager and as of tonight, the Power Admin group has had the manage backup mode and index backup privileges removed from the Power admin role

I guess it remains to be seen what happens tonight, but just in case it fails again, and given everything I've done locally, is there anyway I can monitor possible external (rogue) scripts being aimed at this server. How can I surface this?

---

Permissions requirements for the VSA changed at some point?

April 22, 2015, 6:17 am

≫ Next: Enterprise Vault Add-in in VDI Environment

≪ Previous: Rogue backup mode script/trigger

$

0

0

I need a solution

According to this article http://www.symantec.com/docs/TECH76700:

The VSA’s requirements in Exchange

• The VSA requires full access to all mailboxes and public folders.

The powershell script SETEvExchangePermissions sets these rights, only it does not include send as permissions, right?

# to allow full access to mailboxes and public folders
#
function SetExchangeStorePermissions
{ param([string]$DistinguishedName=$null)
   
    $ExtendedPermissions = @("Receive-As", "ms-Exch-Store-Visible", "ms-Exch-Store-Admin", "ms-Exch-Store-Create-Named-Properties")

Troubleshooting restoring problem and found this article: http://www.symantec.com/docs/TECH68853

Though this article is only focused on the search.asp restoration - the problem is also in outlook - ev tool restoration functioning as well.

In that article it states:

Cause

In order for Enterprise Vault to be able to restore items to a users mailbox using the integrated search ( search.asp ) the Enterprise Vault service account must have "send as" and "receive as" permissions on the target mailbox. The user also needs to be enabled for Enterprise Vault. Per the Enterprise Vault Administrators Guide, the Enterprise Vault Service Account should have these rights for all mailboxes being archived by Enterprise Vault.

Where (what page?) in any installation or other guide is it said that to be able to restore items it needs the send as permissions to regular users mailboxes??

1429768536

Enterprise Vault Add-in in VDI Environment

April 22, 2015, 10:56 pm

≫ Next: EV Collect and migrate to Azure

≪ Previous: Permissions requirements for the VSA changed at some point?

$

0

0

I need a solution

Hello,

We are currently deploying VDI solution where for our users. I have built Windows 8.1 Ent template with all the required softwares installed including Outlook 2013 and the Symantec Add-in plugin.

I have noticed when I launch the outlook for the first time, it asks to process the enable wizard in order to enable the Enterprise Vault Add-in. Following the wizard for Persistant Desktop users works fine as this wizard has to run once only, but for the users who has Pooled Desktops it's quite challange. Everyday they have to run the wizard as their desktops are not persistant.

Is there a way to auto launch the add-in without prompting the user to follow this wizard everytime?

Is there any other recommendations when it comes to Enterprise Vault for Exchange 2007 and performance for VDI envrionment when users tries to fetch an archived items?

Highly appreciate your input.

Regards,

EV Collect and migrate to Azure

April 23, 2015, 1:40 am

≫ Next: Ungrouped Server Index

≪ Previous: Enterprise Vault Add-in in VDI Environment

$

0

0

I need a solution

Hi

Is there an option to use MS Azure as a tertiary storage location for EV collections?

many thanks

Ungrouped Server Index

April 23, 2015, 3:47 am

≫ Next: Unable to open archived items in a shared mailbox.

≪ Previous: EV Collect and migrate to Azure

$

0

0

I need a solution

Hello

I am having a problem with indexing and the amount of disk i/o it generates on the back-end storage.

I have a system with seven exchange servers spread across 2 archive boxes (we have a seperate journal and File archiving servers)

we orginally only had one archive box but due to the processor usage being high constantly, we needed to split the archive jobs across onto a second server. This resolved the processor issue. however althougth the jobs were moved the indexing seemed to remain on the orginal server. is there a way i can cluster the two archive servers to properly split the index tasks or move the archives for the jobs i moved to the second box to be indexed there and not on the first box ?

Unable to open archived items in a shared mailbox.

April 23, 2015, 7:58 am

≫ Next: EV-IMAP Provisioning

≪ Previous: Ungrouped Server Index

$

0

0

I need a solution

Dear Experts, a Weird problem:

I can open archived items in a number of shared mailboxes without any trouble at all.

However in one shared mailbox, the following process occurs.

I click on the item shortcut, this is followed by a dialogue box with a green progress bar and 'Enterprise Vault is retrieving your item.' and 'Your password may be required...'

