Event Id's 2776, 2850, and 2273 can be received on messages with embedded attachments during an archiving run.

Article:TECH67377  |  Created: 2009-01-30  |  Updated: 2014-03-17  |  Article URL http://www.symantec.com/docs/TECH67377
Article Type
Technical Solution

Product(s)

Issue



Event Id's 2776, 2850, and 2273 can be received on messages with embedded attachments during an archiving run.


Error



Event Type: Error
Event Source: Enterprise Vault
Event Category: Archive Task
Event ID: 2776
Computer: EVSERVER
Description:
An exception occurred in routine
AddAttachmentListToMsgBody
EXCEPTION_ACCESS_VIOLATION @ 0x78145878
V-437-2276

Event Type: Error
Event Source: Enterprise Vault
Event Category: Public Folder Task
Event ID: 2776
Computer: EVSERVER
Description:
An exception occurred in routine
AddAttachmentListToMsgBody
EXCEPTION_ACCESS_VIOLATION @ 0x74965808


Cause



This issue will occur only when the option to 'Use message body' is used for Shortcut body on the Shortcut Content tab of the Mailbox or Public Folder policy.


Solution



This error does not prevent the message or attachments from being archived properly.  

Workaround
The following registry entry can be added to the EV server to stop the error from occurring.

1.  Go to Start | Run type regedit and click OK.  

2.  On 32-bit servers, expand HKEY_LOCAL_MACHINE\SOFTWARE\KVS\Enterprise Vault\Agents. On 64-bit servers, expand HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KVS\Enterprise Vault\Agents.

3.  Right-click on Agents and choose New > DWORD Value.

4.  Enter RemoveEmbeddedAttachments for the Name and give it a decimal value of 0.  

5.  Restart the appropriate archiving task.  

This setting will allow the message to be archived without the error occurring in the Event Viewer log.  

NOTE:  The embedded attachments will continue to be archived with this setting in place.  
 

This issue has been addressed as part of the following release:

Enterprise Vault 9.0


 

Supplemental Materials

SourceEvent ID
Value2776
Description

An exception occurred in routine AddAttachmentListToMsgBody EXCEPTION_ACCESS_VIOLATION @ 0x78145878


SourceETrack
Value1511077
Description

8.0- Event 2776 occurs during post processing when content of shortcut is set to 'Use message body'


SourceEvent ID
Value2850
Description

Whilst post processing a message an error occurred in CArchivingAgent::PostProcessArchivedItem() whilst calling CExchangeShortcutAccessor::BuildFromSessionAndLocation().


SourceEvent ID
Value2273
Description

An error occurred whilst processing the "Post Process Archived Item" message from the queue


Legacy ID



318415


Article URL http://www.symantec.com/docs/TECH67377


Terms of use for this information are found in Legal Notices