Quantcast
Channel: Symantec Connect - Archiving and eDiscovery - Discussions
Viewing all 4101 articles
Browse latest View live

EV for Exchange - Sizes of Archives

$
0
0
I need a solution

Hi,

I'm seeing some strange sizes in EV archives so thought I'd get other peoples opinoins on this. This solution was deployed recently and everything seemed fine (testing with IT users, as we all do). Moved onto the next department and here is what I was seeing.

User 1

Mailbox size in Exchange: 18.8GB

Post EV size in Exchange: 4.2GB

EV Archive Size: 46.7GB

So the archive, which should have a maximum size of 14.6GB increased by over 300%. Obviously I just thought the reporting was wrong so I logged this with Symantec. They ran a query in SQL and showed me that indeed the largest email in this archive was 250MB, with the list of ridiculously large emails going into the thousands. Hence the report was correct.

We then exported the largest email from the archive and the MSG file itself, with all the attachments, was actually only 13MB. The rest of the 'data' was made up of .DVSCC files.

Following this, we changed a registry setting to make EV convert Excel and Word files to TXT, rather than HTML. Another user was then archived, with the following results.

User 2

Mailbox size in Exchange: 10.2GB

Post EV size in Exchange: 2.3GB

EV Archive Size: 12.5GB

Better, we're now down to a 150% increase.

This is the current situation. For me this doesn't make sense, as I would expect an archiving solution to save on space, rather than triple it :) I guess my questions are.

1. Is what I'm seeing here normal?

2. What sizes are you seeing for archives in production?

The case is still open with Symantec and they're finding out if there is a way and to "clean up" users who have already been archived, reducing their archive size. I haven't yet told them about 'User 2'.

Environment

  • EV 11.0.1 (upgraded from 10.0.2 > 11.0 > 11.0.1), all users have only been archived since 11.0.1 has been installed.
  • Server 2008 R2
  • Exchange 2010

Appreciate any help.


Clent-Driven Migration and the PST Migrator Task

$
0
0
I need a solution

Hi,

We have an issue with a particular PST file and had to stop our PST Migrator task to stop unwanted imports. I then disabled all the users for client-driven migration via the VAC and confirmed it all via SQL too. However when I start the PST Migrator task imports of the unwanted files, and other files, start.

What is happening and is this expected?

I did read the below in the PST Migration guide, DOC6625.

On a schedule, or initiated manually with a “Run Now,” the PST Migrator Tasks scan the PST file’s SQL table looking for PST files that have the status of “Ready to migrate,” and the target Archive is managed by the Storage Service on the same Enterprise Vault server as the PST Migrator Task

Anyone else experienced anything like this.

Should I delete or set all the existing entries to 'Do Not Migrate'.

Any help would be appreciated. Thanks.

Setup PST Locate, Collect and Migrate Tasks

$
0
0
I need a solution

Hi,

I'm looking for some practical tips on setting up the Setup PST Locate, Collect and Migrate tasks. I've read the guides and don;t quite understand how it all works.

Can anyone summarise an example setup and what should happen at each stage?

Thanks

Give EV8 user new archive and deny access to old one - Zap didn't work

$
0
0
I need a solution

Hello,

First time poster so please be gentle.

I have a request to remove access for 4 users to their current archive and assign them new archives, this is to do with a change in their job roles.

So following this post https://www-secure.symantec.com/connect/forums/how-restrict-access-enterprise-vault-users-own-mailbox

I initially Zapped the mailboxes to remove the Inherited Permissions. But this didn't work. I repeated the steps to Zap the mailboxes and tried Synching and leaving it overnight and so on. Nothing was removing the Inherited Permissions for some reason. No errors in the EVPM window, it just created the MAPI session and appeared to be doing it's thing.Nothing to indicate a problem anywhere that I know to look (Event Viewer really).

So after more research I found out it is possible to remove the permissions via SQL using the following (changed the company name)

use EnterpriseVaultDirectory

update archiveview

set autosecuritydesc = NULL

where vaultentryid = '1CB0BC547645285469BEAB2D8BD9C9C2121212-abc-vault'

This was good, the Inherited Permissions are now gone and access to the archives is now disabled for the users.

Users are removed from Provisioning Group. Access to old archive has explicit Deny for each user. A note has been added for audit purpose. So far so good.

