Symantec Enterprise Vault

Administrator's Guide

9.0

Symantec Enterprise Vault: Administrator's Guide

The software described in this book is furnished under a license agreement and may be used only in accordance with the terms of the agreement. Last updated: 2011-10-21.

Legal Notice
Copyright 2011 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, Veritas, Enterprise Vault, Compliance Accelerator, and Discovery Accelerator are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This Symantec product may contain third party software for which Symantec is required to provide attribution to the third party (Third Party Programs). Some of the Third Party Programs are available under open source or free software licenses. The License Agreement accompanying the Software does not alter any rights or obligations you may have under those open source or free software licenses. Please see the Third Party Software file accompanying this Symantec product for more information on the Third Party Programs. The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors, if any. THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19 "Commercial Computer Software - Restricted Rights" and DFARS 227.7202, "Rights in Commercial Computer Software or Commercial Computer Software Documentation", as applicable, and any successor regulations. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement. Symantec Corporation 350 Ellis Street, Mountain View, CA 94043 http://www.symantec.com

Technical Support
Symantec Technical Support maintains support centers globally. Technical Supports primary role is to respond to specific queries about product features and functionality. The Technical Support group also creates content for our online Knowledge Base. The Technical Support group works collaboratively with the other functional areas within Symantec to answer your questions in a timely fashion. For example, the Technical Support group works with Product Engineering and Symantec Security Response to provide alerting services and virus definition updates. Symantecs support offerings include the following:

A range of support options that give you the flexibility to select the right amount of service for any size organization Telephone and/or Web-based support that provides rapid response and up-to-the-minute information Upgrade assurance that delivers software upgrades Global support purchased on a regional business hours or 24 hours a day, 7 days a week basis Premium service offerings that include Account Management Services

For information about Symantecs support offerings, you can visit our Web site at the following URL: www.symantec.com/business/support/ All support services will be delivered in accordance with your support agreement and the then-current enterprise technical support policy.

Contacting Technical Support

Customers with a current support agreement may access Technical Support information at the following URL: www.symantec.com/business/support/ Before contacting Technical Support, make sure you have satisfied the system requirements that are listed in your product documentation. Also, you should be at the computer on which the problem occurred, in case it is necessary to replicate the problem. When you contact Technical Support, please have the following information available:

Product release level

Hardware information Available memory, disk space, and NIC information Operating system Version and patch level Network topology Router, gateway, and IP address information Problem description:

Error messages and log files Troubleshooting that was performed before contacting Symantec Recent software configuration changes and network changes

Licensing and registration

If your Symantec product requires registration or a license key, access our technical support Web page at the following URL: www.symantec.com/business/support/

Customer service
Customer service information is available at the following URL: www.symantec.com/business/support/ Customer Service is available to assist with non-technical questions, such as the following types of issues:

Questions regarding product licensing or serialization Product registration updates, such as address or name changes General product information (features, language availability, local dealers) Latest information about product updates and upgrades Information about upgrade assurance and support contracts Information about the Symantec Buying Programs Advice about Symantec's technical support options Nontechnical presales questions Issues that are related to CD-ROMs or manuals

Support agreement resources

If you want to contact Symantec regarding an existing support agreement, please contact the support agreement administration team for your region as follows:
Asia-Pacific and Japan Europe, Middle-East, and Africa North America and Latin America [email protected] [email protected] [email protected]

Contents

Technical Support ............................................................................................... 3 Chapter 1 About this guide .................................................................. 19

Prerequisite knowledge ................................................................. Where to get more information about Enterprise Vault ....................... "How To" articles on the Symantec Enterprise Support site ............ Comment on the documentation ..................................................... 19 19 21 22

Chapter 2

Managing administrator security .................................... 23

About administrator security ......................................................... Roles-based administration ............................................................ Roles and Enterprise Vault Operations Manager .......................... Roles and Enterprise Vault Reporting ........................................ Assigning roles for administration ............................................ Modifying a role for administration ........................................... Creating a new role for administration ....................................... Determining your current role entitlements ................................ Resetting all roles and assignments ........................................... Using permissions to control access ................................................ Changing the Vault Service account ................................................ 23 24 30 30 30 31 33 34 34 34 36

Chapter 3

Day-to-day administration ................................................ 39

Monitoring the system status ......................................................... Monitoring application logs ........................................................... Monitoring MSMQ queues ............................................................. About starting or stopping tasks or services ...................................... Starting or stopping tasks ........................................................ Starting or stopping services .................................................... Checking logs with the Windows Event Viewer .................................. Monitoring journal mailboxes ........................................................ Use the default ANSI codepage (ACP codepage) ............................ About monitoring disks ................................................................. Checking disk space for vault stores .......................................... Disk space and indexes ............................................................ 40 40 41 41 42 42 43 44 46 46 46 50

Contents

About maintaining the SQL databases .............................................. Vault store database maintenance ............................................. Directory database maintenance ............................................... Fingerprint database maintenance ............................................ Monitoring database maintenance ............................................ FSA Reporting database maintenance ........................................ About managing vault store groups and sharing ................................ Viewing the status of the vault stores in a vault store group ........... Changing the sharing level of a vault store .................................. Moving a vault store to a different vault store group ..................... Deleting a vault store group ..................................................... Monitoring the fingerprint databases ........................................ Monitoring the archive space reduction due to single instance storage ........................................................................... About managing safety copies ........................................................ Configuring the removal of Enterprise Vault safety copies ............. Checking that partitions have been backed up ............................. About managing partition rollover .................................................. Configuring partition rollover .................................................. Changing rollover order .......................................................... Forcing partition rollover ........................................................ Recovering deleted items ............................................................... About expiry and deletion .............................................................. Setting up storage expiry ......................................................... Setting up shortcut deletion ..................................................... Creating a new retention category ................................................... About maintaining provisioning groups ........................................... Enabling archiving for new mailboxes .............................................. Checking for hidden mailboxes ................................................. About moving archives ................................................................. How Move Archive works ........................................................ About moving mailbox archives within a site ............................... About moving mailbox archives between sites ............................. About moving journal archives within a site ................................ About configuring Move Archive ............................................... Running Move Archive ............................................................ Monitoring Move Archive ........................................................ Deleting archives after Move Archive ........................................ Retrying Move Archive operations ............................................ Move Archive reporting and monitoring ..................................... Deleting an archive ...................................................................... Deleting a vault store .................................................................... Setting a system message ..............................................................

50 50 51 51 53 53 53 54 55 56 57 58 58 59 59 60 61 61 63 64 65 66 66 67 67 69 69 71 72 73 75 77 79 79 82 87 90 91 92 93 93 94

Contents

About index volumes .................................................................... Moving the directory database ........................................................ Moving a vault store database ........................................................ Moving a fingerprint database ........................................................ Moving the Monitoring database ..................................................... Moving the audit database .............................................................

95 95 96 96 97 97

Chapter 4

Advanced Domino mailbox and desktop policy settings ............................................................................ 99

About the advanced policy settings for Domino mailbox and desktop policy ................................................................................... 99 Editing the advanced settings for Domino mailbox and desktop policy ................................................................................... 99 How to apply the new settings for Domino mailbox and desktop policy ........................................................................... 100 Domino mailbox policy advanced settings ....................................... 100 Archiving General: Domino mailbox policy ................................ 100 Domino desktop policy advanced settings ....................................... 102 Vault Cache: Domino desktop policy ........................................ 102

Chapter 5

Advanced Exchange mailbox and desktop policy settings .......................................................................... 105

About the advanced Exchange mailbox and desktop settings .............. Editing the advanced Exchange mailbox and desktop settings ............. How to apply the new Exchange mailbox and desktop settings ........................................................................ Exchange mailbox policy advanced settings .................................... Archiving General (Exchange mailbox policy advanced settings) ....................................................................... Exchange desktop policy advanced settings ..................................... Outlook (Exchange desktop policy advanced settings) ................. OWA (Exchange desktop policy advanced settings) ..................... Vault Cache (Exchange desktop policy advanced settings) ............ Virtual Vault (Exchange desktop policy advanced settings) .......... 105 106 106 106 106 117 117 132 139 146

Chapter 6

Advanced Exchange journal policy settings ................. 157

Editing the advanced Exchange journal policy settings ...................... 157 Archiving General (Exchange journal policy advanced settings) .......... 158 ClearText copies of RMS Protected items (Exchange Archiving General setting) ............................................................. 158

10

Contents

Expand distribution lists (Exchange Archiving General setting) ......................................................................... Failed DL expansion behaviour (Exchange Archiving General setting) ......................................................................... Inherited permissions (Exchange Archiving General setting) ......................................................................... Maximum message size to archive in MB (Exchange Archiving General setting) ............................................................. Pending shortcut timeout (Exchange Archiving General setting) ......................................................................... Queue Journal items (Exchange Archiving General setting) .......... Reset archive names (Exchange Archiving General setting) .......... Return failed items to inbox (Exchange Archiving General setting) .........................................................................

