Symantec Enterprise Vault Compliance Accelerator incorrectly reports some users having zero items sampled in the Evidence of Review report.

Article:TECH49212  |  Created: 2006-01-03  |  Updated: 2007-01-12  |  Article URL http://www.symantec.com/docs/TECH49212
Article Type
Technical Solution


Environment

Problem



Symantec Enterprise Vault Compliance Accelerator incorrectly reports some users having zero items sampled in the Evidence of Review report.

Solution



Details of the issue:
Users who inherit department membership through Compliance employee groups will be marked as having zero items sampled within the Evidence of Review report for Compliance Accelerator 6.0 or 6.0 SP1.  Users who are explicitly defined within departments are reported correctly.

How to determine if you are affected
1.  Verify the version of Symantec Enterprise Vault Compliance Accelerator installed against the table labeled Figure 1.
Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to or when viewing a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.

a. On the Compliance Accelerator server, open RegEdit and navigate to the following key:

HKEY_Local_Machine\Software\KVS\Compliance Accelerator\Install

b.  The value of the Install key indicates the version installed.  If the version is Compliance Accelerator 6.0 or 6.0 Service Pack 1 (SP1) and the following condition is true, you are affected by this issue.

Figure 1
 
Registry Key ValueVersion
Rg3146Symantec Compliance Accelerator 6.0
Rg3227 or Rg3227aSymantec Compliance Accelerator 6.0 SP1


AND

2.  Determine whether Guaranteed or Statistical Sampling IS implemented or IS PLANNED for implementation in your environment.  Verify the current status as follows:

a. On the Compliance Accelerator server, open RegEdit and navigate to the following key:

HKEY_Local_Machine\Software\KVS\Compliance Accelerator\Install

b. If a key exists with the name Journaling Connector and the associated value is Installed, sampling IS implemented.

If both of these conditions are true, Symantec strongly recommends following the steps within the Resolution section of this document to avoid this issue.

If either of the above criteria are NOT true, no action is required.


Resolution
Important Note - It is not currently possible to recreate the historical data regarding sampled items because the current Distribution List membership may not correspond with the membership at the time the item was originally sampled. This would result in potentially incompliant results. As such, to ensure the integrity of the report, no attempt is made to recreate this information at this time. Symantec Corporation has acknowledged that this issue is present in the current version(s) of the product(s) mentioned at the end of this article and is currently under investigation by Symantec Corporation.

Since it is possible for more than one Customer database to exist, the following steps should be completed for each Customer database in your environment:

1.  Make a backup of the Compliance Customer database.
2.  Download the attached .sql file (click on "Download Now", below).
3.  Import or Paste the contents of this file into Microsoft (tm) SQL Server Query Analyzer on the server housing the Compliance Customer databases for your Compliance Accelerator environment.
4.  From the 'Query' drop down menu, choose Change Database and select the Compliance Customer database.
5.  Execute the query by clicking the red exclamation mark, or by using the Execute option under the Query menu.

The following response will indicate that the update has been successful:

Command(s) completed successfully.

After the patch has been applied, users who inherit department membership through Compliance employee groups will be reported correctly.

To confirm the update has been successful:

1. From the Customer database on your Microsoft(tm) SQL Server, open the Stored Procedure 'sp_MessageAddress_Sample_Add'
2. If the following line is present (line number 20 if viewing with SQL Enterprise Manager), then the fix is effective:

'FROM view_Ungrouped_Employees u'



For further information on backing up your SQL Database(s), see the following Microsoft TechCentre Article:
 http://www.microsoft.com/technet/prodtechnol/sql/2000/maintain/sqlbackuprest.mspx

If you have not received this TechNote from the Symantec Email Notification Service as a Software Alerts, please subscribe at the following link:    http://maillist.entsupport.symantec.com/subscribe.asp



Attachments

ETrack641181_285317.sql (4 kBytes)

Supplemental Materials

SourceETrack
Value641181
DescriptionEvidence of Review report shows 0 items sampled for a majority of users

Legacy ID



285317


Article URL http://www.symantec.com/docs/TECH49212


Terms of use for this information are found in Legal Notices