So I then need to assign a new archive to each user, but when I go through the Wizard I can only select their exsiting archives. So I guess that there is still a link (probably within SQL) that matches that archive to that mailbox. Again I am guessing but this is going to be the SID for the user, or LegactExchangeDN or something along those lines. I can't see anything obvious in the tables if I just "Select * from archiveView where vaultentryid = 'ID STRING ABOVE'"

So my question is how can I assign a brand new archive to these users? Which field in the database is responsible for matching the User Mailbox to the User Archive? I can't do anything at the Exchange/AD end as the users are busy working, my only option is to make changes in EV or SQL.

System is EV8.0.5 on Windows Server 2008. Archiving Exchange 2007 mailboxes. No journalling or anything clever, just plain simple mailbox data.

Many Thanks,

Vault Cache temporary files - please stop hammering my drives

$
0
0
I need a solution

Hi all, I have a bunch of what look like Vault Cache temporary cache files utilising Disk read writes that is affecting performance needed for nother task. The EV isn't being used for anything at the moment so I could really do with stopping this activity altogether. I've removed Vault cache functionality for the client side. Can anyone take a look at the screen shot below and confirm this is Vault Cache building on the server side?

Scr1.jpg.png

PST Locator Task and Environment Variable Exclusion

$
0
0
I need a solution

Hi,

Any ideas on a method to exclude an environment variable path in the PST Locator Task settings in EV10?

Locator.jpg

I've tried various combinations "Search Entire Computer" and "Search Specific Paths" without success, you cannot add '%userprofile%' to the Includes. You can use environment variables in the "PST Migration" policy properties.

Thanks

Failed : Migration to a new File Server - Cannot access archived files

$
0
0
I need a solution

Hi All,

I have a client that decided to migrate their file server to a new server. They manually copied over the contents including the PH and obviously none of the archived files are accessible now through double-clicking on the new file server.

We has so far established and done the following :

- Setup FSA for the new file server and added it as a target
- Installed the FSA agent on each memeber (3) of the windows cluster - The previous server was NOT a cluster
- Configured the cluster support using the Cluster Setup Wizard
- Run an FSAUtility with the -pm switch to re-create the PH
- Setup the new volume (same name as old obviously)
- Added only ONE of the folders (there are about 12/13 on the OLD file server) to test

The client is still not able to use the archived files - an error is produced when double-clicking the file : usually Access Denied, however if we search we are able to see and open the files through Enterprise Vault Search.

Restoring the files does not work either.

The old file server is still online and currently still a target.

I noticed that I don't have the Archive Point (AP) at the top-level of the tree when browsing the volume for the NEW file server like there is when browsing the the volume for the OLD file server. The other lower-level APs are there. I have only declared one folder on the new target to test.

I'm guessing that the PH are not pointing correctly to the NEW locations, but honestly I'm a little lost now.

Any help or pointers (no pun intended) would be most grateful.

PS, wanted to do a DTrace but there are no FSA traces available from the graphic interface :-( Haven't had time to investigate cmdline options...

Many thanks in advance.

EV11.0.1-CHF1 - event 41521 Enterprise Vault Search

$
0
0
I need a solution

Hello all,

Pulling my hair out on this one.

On 1 of my 3 EV-servers, I have this event 41521 several times in a row.

The event reads:

Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          4/29/2015 2:17:59 PM
Event ID:      41521
Task Category: Enterprise Vault Search
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      EVServer.region.domain.com

Description:
Enterprise Vault Search cannot perform certain operations. Check that all Enterprise Vault services are running.

All services are running. There are no events indicating something else (like SQL connectivity), nor any events in the System or Application log. The search.log (verbose) also is not very helpfull.

There are no complaints from users (yet), it is just annoying that this is flooding my eventlog.

In the searchlogfile, i do see this:

14 04-29-2015 12:35:59.616 Verbose Move operations is not allowed because either delete is not allowed at site level or search policy setting for move operation is off. || User: Domain\Username
14 04-29-2015 12:35:59.616 Verbose Delete operation is not allowed because either delete is not allowed at site level or search policy setting for delete operation is off. || User: Domain\Username
16 04/29/2015 12:36:00.178 Error Enterprise Vault Search cannot perform certain operations. Check that all Enterprise Vault services are running. || User: Domain\Username

and sometimes line like below:

16 04/29/2015 12:36:00.178 Error Unhandled Exception in Enterprise Vault Search.  || User: DOMAIN\Username|| System.Web.HttpException: This is an invalid webresource request.
   at System.Web.Handlers.AssemblyResourceLoader.System.Web.IHttpHandler.ProcessRequest(HttpContext context)
   at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

As far asI can see, there are no issues with .Net, but I might be wrong.