159 160 160 160 160 161 161 161

Chapter 7

Advanced Exchange public folder policy settings .......................................................................... 163

Editing advanced Exchange public folder settings ............................. Archiving General (Exchange public folder policy advanced settings) ............................................................................. Archive unexpired Calendar Events (Exchange Archiving General setting) ......................................................................... Code pages for right-to-left custom shortcuts (Exchange Archiving General setting) ............................................... Do not archive pending reminders (Exchange Archiving General setting) ......................................................................... Inherited permissions (Exchange Archiving General setting) ......................................................................... Maximum message size to archive in MB (Exchange Archiving General setting) ............................................................. Pending shortcut timeout (Exchange Archiving General setting) ......................................................................... Set failed messages 'Do Not Archive' (Exchange Archiving General setting) ......................................................................... Strip attachments to non-shortcut items (Exchange Archiving General setting) ............................................................. 163 164 164 164 165 165 165 165 166 166

Chapter 8

Customizing the Web Access application ..................... 167

About customizing the Web Access application ................................ 167 General Web Access application configuration ................................. 168 AllowNonAsciiFilenames (Web Access application: general configuration) ................................................................ 168

Contents

11

DefaultFormatCodepage (Web Access application: general configuration) ................................................................ DefaultFormatType (Web Access application: general configuration) ................................................................ HTMLNotNotes (Web Access application: general configuration) ................................................................ MaxPreviewSize (Web Access application: general configuration) ................................................................ Noclient (Web Access application: general configuration) ............ URLEncodeFilenames (Web Access application: general configuration) ................................................................ ViewMessage_Format (Web Access application: general configuration) ................................................................ Configuring Web Access application search results ........................... DefaultRankResults (Web Access application: search result configuration) ................................................................ FederatedSearchMaxItems (Web Access application: search result configuration) ................................................................ FederatedSearchMaxVolSets (Web Access application: search result configuration) ....................................................... FederatedSearchTimeout (Web Access application: search result configuration) ................................................................ SearchRSS (Web Access application: search result configuration) ................................................................ ShowAllMaxResults (Web Access application: search result configuration) ................................................................ UseFederatedSearch (Web Access application: search result configuration) ................................................................ Web Access application automatic domain authentication ................. Web Access application user interface tweaks .................................. BSDeleteButton (Web Access application: user interface) ............. BSRestoreButton (Web Access application: user interface) ........... ISDeleteButton (Web Access application: user interface) .............. ISRestoreButton (Web Access application: user interface) ............ ISShowRetention (Web Access application: user interface) ........... RestoreToPSTOption (Web Access application: user interface) ...................................................................... Web Access application Archive Explorer interface tweaks ................ ArchiveExplorerDelete (Web Access application: Archive Explorer interface) ...................................................................... ArchiveExplorerForward (Web Access application: Archive Explorer interface) ..........................................................

168 169 169 169 170 170 170 171 171 172 172 173 173 173 173 174 174 174 174 175 175 175 176 176 177 177

12

Contents

ArchiveExplorerHelp (Web Access application: Archive Explorer interface) ...................................................................... ArchiveExplorerReply (Web Access application: Archive Explorer interface) ...................................................................... ArchiveExplorerReplyAll (Web Access application: Archive Explorer interface) .......................................................... ArchiveExplorerRestore (Web Access application: Archive Explorer interface) .......................................................... ArchiveExplorerSaveAs (Web Access application: Archive Explorer interface) .......................................................... ArchiveExplorerSearch (Web Access application: Archive Explorer interface) .......................................................... ArchiveExplorerSettings (Web Access application: Archive Explorer interface) ..........................................................

177 177 178 178 178 179 179

Chapter 9

Automatic monitoring

...................................................... 181 181 182 183 183 183 186 186 187

About automatic monitoring ........................................................ Monitoring in Site Properties ........................................................ About monitoring using MOM ....................................................... Installing MOM .................................................................... Configuring MOM ................................................................. About monitoring using SCOM ...................................................... Setting up SCOM monitoring for an Enterprise Vault server ......... Optional SCOM configuration .................................................

Chapter 10

Monitoring with Enterprise Vault Operations Manager ......................................................................... 189

About Enterprise Vault Operations Manager ................................... Accessing Operations Manager ..................................................... Using Operations Manager ........................................................... Left pane of Operations Manager ............................................. Menu bar and content pane of Operations Manager .................... How to view the monitored data .................................................... About Enterprise Vault server monitoring ...................................... Enterprise Vault Monitoring Summary tab ................................ Enterprise Vault Monitoring Details tab ................................... About Exchange Server journal mailbox archiving ............................ Exchange Server Monitoring Summary tab ............................... Exchange Server Monitoring Details tab ................................... About Domino Server journaling archiving ..................................... Domino Server Monitoring Summary tab .................................. Domino Server Monitoring Details tab ..................................... 189 190 191 192 192 193 193 194 195 199 199 201 202 203 204

Contents

13

Configuring warning and critical status thresholds with Enterprise Vault Monitoring .................................................................. 205 Configuring the Enterprise Vault monitoring parameters .................. 207 Performing an immediate status check on an Enterprise Vault server ................................................................................. 207

Chapter 11

Exporting archives ............................................................. 209

About the Export Archive wizard ................................................... Importing (migrating) exported files .............................................. PST configuration files and exported archives ........................... Starting the export with the Export Archive wizard .......................... 209 210 211 212

Chapter 12

Introduction to PST migration ........................................ 215

Tools for migrating PST files ........................................................ Overview of the PST migration process .......................................... PST files and marking ................................................................. PST migration tips ...................................................................... About Locate and Migrate ............................................................ How to schedule Locate and Migrate tasks ................................ Client-driven PST migration ......................................................... Migrating PST files in hosted environments .................................... 215 216 218 218 219 220 220 221

Chapter 13

PST migration: scripted .................................................... 223

Overview of the scripting mechanism for PST migration .................... Undertaking the PST migration process using Policy Manager ............ Preparation for PST scripted migration .......................................... Output from PST migration .......................................................... [PSTcheckpoint] section PST scripted migration ........................ Enterprise Vault event log for PST scripted migration ................. Example initialization file for PST scripted migration ....................... 223 224 226 227 227 229 230

Chapter 14

PST migration: wizard-assisted ...................................... 233

About the PST Migrator wizard ..................................................... Outline of the wizard-assisted PST migration process ....................... Preparation for the wizard-assisted PST migration process ................ Migration tips for the wizard-assisted PST migration process ............. How the wizard-assisted PST migration process affects users ............. Starting the wizard-assisted PST migration process .......................... 233 234 236 237 239 240

14

Contents

Chapter 15

PST Migration: Locate and Migrate ............................... 241

Preparations for setting up PST Locate and Migrate .......................... How to edit the Exchange PST Migration policy ............................... Configuring the PST holding folder for Locate and Migrate ................ Determining the size of the PST holding folder for Locate and Migrate ........................................................................ Creating and configuring the PST Locator, PST Collector, and PST Migrator tasks ..................................................................... How to configure the PST Locator task ..................................... How to configure the PST Collector task ................................... How to configuring the PST Migrator task ................................ Accounts that manage PST migration Locate and Migrate .................. Migrating PST files using PST Locate and Migrate ............................ Running the PST Locator task to find domains and computers ............ Switching off NetApp device identification checks by the PST Locator task .................................................................. Selecting computers for PST searching .......................................... Excluding network shares from PST migration ................................ Running the PST Locator task to find PST files ................................ Editing PST file properties ........................................................... Running the PST Collector task ..................................................... Running the PST Migrator task ..................................................... Troubleshooting PST migration .................................................... 242 243 244 244 245 247 248 249 250 251 252 254 255 257 258 258 259 260 260

Chapter 16

PST migration: client-driven migration ......................... 263

About client-driven PST migration ................................................ PST files on network drives for PST client-driven migration ......... Configuring the PST holding folder for PST client-driven migration ............................................................................ Editing the PST migration messages for PST client-driven migration ............................................................................ Creating a PST Migrator task for PST client-driven migration ............. Enabling mailboxes for PST client-driven migration ......................... 263 264 264 265 266 267

Chapter 17 Chapter 18

NSF migration: scripted ................................................... 269

About scripted NSF migration ....................................................... 269

NSF migration: wizard assisted ...................................... 271

About NSF migrator .................................................................... 271 Outline of the NSF migration process ............................................. 272 About planning for NSF migration ................................................. 273

Contents

15

How to edit the welcome message for NSF migration ................... NSF file locations for NSF migration ........................................ How to match NSF files to archives for NSF migration ................. Standard mail templates for NSF migration ............................... NSF migration failed and ineligible items .................................. Item age limit for NSF migration ............................................. Mail file limits and NSF file access control ................................ Users execution control lists for NSF migration ........................ Multiple instances of NSF migrator .......................................... How NSF migration affects users ................................................... Running NSF migrator ................................................................ NSF migration audits ..................................................................

274 275 275 276 277 278 278 279 279 279 280 280

Chapter 19

Enterprise Vault message queues .................................. 281

Accessing Enterprise Vault message queues .................................... MSMQ queue summary ................................................................ Exchange Mailbox task queues ...................................................... Notes on the Exchange Mailbox task queues .............................. Exchange Journaling task queues .................................................. Notes on the Exchange Journaling task queues ........................... Exchange Public Folder task queues ............................................... Notes on the Exchange Public Folder task queues ....................... Retrieval queues ......................................................................... Notes on the retrieval queues ................................................. Storage service queues ................................................................ Notes on the Storage service queues ........................................ 281 282 284 286 287 289 289 290 291 292 293 294

Chapter 20

Customizations and best practice ................................. 295

Mailbox archiving strategies ......................................................... About mailbox archiving strategies .......................................... Notes on archiving based on age .............................................. Notes on archiving based on quota or age and quota ................... Notes on archiving items from Exchange managed folders ........... Archiving items only if they have attachments .......................... How to customize the Enterprise Vault settings for a journal mailbox ........................................................................ Disabling archiving for mailboxes ........................................... Public folder archiving best practice .............................................. About performance tuning ........................................................... Moving the Windows Temp folder ........................................... Improving performance on Storage service computers ................ 295 295 296 296 301 306 307 308 309 310 311 311

16

Contents

Chapter 21

Auditing

............................................................................... 315 315 315 316 318 320 320 321

About auditing ........................................................................... Creating the auditing database ...................................................... Configuring auditing ................................................................... How to record details of your own auditing entries ..................... Viewing the audit log .................................................................. Tuning auditing ......................................................................... Modifying the number of connections when auditing ..................

