Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.
Archiving and eDiscovery Community Blog
Showing posts tagged with Tip/How to
Showing posts in English
Rob.Wilcox | 25 Jan 2010 | 1 comment

By default the OWA extensions timeout a request to restore an item after 30 seconds.  This was previously not configurable.  In some environments this has posed a problem in the past, where some internal Windows API calls were taking a little bit of time to come back, with, for example, user->group membership details.

A fix for this was introduced and can be used with version EV 8 and  onwards

The fix is slightly dependent on whether you are using Exchange 2003, or Exchange 2007.  If it is Exchange 2003, edit your EVBackend.ini file to include a line like this :

(where exch1 is the name of the Exchange Server)

If it is Exchange 2007, edit the web.config file so that it has the following line added :

You will see a line in the EV OWA Diagnostic log file similiar to this when you've implemented the change :

1/8/2010 5:13:58 AM: [OWAPage::RestoreItem] Item needs...

Rob.Wilcox | 25 Jan 2010 | 0 comments

One of the things that people mention about the EV client is that when RPC/HTTP is in use, even in a corporate office environment, the EV client drops-back to "lite" client functionality.  So it means that you don't get to choose which archive you want to manually archive something to, and you don't get the EV information tab on the properties of a folder.
The problem is that Outlook doesn't ever tell the extension whether RPC/HTTP is in use, or not.  There is no API, and the developers haven't worked out a way of prising it out of Outlook's information.  So the EV Add-in looks at the Outlook profile, and checks to see if it is configured to use RPC/HTTP at all.   If it is configured, then the "lite" functionality is invoked.
This annoys many customers.
A fix was introduced (post EV 2007 SP 4 hotfix, included in EV 2007 SP 5, and EV 8 SP 1 onwards) and can be activated by registry...

TonySterling | 12 Jan 2010 | 2 comments

This is off the EV topic but I wanted to share. :)

Windows 7 has a recently discovered feature that is being referred to as “God Mode” – somewhat grandiose given that all it really is is control panel plus...

To enable it, create a new folder, and rename it to the following:    GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}

Once done, the folders icon will change to a control panel icon, and the folder will contain *loads* more control & configuration applets than standard control panel alone, meaning you can typically manage just about *every* facet of Windows 7 configuration from this one place...

Allegedly this works on Vista too, although 64-bit vista seems to suffer from nasty side effects so this probably should be avoided on that platform... 32-bit Vista is thought to be OK though...


Wayne Humphrey | 15 Dec 2009 | 1 comment

So here is a SQL script to work out the hourly archiving rate, for the past 24 hours .

You will need to define all the Vault Stores in this query.

USE VaultStore01
SELECT Min(archiveddate) AS ArchivedDate,
 "Hourly Rate for Americas Vault Store 04" = count (*),
 "Av Size" = sum (itemsize)/count (*)
FROM Saveset s
WHERE archiveddate > dateadd(hh, -24, getUTCdate ())
GROUP BY LEFT (convert (varchar, s.archiveddate,20),14)
ORDER BY LEFT (convert (varchar, s.archiveddate,20),14) DESC
USE VaultStore02
SELECT Min(archiveddate) AS ArchivedDate,
"Hourly Rate for  APJ Vault Store 02" = count (*),
"Av Size" = sum (itemsize)/count (*)
FROM Saveset s
Wayne Humphrey | 08 Dec 2009 | 0 comments
Often the question of what is the different states of MbxArchivingState and MbxExchangeState in the ExchangeMailboxEntry table.

The Archiving State translates as follows:

0 = Not Enabled
1 = Enabled
2 = Disabled
3 = Re-Link

To view the Archiving State you can use the following:

SELECT count(MbxArchivingState) as '# Mailboxes',
MbxArchivingState as 'Archiving State'
FROM ExchangeMailboxEntry
GROUP BY MbxArchivingState

The Exchange State translates as follows: 

0 = Normal
1 = Hidden
2 = Deleted

To view the Exchange State you can use the following:

SELECT count(MbxExchangeState) as '# Mailboxes',
MbxExchangeState as 'Exchange State'
FROM ExchangeMailboxEntry
GROUP BY MbxExchangeState

Wayne Humphrey | 06 Dec 2009 | 1 comment

Lots of times I refer back to the EV manuals to see whether something that I “discover” is actually documented.  I have a copy locally on my machine in the office of many of the manuals, from many of the different versions.  I had often wondered about an externalised version of them, and whether they were easy to find.

With the power of Google, I found :

That goes back as far as V6, which is the beginning of time (almost) as far as I am concerned

GregRountree | 05 Dec 2009 | 1 comment

Virtual Vault (Can't move the items. You don't have appropriate permission to perform this operation.)



Hi Group,

I wanted to post this error because it is a little vague. When moving items from Outlook or PST's you might get this error for a couple of reasons:

Make sure you have a calendar in Virtual Vault (create a blank Calendar) Calendar items will not be ingested if you do not have some place to put them
Make sure all IPM. files are added to the Admin Console under the Directory Exchange Message Classes tab. Here is a link to the Microsoft Message Classes.
Make sure you Virtual Vault size is large enough to handle all the items you are putting into it....

Mnereng | 30 Sep 2009 | 3 comments

Occassionally my users end up with someone else's shortcut in thier mailbox.  They get there any number of ways: sent as attachements, cross mailbox copying, copying in and out of shared public folders, etc.  And often the user does not have access to the originating archive, so when they open the shortcut, they get the typical access denied error.  After much research, I finally came up with a solution:

  • Highlight the shortcut in Outlook
  • Hold CTRL + SHIFT, and mouse click on one of the EV buttons (ie, Archive Explorer)
  • Click on Vault Inofrmation
  • Scroll down to the "Selected Item Properties" section, and find the Saveset ID.
  • Copy everything to the right of the last tilda.  This string is called the Transaction ID (you can use the Send To Clipboard button to help with this, or copy the value manually).
  • Now you have to modify you modify the Transaction ID to fit the following format: 8 char, dash,...
Deepak W | 02 Sep 2009 | 1 comment

Hello All,

In our field many of the times we need to migrate the data from volume-to-volume or may be folder-to-folder. In these cases simple copy paste won't help us.

Recently I had ended up in the same remedy of moving B2D data from one storage LUN to another with data size crossing TB. Copy paste was giving errors, stopping in between, blah blah...

Then I used these tools from Microsoft to copy the data and it worked very well.

That is why I am sharing these tools to you. These are free utilities from Microsoft.

RichCopy -

This utility is written by a Microsoft engineer named Derk Benisch. This is nothing but the GUI version of the very popular Robocopy command-line utility.

For more information and to download RichCopy refer to below mentioned link.


TonySterling | 28 Aug 2009 | 0 comments

I have been working quite a bit with these guys and they have a great product they offer for free.  It is worth a look!

Evidence Mover

Evidence Mover, The Digital Detective's Copy Utility

Move Evidence with Confidence

Evidence Mover automates transferring evidentiary data from one location to another - verified 100% intact. Simply specify the source and destination directories; Evidence Mover does the rest.

Benefits of Evidence Mover:

Automate Data Transfers

  • Increase efficiency by recursively copying multiple directory levels
  • Free up EnCase dongles by not reverifying EnCase evidence after it is copied

Transfer with Confidence

  • Trust MD5 hashing: copied data arrives 100-percent intact
  • Relax, every transfer is...