Has anyone seen this before, and if so, did you get it fixed?

Thanks!


EV Exchange Mailbox Task A1 Queue not going down

$
0
0
I need a solution

I have a problem whereby Enterprise Vault isn't archiving mail for the past week or so.

Having looked at the MS queues there appears to be 58,000 messages in the A1 queue.

The event log is littered with Event id 2216 and dtrace highlights an error such like "There is not enough Storage to complete this operation."

I am on EV 10.0.4 and have Exchange 2013 CU7 running on a Windows 2012 R2 server hosted on VM Ware.

To be honest things haven't really been the same since we moved from having Exchange 2007 on a physical server.

EV FSA 10.0.4 File crawling

$
0
0
I need a solution

Hello,

I have goping to deploy EV 10.0.4 for file server archiving, and want to know a bit more information on how FSA actually crawls through the files on the file server.

For example, if I have a share, that I will archive that has 1,000,000  files in, and I have a  rule that archives files not Accessed for 1 year.

On the first archive run, does EV exam all 1,000,000 files to see which ones fit the rule, and then archive those files.

On the second and all subsequent runs, does it scan ALL the remaining files again, or does it somehow have some inteligence about it, so that it doesn't have to scan them all again.

If it scans the 1,000,000 files each night, it will probably take seceral days to get through each scan, depending on how long the archive window is.

thanks in advance

Jim

Active Mailboxes and Deleted AD accounts

$
0
0
I need a solution

Hi,

Vault 11/ 2008 R2.

Our process has always been that mailboxes are enabled for mailbox archiving on Vault. Then when the user leaves, we disable the AD account for a while and then delete when ready.

This is fine (we have set Vault to work for Disabled and Hidden accounts).

However, our "Active Archives" count is double what our user base currently is.

My main questions are.

1) What is licensed here? Active Archives or is it Active Mailboxes?

2) Is there any manual tidy up procedure I should follow.

From the manual, Vault says the following, which sounds like I need do nothing other than delete the AD accounts:

Mailboxes with no associated Windows account are not archived.

This is the correct behavior. The Exchange Mailbox task automatically disables archiving for such mailboxes.

If someone could confirm points 1 and 2 that would be great.

Thanks in advance.

James

No Access to Archive Explorer in Outlook

$
0
0
I need a solution

Hello, 

we are facing an issue on customer side. Customer uses EV 9.0.4 and a combination of Outlook add-In  9.0.4.1125 and 10.0.4.1354 in an citrix environment. It shines that Outlook users with Add-In 10.0.4.1354 are unable to open Search/ArchiveExplorer in Outlook. The Desktop Setting "Launch Archive Explorer" is set to "In Outlook". When Clicking the ArchiveExplorer/Search button it displays the information in the attached screenshot. Manual Archiving /Retrieval is working and direct access to AE/Search with Internet Explorer also works. 

Clienttrace shows the following information:

15/04/2015 11:30:36.979[39376][L]: ActionWebCommon<0>::LaunchURLInOutlook: 0x0
15/04/2015 11:30:36.979[39376][M]: Launching EV web application in Outlook: http://<evserver>.domain.de/EnterpriseVault/archiv...

following

15/04/2015 11:30:36.994[39376][L]: ~LaunchURLUsingWebControl::GoToURL: 0x80004005
15/04/2015 11:30:36.994[39376][L]: ~ActionWebCommon<0>::LaunchURLInOutlook: 0x0
15/04/2015 11:30:36.995[39376][L]: ~ActionWebArchiveExplorer<class ECETraits>::OnAction: 0x0
15/04/2015 11:30:36.995[39376][L]: ~Action<class ActionWebArchiveExplorer<class ECETraits>,class ECETraits,1>::operator ()
15/04/2015 11:30:36.996[39376][L]: ~CCommands::DoArchiveExplorer: 0x0
15/04/2015 11:30:36.996[39376][H]: A COM error exception has been caught: 80004005
15/04/2015 11:30:36.996[39376][L]: ~CCommands::DoCommand: 0x80004005

I've taken a look at https://www-secure.symantec.com/connect/forums/ev-... where RichardG says 

"The EV add-in now uses a hidden folder and sets the home page URL on that folder to point at the appropriate EV web app."