Chapter 22

Backing up Enterprise Vault ............................................ 323

About Enterprise Vault backups .................................................... About Enterprise Vault backup mode ............................................. Backup of Enterprise Vault data .................................................... Enterprise Vault system databases backup ................................ Fingerprint databases backup ................................................. Vault store partitions and vault store databases backup .............. Backing up index locations ..................................................... About backup mode cmdlets ......................................................... Index location backup mode cmdlet syntax ............................... Vault store backup mode cmdlet syntax .................................... Generating PowerShell backup commands for your environment ....................................................................... Using PowerShell cmdlets in backup scripts .................................... 323 324 325 325 326 326 327 328 329 330 332 333

Chapter 23 Chapter 24

Failover in a building blocks configuration .................. 335

Updating service locations after failover ......................................... 335

Recovery

.............................................................................. 337 337 338 338 339 340 340 341 342 343

About using EVSVR as part of the recovery procedure ....................... Recovering Enterprise Vault using full system backups ..................... Carrying out an environment recovery procedure ....................... Recovering Enterprise Vault using data-only backups ....................... Recovery procedure 1: Installing software on the servers ............. Recovery procedure 2: Restoring Enterprise Vault databases ...................................................................... Recovery procedure 3: Renaming servers .................................. Recovery procedure 4: Copy or move the Enterprise Vault data files ............................................................................. Recovery procedure 5: Clearing the directory database entries ..........................................................................

Contents

17

Recovery procedure 6: Recreating services and tasks on the first Directory service computer .............................................. Recovery procedure 7: Recreating services and tasks on Enterprise Vault servers .................................................. Recovery procedure 8: Checking the Web Access application settings ........................................................................ Recovery procedure 9: Checking registry entries ........................ Recovery of an Enterprise Vault component .................................... Recovery of Enterprise Vault in a VCS cluster .................................. Recovery scenario 1: One of the cluster nodes needs rebuilding ..................................................................... Recovery scenario 2: All the cluster nodes need rebuilding ........... Recovery of Enterprise Vault in a Windows Server failover cluster ................................................................................ Recovery scenario 1: One of the cluster nodes needs rebuilding ..................................................................... Recovery scenario 2: All the cluster nodes need rebuilding ...........

344 346 347 347 348 350 351 351 352 352 353

Appendix A

Ports used by Enterprise Vault ....................................... 355

About the ports used by Enterprise Vault ........................................ 355 Notes on configuring dynamic RPC ports ........................................ 357

Appendix B Appendix C Appendix D

Microsoft hotfixes .............................................................. 359

About the Microsoft hotfixes ........................................................ 359

Useful SQL queries ............................................................ 361

About the SQL queries ................................................................. 361

Troubleshooting ................................................................. 363

Installation problems .................................................................. Enterprise Vault servers: installation problems .......................... Desktop clients: installation problems ...................................... Microsoft SQL Server problems ..................................................... Error: ODBC SQL Server Driver Connection is Busy ..................... Number of SQL Server licenses exceeded .................................. How to reset passwords after moving an Enterprise Vault database ....................................................................... Server problems ......................................................................... Fixing errors when opening MSMQ dead letter queue .................. Client problems .......................................................................... 363 363 364 365 365 366 366 367 367 368

18

Contents

Problems logging on to the Enterprise Vault Web Access application .................................................................... MAPISVC.INF problems (client) ............................................... Problems seen by users .......................................................... Problems enabling or processing mailboxes ..................................... Checking the Enterprise Vault system mailbox .......................... Problem processing a new mailbox .......................................... Problems with Enterprise Vault components ................................... Troubleshooting: All services .................................................. Troubleshooting: File System Archiving ................................... Troubleshooting: Directory service .......................................... Troubleshooting: Archiving or Journaling services ..................... Troubleshooting: Retrieval service .......................................... Troubleshooting: Indexing service ........................................... Troubleshooting: Storage service ............................................ Troubleshooting: Shopping service .......................................... Troubleshooting: Web Access application ................................. Troubleshooting: Enterprise Vault Operations Manager and the Monitoring database ....................................................... Troubleshooting: Enterprise Vault Reporting and FSA Reporting ...................................................................... Specific problems ................................................................. Restoring items for users ....................................................... Techniques to aid troubleshooting ................................................. Running on Demand: Run Now ............................................... How to use Report Mode to test the Exchange Mailbox task .......... Moved Items report from the Exchange Mailbox task ................. Using tracing ....................................................................... Using the Deployment Scanner ............................................... Creating a mail message that contains the Outlook Add-Ins log ............................................................................... How to modify registry settings .............................................. About moving an Indexing service ................................................. Notes on the Indexing data structure of the Vault Directory database ....................................................................... Moving the Indexing service ...................................................

368 368 369 371 372 373 374 374 376 377 379 383 383 388 391 395 396 396 397 400 400 401 401 404 405 406 407 408 411 412 412

Index ................................................................................................................... 417

Chapter

About this guide

This chapter includes the following topics:

Prerequisite knowledge Where to get more information about Enterprise Vault Comment on the documentation

Prerequisite knowledge
To administer Enterprise Vault, you need a working knowledge of the following products:

Windows Server 2000/2003/2008 administrative tasks Microsoft SQL Server Microsoft Message Queue Server Internet Information Services (IIS) Your archive storage hardware and software

If you intend to use Enterprise Vault with Domino server, Microsoft Exchange, or Microsoft SharePoint, you also require a working knowledge of these products.

Where to get more information about Enterprise Vault

Table 1-1 lists the documentation that accompanies Enterprise Vault.

20

About this guide Where to get more information about Enterprise Vault

Table 1-1 Document

Enterprise Vault documentation set Comments

Includes all the following documentation so that you can search across all files. You can access this file by doing either of the following: On the Windows Start menu, click Start > Programs > Enterprise Vault > Documentation. In the Administration Console, click Help > Help on Enterprise Vault.

Symantec Enterprise Vault Help

Introduction and Planning

Provides an overview of Enterprise Vault functionality. Describes how to check the prerequisite software and settings before you install Enterprise Vault. Provides detailed information on setting up Enterprise Vault. Describes how to upgrade an existing Enterprise Vault installation to the latest version. Describes how to archive items from Microsoft Exchange user mailboxes, journal mailboxes, and public folders. Describes how to archive items from Domino mail files and journal databases. Describes how to archive the files that are held on network file servers.

Deployment Scanner

Installing and Configuring

Upgrade Instructions

Setting up Exchange Server Archiving

Setting up Domino Server Archiving

Setting up File System Archiving

Setting up SharePoint Server Archiving Describes how to archive the documents that are held on Microsoft SharePoint servers. Setting up SMTP Archiving Describes how to archive SMTP messages from other messaging servers. Describes how to perform day-to-day administration, backup, and recovery procedures.

Administrators Guide

About this guide Where to get more information about Enterprise Vault

21

Table 1-1 Document

Reporting

Enterprise Vault documentation set (continued) Comments

Describes how to implement Enterprise Vault Reporting, which provides reports on the status of Enterprise Vault servers, archives, and archived items. If you configure FSA Reporting, additional reports are available for file servers and their volumes. Describes the Enterprise Vault tools and utilities. A reference document that lists the registry values with which you can modify many aspects of Enterprise Vault behavior. The online Help for the Enterprise Vault Administration Console. The online Help for Enterprise Vault Operations Manager.

Utilities Registry Values

Help for Administration Console

Help for Enterprise Vault Operations Manager

For the latest information on supported devices and versions of software, see the Enterprise Vault Compatibility Charts book, which is available from this address: http://www.symantec.com/docs/TECH38537

"How To" articles on the Symantec Enterprise Support site

Most of the information in the Enterprise Vault administration manuals is also available online as articles on the Symantec Enterprise Support site. You can access these articles by searching the Internet with any popular search engine, such as Google, or by following the procedure below. To access the "How To" articles on the Symantec Enterprise Support site

Type the following in the address bar of your Web browser, and then press Enter: http://www.symantec.com/business/support/all_products.jsp

2 3 4

In the Supported Products A-Z page, choose the required product, such as Enterprise Vault for Microsoft Exchange. In the Product Support box at the right, click How To. Search for a word or phrase by using the Knowledge Base Search feature, or browse the list of most popular subjects.

22

About this guide Comment on the documentation

Comment on the documentation

Let us know what you like and dislike about the documentation. Were you able to find the information you needed quickly? Was the information clearly presented? Report errors and omissions, or tell us what you would find useful in future versions of our guides and online help. Please include the following information with your comment:

The title and product version of the guide on which you want to comment. The topic (if relevant) on which you want to comment. Your name.

Email your comment to [email protected]. Please only use this address to comment on product documentation. We appreciate your feedback.

