Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.
Archiving and eDiscovery Community Blog
Showing posts in English
Jeff@CBI | 18 Jun 2014 | 0 comments

The new rules are designed to force both parties to limit the amount of documents and scope to the essential parts that each party want to address.  
As these new rules are adopted by both Federal rules as well as state civil procedure rule changes, Clearwell has some of these covered already.

In any action, the court may order the attorneys and any unrepresented parties to appear for one or more pretrial conferences
Sections of rule 26 mandates that the parties confur at least 21 days before a scheduling conference is set; in order to discuss the nature and basis of their claims and defenses.
These discussions include aspects of the discoverable information, including all ESI.  Some aspects to be discussed include issues of preserving discoverable information, as well as the overview of the discovery plan.  Both sides should agree on the scope of the discovery, including timing, form and requirements for the disclosures under Rule 26(a...

Rob.Wilcox | 17 Jun 2014 | 0 comments

In your Enterprise Vault world, how many archiving policies do you have? Is one sufficient?  Maybe for some people it is, but for most a couple of policies will be sufficient.  Sometimes though you’ll see an environment with LOTS of policies.

Lots = Bad

There are lots of reasons why having many policies is a bad idea. For example it makes it hard to troubleshoot the age old user issue of ‘My stuff isn’t getting archived, and it should be’. It also makes it hard to tweak small things (e.g. Whether the 'Delete from Vault' button is available to users) across all policies as they each have to be edited.

Often times people get to the situation of having many policies because they’ve inherited users from different corporate acquisitions. In your Enterprise Vault world how many policies do you have? Let me know in the comments below...

Jeff@CBI | 17 Jun 2014 | 0 comments

Good afternoon, 

We have discovered a bug when installing the fix 1 on clearwell 7.1.4.  If you install with the standard .exe package, in a distributed architecture, you will find an error on each of the slave appliances.  They will keep trying to update each appliance, 60 tries.

Use the Clearwell utility engine to install all patches.

Jeff@CBI | 17 Jun 2014 | 0 comments

As I do everyday, I receive these posts and articles about eDiscovery.  Not very often does it make me want to create an article about it and share the details of a valuable topic.

As this case will describe, the best tactics are to hire an eDiscovery specialist and utilize software such as Clearwell to ensure your defensibility!

Tip One: Get an expert who knows how to collect the electronically stored information on social media.

Tip Two: Downloading a Facebook profile, printing it, and conducting document review for redactions is not the best way to produce social media.


The Defendants in Stallings v. City of Johnston City, requested the Plaintiff produce the following social media:

Each and every social media posting by...

Rob.Wilcox | 11 Jun 2014 | 0 comments

I often wonder whether users are allowed to delete archived emails from their archive in Enterprise Vault when I talk to new customers. There are extremes of a sort of knee-jerk reaction: some customers says ‘hell yeah’, other customers say ‘hell no, never, never, ever’.

When it comes down to it though there are three options. Users can delete:

- Just the shortcut

In which case literally just the shortcut is removed from the mailbox.  The archived item still exists in the archive. It’s worth noting though that there isn’t a tool which can recreate the shortcuts once they have been deleted.

- Both the archived item, AND, the shortcut

In which case both the shortcut and the archived item will be deleted. If it’s enabled, the archived item can be restored by an Enterprise Vault administrator by going to the properties of the user archive, and restoring them:


Jeff@CBI | 06 Jun 2014 | 0 comments

We have discovered that Windows 2003 server and Windows 2008 R2 have a bug that if your network addresses reside in the public range, such as 162, it will automatically enable IPV6.  If you go to regedit and go to local machine -->system -->current control set -->services -->TCPIP6 -->Perameters and set the following:  DisabledComponents  (32 bit reg DWORD)  set to 1 or all f (fffffffffffffff).  This will disable IPV6.

Rob.Wilcox | 06 Jun 2014 | 0 comments

We’ve all done it from time to time, and we’ve all probably suffered the consequences - and we’re professionals!  We shy away afterwards and feel a little bit foolish. What is it I’m talking about?

Manually archiving lots and lots of emails with the Enterprise Vault Outlook Add-in.

I know in my time at Symantec I worked on a few issues where there were quite bad problems and poor user experience caused by trying to manually archive thousands of items in a folder at one time. I’ve even done it several times myself, without thinking.

But what about you? What about the users that you look after?

Do users do this? Do they have a poor experience? When I’ve tried it recently (in order to write this blog post) I tried highlighting a bunch of items in Outlook 2010 with the EV 11 Outlook Add-in (and EV 11 server) and timing how long it took to archive the item, whether all items were archived successfully, and what the general experience was like. Here...

Rob.Wilcox | 02 Jun 2014 | 0 comments

Most organisations have at least two categories of users - those with laptops, and a need for offline access to archived data, and those who are desktop bound, and don’t need offline access to archived data.

How many desktop policies do you have in your environment?

Are you lucky enough to be able to slice the user community in to just those two examples, or do you have many, many, many more?  Sometimes two policies aren’t enough, and copies are made for specific groups of people with specific needs over time. They can be a little bit cumbersome to maintain. Sometimes people even rename the policy when it is no longer going to be used (rather than deleting it).

Tweaking desktop policies is something that can really take up a lot of time, especially if there are more than a few policies to change. So how many policies do you have in your environment right now? Let me know in the comments below...

Rob.Wilcox | 28 May 2014 | 0 comments

In the last few weeks I’ve heard of several companies who have not configured storage expiry at all. I know in the US there are quite a few ‘strong’ laws when it comes to data retention including archived emails. But these companies were in Europe, where the laws are currently less certain.

So why keep everything, forever?

Well, I think it’s down to the fear of the unknown. As the months go by, and the years approach, it seems only a matter of time before individual European countries or the EU as a whole passes some sort of laws/bills that govern what needs to be kept and for how long. In the meantime, conservative Europeans are taking the cautionary approach of keeping everything.

I’m no lawyer, so I can’t tell you whether this is the best approach, or not.

I can only say that from a storage point of view it does make for some interesting reading… nothing is allowed to be deleted.  Journaling is in place as well as mailbox archiving.... Average...

The Boulon | 27 May 2014 | 0 comments

Because Backup Exec 2012 is not compatible (yet) with Enterprise Vault 11 and because of this, you cannot take advantage of the agent for Enterprise Vault, you will need to do everything via script.

First, I told myself: OK, no big deal. Just do as usual: the ps script, the authorization manager and the backup job (with the archive bit).

Hmm... no, it wasn't working the way I wanted. Especially because I use a new feature in EV 11: The Storage queue. And that one needs to empty itself after a backup job.

So, I decided to try it the old way, with the trigger file. Bingo, after a while I could see my EV Storage Queue disk freed from all those safety copies.

For this, I changed the Ptn backup from archive bit to trigger file, restarted the Storage Service and started a backup.

But wait, what about SQL? The databases need to be backed up in the same time frame as the vault stores and indexes.

No problem! Depending where your SQL reside,...