But the solution mentioned here does not solve this issue. 

Customer also checked the steps from

http://www.symantec.com/docs/TECH223437 and

http://www.symantec.com/docs/TECH194935 without success.

Has anyone seen this before?  

Restore an Archive after Deleted

$
0
0
I need a solution

Hello All,

 

i have a customer that accidently deleted one archive for a particular user

Fortunately the Storage Expiry task didn't run yet

Also, i can see all of the savesets both in the DB and the Vault Store

 

How can I recreate the archive? 

 

Thanks a lot

Eran Sweiry

User update with evpm not working

$
0
0
I need a solution

I would like to disable a single user in enterprise vault through a script. (a single user just for testing, then later doing it for a lot of users) I am trying to update a single user in the Enterprise Vault by using the EVPM utility, but I am getting this error:

Error - could not find an Archiving or Journaling service for exchange server <exchsrv>
Error - Whilst processing mailbox with dn: <dn-name> [0x80004005]

Running the evpm util with this command:

evpm -e <exchsrv> -m enterprisevault -f c:\serverteam\testev.ini

my ini or initialization file looks like this:

[Directory]
DirectoryComputerName = evsrv
SiteName = enterprisevault

[Mailbox]
DistinguishedName = <dn-name>

[Archive]
ArchiveName = <archivename>
BillingOwner = <owner>
VaultStoreName = <archive>

[Folder]
Name=Mailboxroot
Enabled = false

I hope someone has an idea.

Regards,

Michael

Enterprise Vault for File System and Sharepoint

$
0
0
I need a solution

Hello all,

How does EV for File System and Sharepoint behaves when they have front-end applications who access files / content?

  • Some use ERP solutions or custom apps which interact with file system. If we have shortcuts how do they read and open those files? Some are web based apps, others are 32/64 bit apps

  • Some have front-end apps that integrate with Sharepoint. They do not access Sharepoint directly. Same question as above. How those apps will read shortcuts and open the documents?

Thanks a lot!

Kind regards,

Nuno


IMAP access to archived Public Folder

$
0
0
I need a solution

With EV 11, we can set up IMAP on the Outlook client to access the archived items in the user's archive.  Can we do the same with public folder?  Can we set up IMAP to access the archived public folders?  If so, how can we control who has access to the public folders?

We are going to cut tie with the current Exchange system which is archived by Evault and switch to a new system without Evault.  The plan is to set up IMAP access to Evault so the users can still access archived items.  Can the same be done for public folders?

Thanks.

EV7.5 database move

$
0
0
I need a solution

So we have an old installation of Exchange 2007 with EV 7.5 on windows 2003 servers.  As part of our migration off of Windows 2003 we will be going to a hosted Exchange solution.  Problem is all the hardware didn't make it to the migration window.

We just lost the motherboard on the SQL server supporting EV.  It is the only database on that server so everything else is fine.

We were lucky enough to have an exact same physical server that we canibalized to get the EVDB server back up and running, simply swapped out the drives.  Now the problem is that I need the server we sacrificed back up and running.

Long story short:  I need to migrate the SQL databases from EV7.5 SP6 to another SQL server.  From what I have read in other discussions is that I can't just simply move to SQL2008R2.

Can I move the databases to SQL2008R2 with compatibility mode 90?

Also, what else needs to change in the configuration besides the APP server DSNs?

Thank you for a prompt reply,

Tom

EV possible to disable 'Defer Indexing' through SQL query?

$
0
0
I need a solution

Hi

I have a FSA archive point without indexing ('Defer Indexing' tap is on) previously. The target archive server or the archive folder has been removed so there is no way to disable 'Defer Indexing' through GUI. Is this possible with some SQL query? So I may be able to start building the Index.

Chris

Move archive in a stuck state after original move failed

$
0
0
I need a solution

I am in the process of moving archives from one server to two other servers in an EV 10.0.4 environment. Generally the process is working fine - there are some failures but rerunning them usually sorts that out, however I have an issue with one partuicular archive which is stuck on step 2 of 5 and is not moving beyond that stage.