Chapter

Managing administrator security

This chapter includes the following topics:

About administrator security Roles-based administration Using permissions to control access Changing the Vault Service account

About administrator security

Enterprise Vault provides the following mechanisms to control the abilities of Enterprise Vault administrators:

24

Managing administrator security Roles-based administration

Roles-based administration

Many administrative tasks do not require all the permissions that are associated with the Vault Service account. Roles-based administration enables you provide individual Enterprise Vault administrators with exactly the permissions that are required to perform their individual administrative tasks. You can assign individuals or groups to roles that match their responsibilities, and they are then able to perform the tasks that are included in those roles. Because the permissions are associated with roles rather than individual administrators, you can control the role permissions without having to edit the permissions for each administrator. There are two types of role: An administrator role typically limits your abilities by functional area, such as Messaging, Exchange, or Storage. Enterprise Vault provides several predefined administrator roles, which restrict your access within the Administration Console to the containers and commands that relate to a functional area. These roles also limit what you can see when you use Enterprise Vault Operations Manager and Enterprise Vault Reporting. An application role typically lets you perform the operations that are required to run a particular Enterprise Vault application. Application roles are not intended to control access to the Administration Console. Enterprise Vault provides one predefined application role, the Placeholder Application role. This role enables you to run the FSAUndelete utility.

Admin permissions

You can grant or deny access to the following containers in the Administration Console tree:

File Servers Exchange Domino SharePoint Enterprise Vault Servers

You can control access to the Administration Console by assigning administrator roles, or by using admin permissions, or both.

Roles-based administration
Use Microsoft Authorization Manager to configure roles for Enterprise Vault roles-based administration. All such configuration is performed using the Vault Service account.

Managing administrator security Roles-based administration

25

See Installing and Configuring for details of the prerequisite software that is needed to run Authorization Manager. For an introduction to using Authorization Manager, see the following article: http://technet2.microsoft.com/WindowsServer/en/Library/72b55950-86cc-4c7f8fbf-3063276cd0b61033.mspx Within Authorization Manager, roles are built up using operations and tasks, as follows:

An operation is a low-level permission that represents a privileged action or capability. When the Administration Console determines whether a role has access to perform a task, it is the operations associated with the role that are checked. Operations with names prefixed by "{STO}" or "{DIR}" are internal operations that do not affect the Administration Console display. Other, external operations control the view of the Administration Console that an administrator sees. A task is a group of operations that collectively provide sufficient permissions to do a particular job.

A role is a collection of tasks and, possibly, operations and other roles. Enterprise Vault supplies the following predefined administrator roles:
Messaging Administrator Responsible for the day-to-day administration of Exchange Server and Lotus Domino archiving. This administrator does not have access to other parts of the product, such as File Server archiving or SharePoint archiving. Responsible for the day-to-day administration of Lotus Domino archiving, including NSF migration. This administrator does not have access to other parts of the product, such as File Server archiving or SharePoint archiving. In Enterprise Vault Operations Manager, can view Domino information and parameters. Exchange Administrator Responsible for the day-to-day administration of Exchange Server archiving. This administrator does not have access to other parts of the product, such as File Server archiving or SharePoint archiving. In Enterprise Vault Operations Manager, can view Exchange Server information and parameters.

Domino Administrator

26

Managing administrator security Roles-based administration

File Server Administrator

Responsible for the day-to-day administration of File Server archiving. This administrator does not have access to other parts of the product, such as Exchange Server archiving or SharePoint archiving. Has a view of the Administration Console that concentrates on those components that are required to manage personal stores. In Enterprise Vault Operations Manager, can view Exchange Server information and parameters.

PST Administrator

NSF Administrator

Has a view of the Administration Console that concentrates on those components that are required to manage NSF files. In Enterprise Vault Operations Manager, can view Domino information and parameters.

SharePoint Administrator

Has a view of the Administration Console that concentrates on those components that are required to manage SharePoint archiving. Has a view of the Administration Console interface that concentrates mainly on those components that are required to keep storage running properly. This administrator does not have access to archiving policy settings for the various targets. Has a view of the Administration Console interface that concentrates mainly on those components that are required to keep indexing running properly. This administrator does not have access to archiving policy settings for the various targets. Can perform all the tasks in the other predefined administrator roles. Cannot perform reconfiguration tasks such as changing the Vault Service account or Directory SQL server.

Storage Administrator

Indexing Administrator

Power Administrator

Enterprise Vault provides one predefined task role:

Task Applications This role provides access to archives to allow an account other than the Vault Service account to run Exchange Server tasks. Enterprise Vault grants this role automatically when you configure an Exchange Server task to run under an account other than the Vault Service account.

Enterprise Vault provides one predefined application role:

Managing administrator security Roles-based administration

27

Placeholder Application

Able to run the FSAUndelete utility. This role enables the undeletion of items from archives.

You can use the predefined roles as supplied, customize them, or create new roles, as required. By assigning roles you can adjust the permissions of individual administrators to match their job responsibilities. The mechanism is flexible enough for you to be able to modify an individuals role to cope with any change in responsibility. You can assign roles to the following:

Windows Users and Groups. The results of an LDAP query. Application-specific groups. These are specific to Authorization Manager and can contain a mixture of users and groups. They can also be based on an LDAP query. The main benefit of using application groups is that there is no need to create new groups within Active Directory to support Enterprise Vault.

Enterprise Vault auditing does not log changes to role membership within Authorization Manager. If you require auditing of changes within Authorization Manager, assign Enterprise Vault roles to Windows security groups and enable Windows auditing of changes to those groups. Note: The predefined Placeholder Application role does not allow access to the Administration Console. Table 2-1 shows the Administration Console features and actions that are available to the supplied administrator roles.

28

Managing administrator security Roles-based administration

Table 2-1 Role

Messaging Admin

Administration Console features and actions Administration Console containers Administration Console actions available available

Targets: Exchange; Domino

Enable Mailbox Disable Mailbox

Policies: Exchange; Domino Journaling; Retention Categories Services: Task Controller

Tasks: Mailbox Archiving; Public Folder; Exchange Journaling; Advanced Features Exchange Provisioning; Domino Exchange Message Classes Mailbox Archiving; Domino Domino forms Journaling; Domino Provisioning Archives: Journal; Mailbox; Public Folder; Shared Domino Admin

Site Property tabs: General; Archiving Settings; Site Schedule Import NSF

Targets: Domino

Enable Mailbox Disable Mailbox

Policies: Domino; Retention Categories Services: Task Controller

Site Property tabs: General; Archiving Settings; Site Schedule Tasks: Domino Mailbox Archiving; Advanced Features Domino Journaling; Domino Domino forms Provisioning Archives: Domino Mailbox; Domino Journal Exchange Admin

Targets: Exchange

Enable Mailbox Disable Mailbox

Policies: Exchange; Retention Categories Services: Task Controller Tasks: Mailbox Archiving; Public Folder; Exchange Journaling; Exchange Provisioning Archives: Exchange Journal; Exchange Mailbox; Public Folder; Shared

Site Property tabs: General; Archiving Settings; Site Schedule Advanced Features

Exchange Message Classes

PST Admin Policies: PST Migration; Retention Site Property tabs: General; Site Categories Schedule Services: Task Controller Import Archive Tasks: Mailbox Archiving; PST Locator; PST Collector; PST Migrator Personal Store Management: All functions

Export Archive Advanced Features

Managing administrator security Roles-based administration

29

Table 2-1 Role

Administration Console features and actions (continued) Administration Console containers Administration Console actions available available

NSF Admin Policies: Domino Mailbox; Domino Import NSF Desktop; Retention Categories Domino forms Archives: Import NSF File Server Admin
Site Property tabs: General; Archiving Settings; Site Schedule Policies: File Archiving; Retention Advanced Features Categories Services: Task Controller

Targets: File Server

Tasks: File Server Archiving Archives: File System; Shared

SharePoint Targets: SharePoint Admin Policies: SharePoint; Retention Categories Services: Task Controller

Enable Workspace Disable Workspace

Tasks: SharePoint Archives: SharePoint; Shared Services: Storage; Indexing Archives: All types of archive Vault stores: All vault stores

Site Property tabs: General; Archiving Settings; Site Schedule Advanced Features

Storage Admin

Site Property tabs: General; Archiving Settings; Site Schedule; Storage Expiry Import Archive

Export Archive Advanced Features Enable Mailbox Disable Mailbox Enable Workspace Disable Workspace Site Property tabs: All tabs Import Archive Export Archive Import NSF Advanced Features Exchange Message Classes Domino forms

Power Admin

Targets: All targets Policies: All policies Services: All services Tasks: All tasks Archives: All types of archive Vault stores: All vault stores Indexing: All indexing servers Personal Store Management: All functions

30

Managing administrator security Roles-based administration

Roles and Enterprise Vault Operations Manager

Any user other than the Vault Service account must be assigned to a suitable administrator role to access the Enterprise Vault Operations Manager Web application. Users can view only the tabs and tables in Operations Manager that are applicable to the role to which they are assigned. The tabs and tables that are available for a role are consistent with the containers that are available to that role in the Administration Console. The Power Administrator role is able to see all the tabs and tables in Operations Manager.

Roles and Enterprise Vault Reporting

Any user other than the Vault Service account must be assigned to a suitable administrator role to access Enterprise Vault Reporting's reports. The following roles do not have access to any reports:

SharePoint Administrator NSF Administrator PST Administrator

The other default administrator roles have access to the Enterprise Vault Reporting reports that are appropriate to their role. For information on the reports available to each role, see the Reporting guide. Note: If you have configured Enterprise Vault Reporting, you must enable the synchronization of Enterprise Vault Reporting roles-based security. See "Enabling the synchronization of Enterprise Vault Reporting roles-based security" in the Reporting guide.