A further 'Windows Security' dialogue box opens listing my domain\userid and requiring a password to be entered.

If I enter the password, the 'Windows Security' panel closes and reopens again with the same credentials (my credentials).

If I respond with a 'Cancel' instead of the password, I receive the content of the shortcut item, with a dark grey band containing the legend "This item was archived by Enterprise Vault on 14 June 2014 14:47:38" and "There was an error loading this item - some functionality may not be available".

If I click on View the original item, which is displayed in the body of the shortcut, as a link, I am again prompted with my domain\userid credentials.

I enter my password and receive the disappointing result of a new browser panel that contains the helpful legend 'Symantec Enterprise Vault - Error' on a yellow background with, on a new line: 'You do not have access to this vault'.

I have checked the access control rights for the shared mailbox - they appear to be correct. I checked the access control rights for the archive in Enterprise Vault via the VAC and they do not appear to be incorrect. [There are some users/ groups with automatically set access rights that I can neither change nor delete. I do not know how to use the oft referred to "zap process".I'm sure that it is simple if you've seen it used, but I've never seen it used !!]

This ocurrs for any archived item in this particular shared mailbox. I can still open archived items in other shared mailboxes.

I am clearly missing something obvious in this process. a touch of not seeing the wood for the trees, possibly.

Please put me on the path to joy and success ?

EV-IMAP Provisioning

April 23, 2015, 12:06 pm

≫ Next: EV FSA - missing files and folders

≪ Previous: Unable to open archived items in a shared mailbox.

$

0

0

I need a solution

My EV CAS provisioning has been working for several months.  We've been adding users periodically and working great up until this week.  Now I am getting the following error in the CAS provisioning report.

Error: There was a problem processing this section. Enterprise Vault top level Stored Procedure : dbo.MailConnectEnableExchangeUserInProvisioningGroup, Error Procedure: CreateIndexingSubTasks, Line 221, Error 50000, Level 16, State 1, Message: There were no targets matching the criteria passed in

Additionally, I ran dtrace on the provisioning process and it reports exactly the same error and no other information.

When I run the task in the report mode it functions normally, the report showing allt he information.  When I run it in the normal mode, it stops with the error shown and doesn't complete the report.

I have rebuilt the Provisioning task, run it on a different computer pointed to a different DC, all with identical results.

Thoughts?

EV FSA - missing files and folders

April 24, 2015, 12:20 am

≫ Next: Event 3419 and Disconnected Mailboxes

≪ Previous: EV-IMAP Provisioning

$

0

0

I need a solution

Hello everybody,

I have one problem regarding our file cluster environment, or to be precise, with two important folders.

We have implemented EV10 with which we make archiving whole file server.

It working fine, and all shares and files are archived with EV, leaving placeholders on original place.

But, few days ago, my colleauge wanted to exclude two folders from archiving.

He opens EV console, and under Directory -> Targets -> File servers -> Server -> disk he right click on folder that he want to exclude, to go to properties and uncheck two checkbox under Settings:

1. Archive this folder

2. Archive subfolders

From that point, EV was start to delete all entries in its database, and now, we have placeholders on file sistem for that folders, but with missing destination archives.

We have backup of EV server with all dedicated vault stores and all databases, but, I don't know, is there any way that we get to those folders without restoring whole EV server?

Maybe, with FSAUtility tool or with something.

I attached jpg where it can be seen, what checkboxes he unchecked.

Any help would be appreciated...

Thank you in advance

• Capture.JPG

---

Event 3419 and Disconnected Mailboxes

April 24, 2015, 12:41 am

≫ Next: EV backup/Store designs

≪ Previous: EV FSA - missing files and folders

$

0

0

I need a solution

My EV10.4 server throws the below event every minute toward the end of my archive window:

Could not access Exchange Server. The dispenser will queue the current item and sleep for 60 seconds. 

Task: Exchange Mailbox Archiving Task for EXMB-NA1-01 

For more information, see Help and Support Center at http://entced.symantec.com/entt?product=ev&language=english&version=10.0.4.0&build=10.0.4.1189&error=V-437-3419

I checked the message queue and it contains disconnected mailboxes. The administration teams are deleting leaver mailboxes during the archive run and indirectly causing the events to be logged.

Our leaver process is to archive full content (leaver archive policy) and then delete the mailbox. It is never disabled in EV.

