How Enterprise Vault handles Exchange Server 2007 format journal reports
|Article:HOWTO58369|||||Created: 2011-08-01|||||Updated: 2013-07-12|||||Article URL http://www.symantec.com/docs/HOWTO58369|
When the Enterprise Vault Journaling task receives an Exchange Server 2007 format journal report:
The list of recipients is extracted from the journal report contents.
This list is not compared with recipients in the header of the attached message.
Uncategorized recipients found in the journal report body are classed as Undisclosed recipients.
For example, recipients of messages that are sent over SMTP will be included in the recipient list in the journal report body but will not be categorized.
A copy of the journal report, complete with original message attached, is passed to any external filters (including the Compliance Accelerator Journaling Connector, if configured).
The journaling task cannot archive a message from the journal mailbox if it cannot find the message body or the Message-ID, Recipients, and Sender tags in the journal report. For example, these can be stripped by antivirus applications that find suspicious messages.
The journaling task copies any journal reports that it cannot process to the folder Enterprise Vault Journaling Service/Failed To Copy.
Article URL http://www.symantec.com/docs/HOWTO58369