Assigning roles for administration

The Vault Service account can perform all Enterprise Vault management operations and is not restricted in any way. Initially, the Vault Service account is the only account that can create roles and assign them to lower-level administrators. Note: If you have configured Enterprise Vault Reporting, you must enable the synchronization of Enterprise Vault Reporting roles-based security. See "Enabling the synchronization of Enterprise Vault Reporting roles-based security" in the Reporting guide.

Managing administrator security Roles-based administration

31

To assign a role to a user or group

1 2

In the Administration Console, right-click the Directory container and click Authorization Manager. In the Authorization Manager window, under Enterprise Vault, click Role Assignments. If role you want to use is not listed, right-click Role Assignments and, on the shortcut menu, click Assign Roles. The Add Role listing shows the roles you can select. Select the required role and click OK.

Right-click the role to which you want to assign users and then, on the shortcut menu, click Assign Application Groups or Assign Windows Users and Groups. If chose Assign Application Groups, check the users or groups you want to add to the role, and then click OK. If you chose Assign Windows Users and Groups, the standard Windows Select Users, Computers or Groups dialog appears. Select the required users or groups and then click OK to close the dialog box. In the Authorization Manager File menu, click Exit. Click Yes to confirm that you want to save your changes to the Directory database. The changes take approximately one minute to be replicated to all Enterprise Vault servers, and to any SQL Server Reporting Services servers on which Enterprise Vault Reporting is configured. Wait a minute if you want to start Authorization Manager again to make further changes. Administration Consoles do not reflect the assignment changes until they are restarted. After you perform role assignments, administrators may receive role-related error messages until they restart the Administration Console.

4 5

Modifying a role for administration

You can modify the tasks, roles, and operations that are associated with a role definition. Note: If you have configured Enterprise Vault Reporting, you must enable the synchronization of Enterprise Vault Reporting roles-based security. See "Enabling the synchronization of Enterprise Vault Reporting roles-based security" in the Reporting guide.

32

Managing administrator security Roles-based administration

To modify a role

1 2 3 4 5 6 7

Using Vault Service account, start the Administration Console. Right-click the Directory container and, on the shortcut menu, click Authorization Manager. In the Authorization Manager window, under Enterprise Vault, expand Definitions. Click Role Definitions. In the list of role definitions, double-click the name of the role you want to modify. In the role properties, click the Definition tab. The list shows the tasks and roles that comprise this role definition. To remove a task or role from the definition, click the task or role and then click Remove. The task is removed immediately, without any confirmation prompt.

To add a task or role to the definition, do the following in the order listed:

Click Add. The Add Definition window appears. To add roles to the definition, check each role to add. To add tasks to the definition, click the Task tab and then check each task to add. To add operations, click the Operations tab and then check each operation to add. Instead of adding individual operations to a role, we recommend that you use tasks to create custom roles. The tasks contain the correct combination of internal and external operations. Click OK to close the Add Definition window.

Managing administrator security Roles-based administration

33

Click OK to close the definition properties window. your changes to the Directory database. The changes take approximately one minute to be replicated to all Enterprise Vault servers, and to any SQL Server Reporting Services servers on which Enterprise Vault Reporting is configured. Wait a minute if you want to start Authorization Manager again to make further changes. Administration Consoles do not reflect the assignment changes until they are restarted. After you modify a role, administrators may receive role-related error messages until they restart the Administration Console.

10 On the File menu, click Exit, and click Yes to confirm that you want to save

Creating a new role for administration

You can create new roles, adding other roles, tasks, and operations, as required. You can create roles from a combination of existing roles and tasks. Note: It is not advisable to add individual operations to a role. We recommend that you use tasks to create custom roles. The tasks contain the correct combination of internal and external operations. Adding unnecessary internal operations to a role reduces the security of that role.

Note: If you have configured Enterprise Vault Reporting, you must enable the synchronization of Enterprise Vault Reporting roles-based security. See "Enabling the synchronization of Enterprise Vault Reporting roles-based security" in the Reporting guide. To create a new role

1 2 3 4 5

Using Vault Service account, start the Administration Console. Right-click the Directory container and, on the shortcut menu, click Authorization Manager. In the Authorization Manager window, under Enterprise Vault, expand Definitions. Right-click Role Definitions and, on the shortcut menu, click New Role Definition. In the Role Definition window, enter a Name and Description for the new role.

34

Managing administrator security Using permissions to control access

6 7

Click Add to add roles, tasks, or operations to the role. When you have finished, in the Authorization Manager File menu click Exit. Click Yes to confirm that you want to save your changes to the Directory database. The changes take approximately one minute to be replicated to all Enterprise Vault servers, and to any SQL Server Reporting Services servers on which Enterprise Vault Reporting is configured. Wait a minute if you want to start Authorization Manager again to make further changes. Administration Consoles do not reflect role assignment changes until they are restarted. Administrators may receive role-related error messages until they restart the Administration Console.

Determining your current role entitlements

If you need to find out what your current role is, and which tasks you can perform, you can list the role entitlements. To list your role entitlements

1 2 3

In the Administration Console, right-click the Directory container and, on the shortcut menu, click Show Roles. If you want to keep a copy of the list, click Copy to clipboard. You can then paste the text into a document or mail message as required. Click OK.

Resetting all roles and assignments

You can use a registry value to reset all the roles and role assignments so that they are the same as they were when installed. See the description of the ResetAuthorizationStore value in the Registry Values manual.

Using permissions to control access

When you install or upgrade to Enterprise Vault 9.0, only the Vault Service account has access to the Administration Console. You can then use the Vault Service account to assign administrative roles as required. An administrator in any given role has access to all Administration Console containers that are relevant to that role. For example, a Messaging Administrator has access to every Exchange Server and Domino server in the Enterprise Vault Site.

Managing administrator security Using permissions to control access

35

You can assign administrator permissions to grant or deny access to individual containers in the Administration Console. For example, you can grant an administrator access to a single Exchange Server computer. You can assign permissions to grant or deny access to any of the following Administration Console containers:

A file server An Exchange Server A Domino Server A SharePoint Web application An Enterprise Vault server

As soon as you modify a containers permissions, access to that container and its contents is controlled by the list you defined. The only exception to this is that the Vault Service account always has access. For example, a Messaging Administrator who does not have access to a particular Exchange Server cannot enable mailboxes on that Exchange Server. This is because the Enable Mailbox wizard does not allow the administrator to list the mailboxes on that Exchange Server. If you need to return to the state in which all administrators have access to a container, you must delete all entries in the administrator permissions list for that container. To grant or deny permission to access a container

1 2

Using Vault Service account, start the Administration Console. In the Administration Console, right-click the file server, Exchange Server, SharePoint Web application, or Enterprise Vault server to which you want to apply permissions and, on the shortcut menu, click Properties. Click the Admin Permissions tab. The list shows the specific users or groups who have been granted or denied permission to administer this computer. If you want to add an entry to the list, click Add and then proceed as follows:

3 4

If you are adding the first entry on the list, there is a warning that adding an entry to the list restricts access to those users with Grant access. Click OK. In the Add Users and Groups window, add the users or groups to whom you want to grant or deny access to the container. Click OK. The Admin Permissions list now shows the users and groups you have added, with a Grant and Deny option next to each.

36

Managing administrator security Changing the Vault Service account

5 6 7 8

If you want to remove an entry from the list, click the entry to select it and then click Remove. For each user and group, select Grant to grant access to this container, or Deny to deny access to this container, as required. If you need to delete an entry from the list Click OK to close Admin Properties. If you have removed all entries from the list there is a warning that all administrators in a role that allows access to this container now have access. Click OK.

Changing the Vault Service account

If you need to change the Vault Service account, this section describes how to proceed. Note: You are recommended not to change the account name if possible, because of the amount of work involved, and the potential for introducing mistakes that take time to rectify. Before you change the account, ensure that the following apply:

The new Vault Service account is part of the Administrators group, with permission Full Control (All), on each Enterprise Vault computer in the Enterprise Vault Site. If Exchange Server archiving is implemented, the new account has full permissions on the Microsoft Exchange Server. The Microsoft Message Queue security has been set up to grant the Administrators group access to the Enterprise Vault queues. The new account has database creator access on the SQL server. If you use the Enterprise Vault FSA Agent, ensure that the new account is a local administrator on each computer on which the FSA Agent is installed. In addition, ensure that the account has the required privileges on the computer. See Setting permissions for FSA on a Windows file server in Setting up File System Archiving. If SharePoint Server archiving is implemented, add the new Vault Service account to the SharePoint sites, or to the group that contains the old Vault Service account. The new account must be a local administrator on the SharePoint Servers.

Managing administrator security Changing the Vault Service account

37

For instructions on how to set permissions for the Vault Service account, see Enterprise Vault prerequisite software and settings in Installing and Configuring. Note the following:

Always use the Administration Console to specify a new password for the Vault Service account or to change the Vault Service account itself. Do not use the Windows Services MMC snap-in to edit the logon credentials for an Enterprise Vault service unless you are instructed to do so. If you ever change the password of the Vault Service account, and you have installed an add-on such as Enterprise Vault Discovery Collector, then you may also need to change the user account credentials of the Vault Service account in the add-on. See the documentation that accompanies the add-on for more information. If you change only the password of the Vault Service account, and you have installed the FSA Agent on any computers, you must update the logon credentials that the FSA Agent services use. See Updating the logon credentials of the FSA Agent services in Setting up File System Archiving.

