Video Screencast Help
Archiving and eDiscovery Community Blog
Showing posts in English
Rob.Wilcox | 30 Nov 2011 | 0 comments


One of the things mentioned in the Enterprise Vault 9.0.3 Release Notes is that a change has been introduced with regards to Exchange Over Quota archiving issues.  Traditionally the ‘issue’ is that when the mailbox is bumped right up on to the send/receive quota when the mailbox is synchronised, the current policy/desktop settings were removed… but because we’re right at the quota limit, we couldn’t then add a new message to the mailbox, with the ‘new’ (often unchanged) settings in it.


Net result is that when the user next logged in to Outlook it would appear that they weren’t enabled – they’ve had no EV buttons.

This has now been fixed so that the new policy settings are written, and saved, and if successful, the old policy settings-messages are removed.  If the save is unsuccessful, then a new event is logged :


Event Type: Error


Rob.Wilcox | 30 Nov 2011 | 0 comments


Prior to Enterprise Vault 9.0.1 when you deleted an archived item, and it’s associated shortcut the shortcut was deleted to the Deleted Items folder.  This has the sometimes undesirable effect that people could go to the deleted items folder in Outlook, and drag-and-drop the shortcut  back in to the mailbox.  For a while the item might then work, and be retrievable.  So where is the undesirable bit?  Of course this is based on a false – hope, since the item in EV is in the EV dumpster, and after 14 days (by default) it will be removed from there, meaning that the shortcut will then be orphaned.  A user trying to open it will get just the shortcut, not the full item.  This is not good.

This lead to many a long hour spent by help desks and by Symantec Support in trying to track down what happened.  It is pretty hard to prove conclusively that this is what has happened because of course it’s all non-...

Rob.Wilcox | 28 Nov 2011 | 0 comments


Available any time soon from FileConnect is Enterprise Vault 9.0.3.  There are a huge number of changes in this release, including :-

* FIPS Compliance

* IPv6 Support

* Updated ‘Converters’

* MAPI improvements

* Over (Exchange Mailbox)-quota improvements

* Backtrace

* Client trace and and event log improvements


I’ll write a little more about some of the above in future blog entries, so stay tuned.


Read more about it here :-

Glenn Martin | 24 Nov 2011 | 0 comments

A question that quite often comes up from customers and partners when we release a new version of the product, as we did a few months ago with V10, is "when will you stop supporting version x y or z". This is actually a very easy question to answer because Symantec has a clear policy on our approach to product support life cycle.

You can read the full policy from this link but in summary there are really three main stages involved as part of the product life cycle.

1) Release Date - obviously the official first released date of the product version

2) End of Engineering Support = the date after which we will issue no more patches or fixes

3) End of Assisted Support = the date after which we will no longer accept support calls for the product version

You can look up the particular...

KarlW | 24 Nov 2011 | 4 comments

As many of you are well aware through recent Microsoft Blog postings, the Connect forum and the Symantec KB Article 16949 there is an issue with space not being reclaimed by the Exchange 2010 store when objects are deleted or truncated.  This impacts many scenarios some of which are prevalent when archiving.

Before we get into too much detail here's the good news - Microsoft have fixed this issue and it's available on request.  For the fix go to .

This is an interim update (IU) and will hopefully be made available in an upcoming Rollup Update (RU) for Exchange Server 2010 SP2.  There are something's to note for the fix, once installed it won't magically reclaim all space, there are undefined deletion thresholds that have...

Rob.Wilcox | 18 Nov 2011 | 0 comments


I spotted an interesting article this morning :

In the article it explains how to setup a sort of minimalist Virtual Vault and Vault Cache. 

I like the article, however, I would add two pinches of salt :

* MDC / Metadata cache can be large

Remember regardless of the size limits you put down for disk space, or the number of months worth of data you want to keep, or the policy shown in the article around not storing any content locally – you always get a full MDC file for each archive you have opted to synchronise.

That can be large.

Mine is just under 1.6Gb.

* Consider load on the EV Server

One of the things that can really hammer an Enterprise Vault server if allowed to happen is retrieving content for items in Virtual...

Rob.Wilcox | 11 Nov 2011 | 0 comments

Having just installed 3 new Enterprise Vault Servers into a new repro environment I’m working on, I loooong for automation.


I had to :

run sysprep
install vmware tools
set system options for best performance
set ip address
set name of nic
rename the computer
add nat network card, but not connect at power on
power on
activate windows
join the domain
Add vaultadmin to local administrators group
log out and back in again, as vaultadmin
install outlook 2003
install outlook 2003 SP 3
create a profile for vault admin
login to outlook
install notepad++
install deployment scanner

W2K8R2 components
Add Features -> Message Queueing server
Add Roles -> IIS then customise :
¦ Internet Information Services (IIS) 6.0 or later.
See “Internet Information Services (...

Rob.Wilcox | 09 Nov 2011 | 0 comments


Strictly speaking this is not an issue relating to Enterprise Vault, but, I have seen situations like the one described here when the Enterprise Vault Outlook Add-in has been installed.  In other words sometimes 1+1 = 3, and Enterprise Vault looks ‘guilty’ when in fact it’s not.

The issue relates to broken Outlook Reminder’s.  By this I mean that every time Outlook is opened, the Reminder pop-up dialog appears with many, many reminders in it.  At first it might be one, then over the period of weeks or months, the list of reminders gradually builds.  The person I fixed this for had just over 100 ! The broken reminder prevents you from correctly dismissing other, valid, reminders.

When you try to dismiss the reminder or reminders you see :

Firstly for this issue I put together the following VBA to run from ALT-F11 in Outlook to...

Rob.Wilcox | 08 Nov 2011 | 0 comments


A question arose today on the Symantec EV Support Forum.  The question is about builds/versions of the Enterprise Vault Outlook Addin.

Many people see in add/remove programs ‘version’ information like this :


Unfortunately that’s not the version number, at least not the ones that us, outside of the build team understand/keep track of.

The version/build number for the Outlook Addin can be found in two ways :-

a/ Client trace


07/11/2011 14:16:22.793[1196][H]: Environment:
07/11/2011 14:16:22.793[1196][H]:     Enterprise Vault Client (HTTP)
07/11/2011 14:16:22.794[1196][H]:     Microsoft Windows 7  (Build 7600)
07/11/2011 14:16:22.794[1196][H]:     Intel(R) Core(TM) i5 CPU       M 540...

Nathan Clark 2 | 07 Nov 2011 | 0 comments

When i'm investigating an issue it helps to filter out the noise and sort the Event log.

This is easily accomplished with a powershell script:

 $flt = @("may be corrupt", "hierarchy inversion")
get-eventlog "Symantec Enterprise Vault" -newest 50 -EntryType error,warning -computername nathanev | where -filterscript {$_.message -notmatch (
'(' + [string]::Join(')|(', $flt) + ')')} | ft eventid,entrytype,timewritten,message -wrap -auto

Here we are filtering out Stream object, hierarchy inversion showing the last 50 errors and warnings.