My question is what can I do in this situation?
I purge the queue as its never going to archive any content but no event 3454 is logged and the archiving reports are not generated.

I have given the administration teams the archive and provisioning schedule details and asked them to only delete mailboxes before provisioning.

Any other thoughts or suggestions?

EV backup/Store designs

April 22, 2015, 1:52 pm

≫ Next: EV possible to list FSA archived files with some sql query?

≪ Previous: Event 3419 and Disconnected Mailboxes

$

0

0

I need a solution

Server01 With 1 Vault Store consisting of 6 Partitions. 5 out of the 6 are closed partitions. All 5 Partitions are about 1 TB in size. We were backing up EV using Backup Exec 2010 without the EV agent. What we would do is set up a backup job to run the pre script which sets the EV server in backup mode and then a post script to clear it once finished (SQL DB is being backed up using sql backup at the same time the backup exec job is running).
 
So with this set up we do an incremental Mon-thur (To tape) Only on the active partition and on Friday we do a Full Job to tape only on the active partition.
 
At the end of the month we run a full backup starting on Friday against all Partitions (they are all running at the same time to quickly complete the job before Monday). The first job runs the pre script and on Monday morning we have a post script on Server01 that executes using the task scheduler to clear the backup mode.

This was working fine for us until we rolled out Backup Exec 2014.
 
In Backup exec 2014 we could not just backup the files in the partition as a regular windows backup. Somehow it is aware that the Server is an EV server (probably because of our licenses key) and now we can not run concurrent full backup jobs at the end of the month. why?
 
1. backup Exec 2014 automatically sets the EV server in backup mode on every job. As well as clears backup mode at the end of the job.
2. This is a problem because if we put all the partitions in one backup job, each partition is being backed up in sequence. this is a problem because each partition is 1TB and waiting for each partition to finish to tape will take up the entire weekend and into the work week.
3. If we have one full job per partition; each job will put the EV server in backup mode and if any job finishes while another job is still running it will clear it.
 
So I guess my question(s) is, How can we complete our backup job over the weekend using tape? do companies still use tape or do they just now go to disk?
 
Also should we start thinking about moving our archived data to another vault store on breaking down our data for faster backups?
 
How do most companies backup their EV data?

EV possible to list FSA archived files with some sql query?

April 24, 2015, 2:48 am

≫ Next: EVPM to remove user from manually add on large amount of archives

≪ Previous: EV backup/Store designs

$

0

0

I need a solution

Hi

I have FSA archiving point without indexing ('Defer Indexin' tap is on) and I need to produce a list of files that are in the archive. Is this possible with some SQL query or would I need some expensive third party tool to do it?

Sani B.

EVPM to remove user from manually add on large amount of archives

April 27, 2015, 12:45 am

≫ Next: Move from Exchange 2010 archive to Enterprise Vault 11.0.1 archive

≪ Previous: EV possible to list FSA archived files with some sql query?

$

0

0

I need a solution

Hi,

We have a test user for the EV that during the last years was added with permissions to many vaults.

as a result in archive explorer we are scrolling endlessly.

 

I want to run an EVPM that will run on all site archives and in every archive that this user have a manually added permission - it will remove it.

 

Can this be done?

Move from Exchange 2010 archive to Enterprise Vault 11.0.1 archive

April 27, 2015, 2:14 am

≫ Next: EV 11.01 hardware migration

≪ Previous: EVPM to remove user from manually add on large amount of archives

$

0

0

I need a solution

Hi All

I've installed and configured Enterprise Vault 11.0.1 and all good for all users that have no Exchange Archive mailboxes. But then, for the users that DO have Exchange Archive configured - how do we migrate emails from archive mailbox into Enterprise Vault?

I saw in some other posts that this was not available in version 10, but any changes in 11.0.1 ?

EV 11.01 hardware migration

April 27, 2015, 6:13 am

≫ Next: Enterprise Vault for Sharepoint

≪ Previous: Move from Exchange 2010 archive to Enterprise Vault 11.0.1 archive

$

0

0

I need a solution

hi,

i want to migrate 2008 R2 EV 11.01   to new 2012 server HW  .(i will install same version of EV 11.01 in new server)

- can i use hardware migration wizard?

- manually migration pdf is old, are there any update for EV11? (new storage queue   .. etc..)

https://support.symantec.com/en_US/article.TECH141...

thanks...