To change the Vault Service account

1 2 3 4 5

Start the Administration Console as the existing Vault Service account. In the Administration Console, open Directory Properties and click the Service Account tab. Change the Vault Service account details to reference the new account. On SharePoint servers, run the Enterprise Vault SharePoint Configuration wizard and specify the new Vault Service account credentials. If you have installed any add-ons such as Enterprise Vault Discovery Collector, you may need to change the Vault Service account credentials in the add-on. See the documentation that accompanies the add-on for information on how to do this. Restart all Enterprise Vault services on all Enterprise Vault servers in the Enterprise Vault Site. Restart the Enterprise Vault services on any other computers that have Enterprise Vault services installed. This includes the FSA Agent services on any computers that have the FSA Agent installed.

6 7

38

Managing administrator security Changing the Vault Service account

Chapter

Day-to-day administration
This chapter includes the following topics:

Monitoring the system status Monitoring application logs Monitoring MSMQ queues About starting or stopping tasks or services Checking logs with the Windows Event Viewer Monitoring journal mailboxes About monitoring disks About maintaining the SQL databases About managing vault store groups and sharing About managing safety copies About managing partition rollover Recovering deleted items About expiry and deletion Creating a new retention category About maintaining provisioning groups Enabling archiving for new mailboxes About moving archives Deleting an archive

40

Day-to-day administration Monitoring the system status

Deleting a vault store Setting a system message About index volumes Moving the directory database Moving a vault store database Moving a fingerprint database Moving the Monitoring database Moving the audit database

Monitoring the system status

Enterprise Vault automatically runs checks to monitor the health of the Enterprise Vault system. Enterprise Vault displays the results of the checks in the Status section of the Administration Console. Check the status results every day and fix any problems that are shown. To customize the checks for your environment you can do the following:

1 2 3

Choose which checks to run. Modify the levels at which the checks report errors. Specify when to run each check.

See Monitoring in Site Properties on page 182.

Monitoring application logs

Messages from the various Enterprise Vault services and tasks go into the event logs on their respective computers. You need to check each of these logs for error messages and take appropriate action as necessary. When using the Event Viewer, you can filter the messages using the options on the View menu. All the messages have a category of Enterprise Vault. Table 3-1 shows the event logs that Enterprise Vault uses.

Day-to-day administration Monitoring MSMQ queues

41

Table 3-1 Event log

Application Log

Enterprise Vault event logs Contents

Critical log entries. These are entries that either show that Enterprise Vault components have started or stopped, or are entries that require you to take some corrective action. All Enterprise Vault log entries, except for those from document conversion. Entries that are placed in the Application Log also appear in here. Log entries resulting from document conversions.

Symantec Enterprise Vault

Enterprise Vault Converters

Monitoring MSMQ queues

It is important that you monitor MSMQ queues so that you can quickly spot any problems that may occur. To monitor the performance of the queues:

Use the Windows Performance Monitor You may find it useful to have the Windows Performance Monitor running continuously, showing the number of messages on all the queues. See Accessing Enterprise Vault message queues on page 281.

You will quickly become used to the normal behavior of the queues and will notice excessive backlogs. Investigate the cause of any such backlogs promptly.

About starting or stopping tasks or services

You may want to stop an Enterprise Vault task or service for many possible reasons, such as when you do any of the following:

Changing tasks, policies, or service settings. For many of the service settings you must stop and restart one or more services before the new settings come into effect. For details of which settings require a restart to take effect, see the help for the property pages of each service and task. Changing hardware configurations. Reconfiguring a service. Troubleshooting.

42

Day-to-day administration About starting or stopping tasks or services

Starting or stopping tasks

You can start and stop tasks from the Administration Console. To start a task

1 2 3

In the left pane of the Administration Console, expand Enterprise Vault Servers. Expand the name of the computer that runs the task you want to start. Click Tasks. The right pane shows the tasks on that computer.

4 5

In the right pane, click the task you want to start. Do one of the following:

Click Start the Task on the toolbar. Right-click the name of the task and then, on the shortcut menu, click Start.

To stop a task

1 2 3

In the left pane of the Administration Console, expand Enterprise Vault Servers. Expand the name of the computer that runs the task you want to stop. Click Tasks. The results pane shows the tasks on that computer.

4 5

In the right pane, click the task you want to stop. Do one of the following:

Click Stop the Task on the toolbar. Right-click the name of the task and, on the shortcut menu, click Stop.

Starting or stopping services

You can start and stop services from both the Administration Console and the Windows Service Control manager. Note that there is a command-line utility, EVservice, with which you can start and stop local and remote Windows services. EVservice is useful if you have a backup procedure that you want to automate. The utility is in the Enterprise Vault program folder (for example C:\Program Files (x86)\Enterprise Vault). See the Utilities manual for guidelines on how to use it.

Day-to-day administration Checking logs with the Windows Event Viewer

43

To start a service

1 2 3

In the left pane of the Administration Console, expand Enterprise Vault Servers. Expand the name of the computer that is running the service that you want to start. Click Services. The right pane shows the services on that computer.

4 5

In the right pane, click the service you want to start. Do one of the following:

Click Start the Service on the toolbar. Right-click the name of the service and then, on the shortcut menu, click Start.

To stop a service

1 2 3

In the left pane of the Administration Console, expand Enterprise Vault Servers. Expand the name of the computer that runs the service you want to stop. Click Services. The results pane shows the services on that computer.

4 5

In the right pane, click the service you want to stop. Do one of the following:

Click the Stop the Service button on the toolbar. Right-click the name of the service and then, on the shortcut menu, click Stop.

Checking logs with the Windows Event Viewer

Enterprise Vault services and tasks all write their diagnostic logging information to the standard Enterprise Vault Event Log. You can view the event log by using the standard Windows Event Viewer. The amount of diagnostic logging information output depends on the diagnostic logging level you set for that service or task. Enterprise Vault generates many log entries. You must take some action to make sure that the log files do not grow too large.

44

Day-to-day administration Monitoring journal mailboxes

The Windows Event Viewer provides the following ways to ensure that the log files are the proper size:

The default setting for the Event Viewer is for new events to replace old events. This ensures that all events are logged. You can specify a length of time to keep all log entries before they can be overwritten. You can set a maximum size for the log file, to make sure that the log file contains as much history as you are likely to need. You can keep all log entries and clear the log file manually, using the Event Viewer.

If you have purchased a suitable reporting tool, you can use information from the Application Log in your own, customized reports. For more information on controlling log files, see the Event Viewer help. To run the Windows Event Viewer

1 2

On the Windows Start menu, click All Programs > Administrative Tools > Event Viewer. In the left pane of the Event Viewer, click Application or Symantec Enterprise Vault, or Symantec Enterprise Vault Converters. The Event Viewer loads the log you selected.

Monitoring journal mailboxes

You can set up Enterprise Vault so that it archives all messages that the Microsoft Exchange Server system sends and receives, provided that the messages are passed to one or more specific Microsoft Exchange journal mailboxes. The Exchange Journaling task runs continuously, checking for items in journal mailboxes and immediately archiving them. These items are deleted from the mailbox as they are archived and no shortcuts are created. It is important that you monitor journal mailboxes to make sure that items are archived promptly. It is especially important that you do this if you have suffered some sort of system failure which required a system restart. If you are running an Exchange Journaling task, messages in the journal mailbox should be archived soon after they arrive in the mailbox. To check a journal mailbox

1 2

Run Microsoft Exchange Client or Microsoft Outlook. Log on to a profile that has access to the journal mailbox.

Day-to-day administration Monitoring journal mailboxes

45

Check that there are no messages in the Inbox folder that are older than one day. If there are any messages older than one day, then there is likely to be a problem. Look in the following Failed to... folders, which are under the Enterprise Vault Exchange Journaling Task folder:
Failed to store Contains the messages that cannot be archived. They probably failed because of a problem with the Storage service. You can move all these items back to the Inbox folder and the Exchange Journaling task tries again to archive them. Contains the messages that are probably corrupt. Try dragging them to your desktop and then, when they are on the desktop, double-clicking them. You may find that the messages are now not corrupt. If you drag them from your Desktop to the Inbox folder, the Exchange Journaling task tries to archive them again. Remember to delete the corrupt versions from the Failed to copy folder. Failed DL Expansion Contains the items that cannot be archived because Enterprise Vault is unable to expand their distribution lists. To fix the problem, do one of the following:

Failed to copy

Failed Codepage nnn

Install the missing codepage. Use the default ANSI codepage (ACP codepage).

These tasks are described below. When you have set up codepages correctly, move the failed messages back to the Journal Inbox so that they are processed again. Failed External Filter Contains the messages that cannot be processed by a custom filter. Check the Enterprise Vault Event Log to determine the cause of the problem. Also check that the rule set file references the correct XML schema.

46

Day-to-day administration About monitoring disks

To add the codepage

1 2 3

Install the required codepage on the Exchange Journaling task computer. To prevent a similar problem from happening on Exchange Mailbox task computers, install the codepage on each Exchange Mailbox task computer. If you use a building blocks configuration, repeat the changes on every Enterprise Vault server in your site.

Use the default ANSI codepage (ACP codepage)

Enterprise Vault has a list of codepages in the file CodePages.txt, which is installed in the Enterprise Vault program folder (for example C:\Program Files (x86)\Enterprise Vault). You can force Enterprise Vault to use the default ANSI codepage (ACP codepage) by deleting the appropriate codepage entry from the file. If you find that the ACP codepage does not give you good conversions, replace the entry in Codepages.txt and install the missing codepage. To delete a codepage entry

1 2

Edit CodePages.txt on the Exchange Journaling task computer to remove the entry for the codepage that caused the problem. To prevent a similar problem happening on Exchange Mailbox task computers, make the same change to CodePages.txt on each Exchange Mailbox task computer. If you use a building blocks configuration, repeat the change on every Enterprise Vault server in your site.