The process would normally be that an archive would be moved from server1 to either server2 or server3, however after doing some digging into this issue, I have discovered that the affected archive was originally moved from server1 to server3, but that process did not complete successfully and it appears that one of my colleagues then attempted to move the archive from server3 to server2 which I presume has thrown a spanner into the works with it.

I have checked the log files and on server3 there is mention that the shortcut processing for a previous movearchive is not complete so the job enters a sleep state but the log on server1 does contain the following:

04/03/2015 18:01:08 Error occurred while trying to synchronize the destination mailbox. Exception: KVS.EnterpriseVault.MoveArchiveTask.StampExchMbxFolderIDsException: Failed to synchronize the destination mailbox's archive folder IDs. Reason: Failed to synchronize mailbox for move archive - HRESULT [0xc0040ce6] ---> System.Runtime.InteropServices.COMException (0xC0040CE6): Failed to synchronize mailbox for move archive - HRESULT [0xc0040ce6]
   at KVS.EnterpriseVault.ExchangePolicySync.AgentSyncHelper.SynchronizeMailboxForMoveArchive(String strLegacyMbxDN, String strAdMbxDN, String strMsgStoreDN)
   at KVS.EnterpriseVault.MoveArchiveTask.ShortcutUpdatePhase.SynchMbxToStampArchiveFolderIds(String legacyMbxDN, Int64 exchServerIdentity)
   --- End of inner exception stack trace ---
   at KVS.EnterpriseVault.MoveArchiveTask.ShortcutUpdatePhase.SynchMbxToStampArchiveFolderIds(String legacyMbxDN, Int64 exchServerIdentity)
   at KVS.EnterpriseVault.MoveArchiveTask.ShortcutUpdatePhase.SynchronizeMailbox(String computerName). Enterprise Vault will ignore this error.

04/03/2015 18:01:08 Error occurred while trying to synchronize the destination mailbox. Exception: KVS.EnterpriseVault.MoveArchiveTask.StampExchMbxFolderIDsException: Failed to synchronize the destination mailbox's archive folder IDs. Reason: Failed to synchronize mailbox for move archive - HRESULT [0xc0040ce6] ---> System.Runtime.InteropServices.COMException (0xC0040CE6): Failed to synchronize mailbox for move archive - HRESULT [0xc0040ce6]
   at KVS.EnterpriseVault.ExchangePolicySync.AgentSyncHelper.SynchronizeMailboxForMoveArchive(String strLegacyMbxDN, String strAdMbxDN, String strMsgStoreDN)
   at KVS.EnterpriseVault.MoveArchiveTask.ShortcutUpdatePhase.SynchMbxToStampArchiveFolderIds(String legacyMbxDN, Int64 exchServerIdentity)
   --- End of inner exception stack trace ---
   at KVS.EnterpriseVault.MoveArchiveTask.ShortcutUpdatePhase.SynchMbxToStampArchiveFolderIds(String legacyMbxDN, Int64 exchServerIdentity)
   at KVS.EnterpriseVault.MoveArchiveTask.ShortcutUpdatePhase.SynchronizeMailbox(String computerName). Enterprise Vault will ignore this error.

We has some issues with the storage and indexing services which have been rresolved and it appears that the failed items were retried for the affect archvie and these also failed due to the fact that the EV was not operational and that it appears that the processing of the archive has stopped completely as no further entries are logged for it.

The archive has not active account associated with it as I guess the user has left the company.

I cannot do anything to the current move operation as all the icons in the move archvie status window are greyed out.

Would it be possible to remove the two failed move attempts / archives on the two destination servers and retry the move operation?

Thank you.

Issue with attachment and html image after archiving

$
0
0
I need a solution

Hi,

We have implemented EV 11.0.1 on windows server 2008 R2 SP1 Enterprise.

Exchange server version: 2010 SP3

We have enabled mailboxes for archiving.

End user outlook version is either 2007 SP3 or 2010.

Kindly find the details of the Client issue.

When messages are archived and it contains attachment,  when we access the shortcuts the attachment is missing in messages.

This issue we are facing for many users, even if the messages contain any html images we are facing the same issue.

When we open the same mail from Enterprise vault search, we are able to view the attachment and also the html images.

We also tried to store the messages manually which contains the attachment but facing the same issue.

Previously, when we faced this issue we provided to change / rename the desktop profile and the issue got resolved.

Anyone knows any other solution which will help us to troubleshoot this issue.

Viewing all 4101 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>