Enterprise Vault for Sharepoint

April 27, 2015, 6:42 am

≫ Next: Attempting to enable Enterprise Vault for another site

≪ Previous: EV 11.01 hardware migration

$

0

0

I need a solution

Hello,

Could you please tell me if in EV for Sharepoint, when you archive the document with full text metadata and get a shotcut, the new versions get reindexed automaticaly?

That is:

- Document is archived and shotcut placed

- Full text Metadata is stored in EV

- New document version is created. Document is retrived from EV and placed in Sharepoint for editing.

- All new metadata including full text is automatically added in EV when new version is archived?

- We see full text of old version and full text of new version?

Thanks a lot!

Kind regards,

Nuno

---

Attempting to enable Enterprise Vault for another site

April 27, 2015, 9:39 am

≫ Next: role back steps EV from 9.0.5 to 9.0.2

≪ Previous: Enterprise Vault for Sharepoint

$

0

0

I need a solution

I'm currently helping out or messaging department on a huge load of tickets and a lot have to do with a failed implementation of Enterprise Virtual Vault.  One site I'm working with would like for me to implement virtual vault for their site.  I don't have administrative rights to the EV console yet... (still working on getting that.)  But someone else in the message department added their site (targets --> exchange --> our domain name --> provisioning group --> "the new group we just created in AD".

I then added the user that wanted to be added to the vault in AD to the same security group.

The user has the add-in installed in Outlook.  He's rebooted, but still doesn't have the Vault enabled in Outlook.  Is there something I'm missing to enable it for the user?

role back steps EV from 9.0.5 to 9.0.2

April 27, 2015, 9:31 pm

≫ Next: Enterprice Vault 10.0.3 support for Exchange 2013 SP1

≪ Previous: Attempting to enable Enterprise Vault for another site

$

0

0

I need a solution

we are planing to upgrade from EV 9.0.2 to EV 9.0.5 , we would like to role back steps

Enterprice Vault 10.0.3 support for Exchange 2013 SP1

April 27, 2015, 8:37 pm

≫ Next: EVIndexing issue & Call with Support

≪ Previous: role back steps EV from 9.0.5 to 9.0.2

$

0

0

I need a solution

one of our customer got Symantec Enterprise vault 10.0.3 version using for Exchange 2010 SP2 Archival, now they plan to upgrade to Exchange 2013 SP1.

Is the Symantec EV 10.0.3 supported for Exchange 2013 SP1?

Symantec EV 10.0.3 upgrade to EV 10.0.4 is free upgrade?

EVIndexing issue & Call with Support

April 28, 2015, 2:21 am

≫ Next: Exchange 2007 to 2013 migration clean up

≪ Previous: Enterprice Vault 10.0.3 support for Exchange 2013 SP1

$

0

0

I need a solution

Hi,

Since upgrading to EV 11.0.1 we've had to reinstall the Index redistributable 4 times in 2 months. Clearly indicating something wrong.

Having just got off the phone with Support i wanted to sanity check what ive been told as im not convinced.

We have been using EV on a VM for 7 years and its been bullet proof really, we ran EV10.0.1 - 10.0.4 for 2 years on a 4x vCPU 8G RAM and it was fine.

I understand with EV11.0.1 its brought about some great new features and extra bits and therfore more resource intensive but he has told me to give the VM 32 cores and 32G RAM, move the pagefile to a seperate disk also.

Do any of you see any value in this? I do monitor the CPU and RAM daily and the only time it looks stressed is during the mailbox run in the evening, which i would expect.

We have a compellent SAN thats tiered storage (SSD\FC\Iscsi), so i cant see how moving the pagefile is going to have any improvements, 32 cores and then double the ram to 32G i feel like ive been fobbed off.

Anyone got any opinions?

Regards

Exchange 2007 to 2013 migration clean up

April 28, 2015, 9:40 am

≫ Next: EV for Exchange - Sizes of Archives

≪ Previous: EVIndexing issue & Call with Support

$

0

0

I need a solution

We have just recently completed our email migration from Exchange 2007 to Exchange 2013. I would like to know how to clean up Enterprise Vault without removing something that I might need. We are unning EV 11.0.1. Guessing I would think that I would removed the Ex2007 server as a target. Remove the Archiving Task for the Ex2007 server (does this remove the msmq's). I'm not sure of what else should be done.