About monitoring disks

You need to check that there is enough free space on the disks that contain the vault stores and indexes. Just how much space you need depends on your use of Enterprise Vault. However, during the course of monitoring, you will quickly get used to the rate at which the various Enterprise Vault databases consume disk space.

Checking disk space for vault stores

You must ensure that there is enough disk space for the vault store databases. When your Enterprise Vault installation has reached its normal running state, you can estimate the rate at which disk space is consumed and so be able to plan accordingly.

Day-to-day administration About monitoring disks

47

If a disk is running out of space, you can use SQL Enterprise Manager to create a new SQL device on another disk and then expand the database on to the new device.

How the Admin service monitors disk space

The Admin service runs automatically when any other Enterprise Vault service starts. The main task of the Admin service is to monitor the following:

Free space on local hard disks. By default, the Admin service monitors all local hard disks, but you can restrict it to specific disks if required. The amount of available virtual memory.

The Admin service has a warning threshold and a critical threshold for each type of check. When the warning threshold is reached, the Admin service writes a warning message to the Windows Application Log. When the critical threshold is reached, the Admin service stops all Enterprise Vault services. Stopping Enterprise Vault before problems arise helps to maintain its stability. However, it is important to watch the Application Log for Enterprise Vault messages so that you can take corrective action as necessary. Table 3-2 describes the thresholds that the Admin service uses. Table 3-2 Check Admin service thresholds Warning threshold Critical threshold
99% full

Example of message
Warning message: The system is running out of disk space on drives C: and D: - delete any unwanted files. Enterprise Vault will be shut down when 99% of the disk space is used. Critical message: Insufficient disk space is available on drive C: for Enterprise Vault to run. Enterprise Vault will now be shut down; to correct this problem, delete any unwanted files and restart Enterprise Vault.

Free space on local 95% full hard disks

48

Day-to-day administration About monitoring disks

Table 3-2 Check

Virtual memory

Admin service thresholds (continued) Warning threshold

90% of limit

Critical threshold
95% of limit

Example of message
Warning message: The system is running out of Virtual Memory - free memory by closing any unwanted applications. Enterprise Vault will be shut down when 95% of Virtual Memory is used.

Modifying the Admin service

You do not normally need to make any changes to the Admin service. However, there may be occasions when you want to turn off or modify the monitoring. For example, you may have a disk on the system that is nearly full but that Enterprise Vault does not use. The Admin service monitors all local disks, so it may stop Enterprise Vault even though Enterprise Vault has enough space. In such circumstances you probably want to stop monitoring the disk. Note: Do not stop the Admin service unnecessarily. Enterprise Vault requires the Admin service to be present at all times. If you do stop the Admin service, all the other Enterprise Vault services on the same computer stop as well. Also, if you start one of the other services and the Admin service is not running, the Admin service automatically starts. To pause monitoring by the Admin service

1 2 3

In the Windows Control Panel, double-click Services. In the list of services, click Enterprise Vault Admin Service. On the Action menu, click Pause. To resume monitoring, click Resume on the Action menu.

To modify the behavior of future instances of the Admin service

1 2 3 4

In the Windows Control Panel, double-click Services. In the list of services, double-click Enterprise Vault Admin Service. If the Admin service is running, click Stop, and then click Yes when prompted to stop other Enterprise Vault services. In the Start Parameters box, type the parameters to use.

Day-to-day administration About monitoring disks

49

To specify the disks that the Admin Type the following start parameter: service should monitor. By default, the /DISKS[=list] service monitors all local hard disks. where list specifies one or more disks to monitor. Do not include any spaces or tabs in the list. The colon (:) in the disk name is optional. For example, to monitor disks C, E, and F only, type either of the following: /DISKS=C:E:F: /DISKS=CEF To make this apply every time the Admin service starts, add the /SAVE parameter as follows: /DISKS=C:E:F: /SAVE /DISKS=CEF /SAVE To monitor all disks (this restores the default behavior), type the following: /DISKS To turn off monitoring for the instance Type the following start parameter: of the Admin service that will start /NOMONITOR when you click Start in the Services control panel. To turn off monitoring every time the Type the following start parameter: Admin service starts. /NOMONITOR /SAVE To turn on monitoring for the instance Type the following start parameter: of the Admin service that will start /MONITOR when you click Start in the Services control panel. To turn on monitoring every time the Admin service starts. To apply the changes every time the Admin service starts. Type the following start parameter: /MONITOR /SAVE Type the following start parameter: /SAVE For example, to monitor disks E and F every time the Admin service starts, type the following: /DISKS=EF /SAVE

50

Day-to-day administration About maintaining the SQL databases

5 6

Click Start to start the Admin service. Start other Enterprise Vault services as necessary.

Disk space and indexes

If you are running out of disk space for indexes, you can create new index locations for the Indexing service to use to store its indexes. You can add more locations if needed. When you add a new location, the Indexing service may choose to use it when creating indexes for a new archive. If you want to force the Indexing service to use a particular location, use Close Location to close all the other locations, thus leaving just one location open. When you close a location, you prevent the Indexing service from creating new indexes there. This does not stop the Indexing service from adding to existing indexes, so you must take action before space runs out.

About maintaining the SQL databases

You can use Microsoft SQL Enterprise Manager to maintain all the Enterprise Vault databases, but if you have other tools that you prefer to use, you can use those instead. For more information on using Microsoft SQL Enterprise Manager, see the Microsoft SQL Server documentation. Back up all the databases as part of a planned backup procedure. Depending on your procedures, you may decide to truncate the transaction logs after each database has been backed up. See About Enterprise Vault backups on page 323. You may find that the transaction logs do not need all the disk space that has been allocated to them. If so, you can shrink them to some suitable size. Do not do this until you are sure that you have understood the disk space requirements for the transaction logs.

Vault store database maintenance

Monitor the amount of allocated space that the vault store databases and transaction logs have used, and take appropriate action as necessary. The initial size of each vault store database is as follows:
Data device Transaction log 100 MB 80 MB

Day-to-day administration About maintaining the SQL databases

51

Total

180 MB

The vault store database components are named as follows:

Database name Data device name Log device name EVVSvaultstore_n EVVSvaultstore_n EVVSvaultstore_nLOG

The variables in the names are as follows:

vaultstore is the name of the vault store, with any spaces removed. n is an internally generated integer, which ensures that the database name is unique across an Enterprise Vault site.

Directory database maintenance

The directory database contains the configuration information for Enterprise Vault. The initial size for the data device of 10 megabytes was chosen to support 10,000 archives. This database is not likely to increase much in size. The initial size of the directory database is as follows:
Data device Transaction log Total 10 MB 25 MB 35 MB

The directory database components are named as follows:

Database name Data device name Log device name EnterpriseVaultDirectory VaultDev VaultLog

Fingerprint database maintenance

Each vault store group has a fingerprint database. One possible exception is the Default Upgrade Group, which Enterprise Vault creates if you previously upgraded to Enterprise Vault 8.0. The Default Upgrade Group does not have a fingerprint database until you configure sharing for it. The total initial disk space requirement is 244 MB.

52

Day-to-day administration About maintaining the SQL databases

The fingerprint database holds information about each Enterprise Vault single instance storage part (SIS part) that is stored in the group's vault stores. In addition to the primary filegroup, a fingerprint database has 32 non-primary filegroups, which hold the information about the SIS parts. If you share items using Enterprise Vault single instance storage, Enterprise Vault generates a large amount of SIS part data. The non-primary filegroups may therefore grow very rapidly in size. To ensure acceptable archiving and retrieval performance, you must locate the non-primary filegroups appropriately for the amount of sharing in the vault store group. You can configure the filegroup locations when you create the vault store group, or when you configure sharing for the Default Upgrade Group. See "Creating vault store groups" and "Configuring sharing for a vault store group" in Installing and Configuring. To add or change the filegroup locations after the fingerprint database is configured is a SQL Server administration task. See your Microsoft SQL Server documentation for details. The initial size of the fingerprint database is as follows:
Primary filegroup Non-primary filegroups Transaction log Total 132 MB 32 MB (1 MB for each of the 32 non-primary filegroups)

80 MB 244 MB

The fingerprint database components are named as follows:

Database name Data device name Log device name EVVSGvaultstoregroup_n_m EVVSGvaultstoregroup_n_m EVVSGvaultstoregroup_n_mLOG

The variables in the names are as follows:

vaultstoregroup is the name of the vault store group, with any spaces removed. n and m are internally generated integers.

Day-to-day administration About managing vault store groups and sharing

53

Monitoring database maintenance

The Monitoring database contains the data that is gathered by the Enterprise Vault Monitoring agents. The data is used by Enterprise Vault Operations Manager, and in some of the reports generated by Enterprise Vault Reporting. Ensure that there is adequate space for the database to grow as data is added. The initial size of the Monitoring database is as follows:
Data device Transaction log Total 100 MB 80 MB 180 MB

The Monitoring database components are named as follows:

Database name Data device name Log device name EnterpriseVaultMonitoring EnterpriseVaultMonitoring_Data EnterpriseVaultMonitoring_Log

FSA Reporting database maintenance

Enterprise Vault creates at least one FSA Reporting database if you configure FSA Reporting. The data is used in the Data Analysis reports that FSA Reporting generates. See "Maintaining the FSA Reporting databases" in the Enterprise Vault Reporting guide.

