Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.
Archiving and eDiscovery Community Blog
Showing posts in English
Rob.Wilcox | 30 Jun 2014 | 0 comments

How many retention categories should an organisation have? Does it depend on the size of the organisation? Should be many? Should it be a few? Well I think part of this ties in with the ‘need’ for many organisations to keep everything forever. These sorts of organisations probably don’t spend the time to get their lawyers involved in figuring out how to categorise emails and how long to keep them.

These sort of organisations end up with a small number of retention categories, but, it’s likely that they are X Years (e.g. 2-3) and ‘Forever’.

This might not be good for storage management as I’ve written about before.

The flip side is that organisations try to introduce a dozen or more retention categories. Trying perhaps to over-categorise items. Worse these organisations might add to this of categorisation over some time, or absorb other Enterprise Vault environments with other lists of retention categories.

It can get messy.

There are third party...

Rob.Wilcox | 21 Jun 2014 | 0 comments

If you're lucky enough to have upgraded your production Enterprise Vault environment to Enterprise Vault 11, you will have started to get used to the new Enterprise Vault Search interface. Even if you haven't upgraded your main environment perhaps you've been playing with Enterprise Vault 11 in a lab?

The new Search interface is certainly a big boost on the previous offerings, it begins to make use of the new indexing engine which was delivered in Enterprise Vault 10 and gives a big boost in look-and-feel.

Today I spotted a helpful article on the Symantec Technote RSS feed which helps you (and end users too perhaps) get used to the query language syntax. Take a look:

Jeff@CBI | 18 Jun 2014 | 0 comments

The new rules are designed to force both parties to limit the amount of documents and scope to the essential parts that each party want to address.  
As these new rules are adopted by both Federal rules as well as state civil procedure rule changes, Clearwell has some of these covered already.

In any action, the court may order the attorneys and any unrepresented parties to appear for one or more pretrial conferences
Sections of rule 26 mandates that the parties confur at least 21 days before a scheduling conference is set; in order to discuss the nature and basis of their claims and defenses.
These discussions include aspects of the discoverable information, including all ESI.  Some aspects to be discussed include issues of preserving discoverable information, as well as the overview of the discovery plan.  Both sides should agree on the scope of the discovery, including timing, form and requirements for the disclosures under Rule 26(a...

Rob.Wilcox | 17 Jun 2014 | 0 comments

In your Enterprise Vault world, how many archiving policies do you have? Is one sufficient?  Maybe for some people it is, but for most a couple of policies will be sufficient.  Sometimes though you’ll see an environment with LOTS of policies.

Lots = Bad

There are lots of reasons why having many policies is a bad idea. For example it makes it hard to troubleshoot the age old user issue of ‘My stuff isn’t getting archived, and it should be’. It also makes it hard to tweak small things (e.g. Whether the 'Delete from Vault' button is available to users) across all policies as they each have to be edited.

Often times people get to the situation of having many policies because they’ve inherited users from different corporate acquisitions. In your Enterprise Vault world how many policies do you have? Let me know in the comments below...

Jeff@CBI | 17 Jun 2014 | 0 comments

Good afternoon, 

We have discovered a bug when installing the fix 1 on clearwell 7.1.4.  If you install with the standard .exe package, in a distributed architecture, you will find an error on each of the slave appliances.  They will keep trying to update each appliance, 60 tries.

Use the Clearwell utility engine to install all patches.

Jeff@CBI | 17 Jun 2014 | 0 comments

As I do everyday, I receive these posts and articles about eDiscovery.  Not very often does it make me want to create an article about it and share the details of a valuable topic.

As this case will describe, the best tactics are to hire an eDiscovery specialist and utilize software such as Clearwell to ensure your defensibility!

Tip One: Get an expert who knows how to collect the electronically stored information on social media.

Tip Two: Downloading a Facebook profile, printing it, and conducting document review for redactions is not the best way to produce social media.


The Defendants in Stallings v. City of Johnston City, requested the Plaintiff produce the following social media:

Each and every social media posting by...

Rob.Wilcox | 11 Jun 2014 | 0 comments

I often wonder whether users are allowed to delete archived emails from their archive in Enterprise Vault when I talk to new customers. There are extremes of a sort of knee-jerk reaction: some customers says ‘hell yeah’, other customers say ‘hell no, never, never, ever’.

When it comes down to it though there are three options. Users can delete:

- Just the shortcut

In which case literally just the shortcut is removed from the mailbox.  The archived item still exists in the archive. It’s worth noting though that there isn’t a tool which can recreate the shortcuts once they have been deleted.

- Both the archived item, AND, the shortcut

In which case both the shortcut and the archived item will be deleted. If it’s enabled, the archived item can be restored by an Enterprise Vault administrator by going to the properties of the user archive, and restoring them:


Jeff@CBI | 06 Jun 2014 | 0 comments

We have discovered that Windows 2003 server and Windows 2008 R2 have a bug that if your network addresses reside in the public range, such as 162, it will automatically enable IPV6.  If you go to regedit and go to local machine -->system -->current control set -->services -->TCPIP6 -->Perameters and set the following:  DisabledComponents  (32 bit reg DWORD)  set to 1 or all f (fffffffffffffff).  This will disable IPV6.

Rob.Wilcox | 06 Jun 2014 | 0 comments

We’ve all done it from time to time, and we’ve all probably suffered the consequences - and we’re professionals!  We shy away afterwards and feel a little bit foolish. What is it I’m talking about?

Manually archiving lots and lots of emails with the Enterprise Vault Outlook Add-in.

I know in my time at Symantec I worked on a few issues where there were quite bad problems and poor user experience caused by trying to manually archive thousands of items in a folder at one time. I’ve even done it several times myself, without thinking.

But what about you? What about the users that you look after?

Do users do this? Do they have a poor experience? When I’ve tried it recently (in order to write this blog post) I tried highlighting a bunch of items in Outlook 2010 with the EV 11 Outlook Add-in (and EV 11 server) and timing how long it took to archive the item, whether all items were archived successfully, and what the general experience was like. Here...

Rob.Wilcox | 02 Jun 2014 | 0 comments

Most organisations have at least two categories of users - those with laptops, and a need for offline access to archived data, and those who are desktop bound, and don’t need offline access to archived data.

How many desktop policies do you have in your environment?

Are you lucky enough to be able to slice the user community in to just those two examples, or do you have many, many, many more?  Sometimes two policies aren’t enough, and copies are made for specific groups of people with specific needs over time. They can be a little bit cumbersome to maintain. Sometimes people even rename the policy when it is no longer going to be used (rather than deleting it).

Tweaking desktop policies is something that can really take up a lot of time, especially if there are more than a few policies to change. So how many policies do you have in your environment right now? Let me know in the comments below...