About managing vault store groups and sharing

This section describes how to do the following:

View the status of the vault stores in a vault store group. Change the sharing level of a vault store. Move a vault store to a different vault store group. Delete a vault store group. Monitor the fingerprint databases. Monitor the archive space reduction due to single instance storage.

54

Day-to-day administration About managing vault store groups and sharing

You must back up each vault store group's fingerprint database as part of your backup regime. See About Enterprise Vault backups on page 323. Note: For information on how to create vault store groups and vault stores, and how to set up a sharing regime that is suitable for your organization, see "Setting up Storage" in Installing and Configuring.

Viewing the status of the vault stores in a vault store group

The Administration Console shows a summary of the status of each vault store in a vault store group. To view a status summary for the vault stores in a vault store group

1 2

In the Administration Console, expand the Site and then expand Vault Store Groups. In the left pane, click the Vault Store Group for which you want to see details. The right pane of the Administration Console lists the details of each vault store in the group. To refresh this view at any time, click F5. Enterprise Vault displays the following information for each vault store in the group:

Name: The name of the vault store. Status: The status of the vault store. The status is either Available or Marked for deletion. Backup Mode: If the vault store is in backup mode, "Yes" appears in this column. To place a vault store in backup mode, or to clear it from backup mode, right-click the vault store and select "Set backup mode" or "Clear backup mode". Sharing Type: Indicates the vault store's sharing level. You can change a vault store's sharing level from the Sharing tab of its parent Vault Store Group's properties. See Changing the sharing level of a vault store on page 55. Computer: The computer whose Enterprise Vault Storage service the vault store uses. Removal Status: The remove safety copy setting. This setting determines when Enterprise Vault deletes the safety copy it makes as part of the archiving process. You can change the safety copy setting from the General tab of the vault store's properties.

Day-to-day administration About managing vault store groups and sharing

55

To see more details for a particular vault store, right-click the vault store and select Properties.

Changing the sharing level of a vault store

You can change the sharing level of any vault store within a vault store group. You can also configure all vault stores to use a specific sharing level, including any new vault stores that you add to the group. The sharing level of a vault store must be one of the following:

No sharing. The vault store does not participate in Enterprise Vault single instance storage. Share within Vault Store. The vault store shares SIS parts only within itself. Share within group. The vault store shares SIS parts with other vault stores in the group that also have the Share within group sharing level.

To change the sharing levels you must run the Configure Sharing wizard on the vault store group. The vault store group must contain at least one vault store. Note: You can rerun the Configure Sharing wizard at any time, but changes you make to the vault store sharing levels do not act retrospectively. To configure sharing for a vault store group

1 2 3 4

In the left pane of the Administration Console, expand the Enterprise Vault site hierarchy until Vault Store Groups is visible. Expand the Vault Store Groups container to show the existing vault store groups. Right-click the vault store group for which you want to configure sharing, and on the shortcut menu click Properties. Click the Sharing tab. The Sharing tab lists the vault stores in the vault store group, and their current sharing levels.

Click Configure Sharing. The Configure Sharing wizard starts.

6 7

In the special case of the Default Upgrade Group, Enterprise Vault helps you to configure a fingerprint database for the group, if one does not exist already. The Configure Sharing wizard takes you through the steps to configure sharing levels for the vault stores in the vault store group. You can set the

56

Day-to-day administration About managing vault store groups and sharing

vault store sharing levels individually, or apply a sharing level to all the current vault stores. If you change one or more vault store sharing levels to Share within vault store or Share within group, the wizard prompts you to run a connectivity test before the wizard makes any changes. The connectivity test helps to determine whether the network connectivity is sufficient to support the sharing configuration you have selected. The wizard makes no changes until you click Finish on the final page of the wizard. If the connectivity test shows poor results you may want to do one of the following:

Click Back, modify the vault store sharing levels and rerun the connectivity test. Click Cancel to discard your changes.

For more information on the connectivity test, see the Administration Console help for the Configure Sharing wizard.

Moving a vault store to a different vault store group

In most cases you cannot move a vault store to a different vault store group. You can move a vault store to a different vault store group only if all of the following circumstances apply:

You previously upgraded to Enterprise Vault 8.0. The vault store is one that Enterprise Vault upgraded to Enterprise Vault 8.0, or one that you created in the Default Upgrade Group. The vault store's sharing level is "No sharing" and has never been changed.

Note that when you move a vault store, it retains the sharing level "No sharing". To move a vault store to another vault store group

Right-click the vault store and select Change Vault Store Group from the shortcut menu. The Change Vault Store Group wizard starts.

Work through the Change Vault Store Group wizard. For more information, see the help that is provided with the wizard.

Day-to-day administration About managing vault store groups and sharing

57

Deleting a vault store group

You can delete a vault store group if you no longer want to use its vault stores and their associated archives. Deletion permanently removes all the partitions and archives that the vault stores contain, and all the items that are stored in these partitions and archives. You can delete a vault store group only if all of the following conditions apply to every vault store in the group:

It is not a default vault store for automatically-enabled archives. It does not contain any archives that are associated with archiving targets. Its status is Available. It is not in backup mode.

When you delete a vault store group, the status of each vault store changes to Marked for deletion. Shortcuts to items within the vault stores' archives no longer work. Enterprise Vault may take a long time to complete the deletion operation. If a vault store contains any items that are on legal hold, or any SIS parts that are referenced by other vault stores, Enterprise Vault marks the vault store for deletion but it does not delete the vault store or the group until these conditions no longer apply. Note: If you delete a vault store group, you cannot stop or undo the process. The action overrides any form of deletion protection that is applied to items or Retention Categories, other than legal hold. To delete a vault store group

1 2

In the Administration Console, select the vault store group that you want to delete. The right pane of the Administration Console displays the status of the group's vault stores. Click F5 to refresh the view. The right pane displays each vault store's current status, and indicates whether backup mode is set. You can only delete a vault store if the status is Available and backup mode is not set.

58

Day-to-day administration About managing vault store groups and sharing

3 4

Right-click the vault store group and select Delete from the shortcut menu. On the warning dialog, click Delete. The status of each vault store in the group changes to Marked for Deletion. The icon for the Vault Store Group also changes to indicate that it is marked for deletion. When Enterprise Vault eventually completes the deletion, it removes the vault stores and the vault store group from the Administration Console.

Monitoring the fingerprint databases

If you enable monitoring on the Monitoring tab of the Site Properties, a number of alerts are available for the vault store group fingerprint databases. These alerts are as follows:

Vault Store fingerprint database backup. The number of days before Enterprise Vault issues a warning about a fingerprint database that is not backed up. The default value is 3. Vault Store fingerprint database log backup. The number of days before Enterprise Vault issues a warning about a fingerprint database transaction log that is not backed up. The default value is 1. Vault Store fingerprint database log size. The percentage of available space that a fingerprint database transaction log can occupy before Enterprise Vault issues a warning about space usage. The default value is 85 percent.

See Monitoring in Site Properties on page 182. The fingerprint databases must be backed up as part of your backup regime. See About Enterprise Vault backups on page 323.

Monitoring the archive space reduction due to single instance storage

If you have installed and configured Enterprise Vault Reporting, you can access the reports that provide information on the archive storage savings that are due to Enterprise Vault single instance storage. The reports that relate to single instance storage are as follows:

Single Instance Storage Reduction Summary. This report shows the storage reduction that has resulted from Enterprise Vault single instance storage for each vault store group in an Enterprise Vault Site. Single Instance Storage Reduction per Vault Store Group. This report shows the storage reduction that has resulted from Enterprise Vault single instance storage for each vault store in a vault store group.

Day-to-day administration About managing safety copies

59

Single Instance Storage Reduction by File Type. This report shows the storage reduction that has resulted from Enterprise Vault single instance storage for each file type within a vault store group.

You can access the single instance storage reports from the Microsoft SQL Server Reporting Services Report Manager Web application, or from within the Administration Console. See the Reporting manual for more information.

About managing safety copies

Enterprise Vault can be configured to retain archived items, until the vault store partition in which they are archived has been backed up. During the time between archiving and removal, the original items are treated as safety copies by Enterprise Vault. When the vault store partition has been backed up, Enterprise Vault can remove the safety copies. Enterprise Vault also creates shortcuts and placeholders at this time if it is configured to do so. Note: Enterprise Vault removes safety copies when the Storage service is started or when backup mode is cleared from the vault store. For more information about the configuration of safety copies, see About Enterprise Vault safety copies in Installing and Configuring.

Configuring the removal of Enterprise Vault safety copies

During the creation of each vault store, you chose from following settings to control how Enterprise Vault manages safety copies:

Never. Enterprise Vault does not remove safety copies, even after they have been backed up. After backup. Enterprise Vault does not remove safety copies until the partition that contains the archived items has been backed up. After backup (immediate for journaling). This option is the same as the After backup option except for journal items which are removed immediately after they are archived. Immediately after archive. All original items are removed as soon as they have been archived.

You can change this setting subsequently in the Administration console.

60

Day-to-day administration About managing safety copies

To configure the removal of safety copies for an existing vault store

1 2 3 4

In the left pane of the administration console, expand the Vault Store Groups container and find the vault store. Right-click the vault store and click Properties. On the General tab of the Vault Store Properties page, choose an option from the Remove safety copies list. Click OK.

Checking that partitions have been backed up

If you select the After backup option or the After backup (immediate for journaling) option, Enterprise Vault must check that the partition has been backed up before it removes safety copies. During the creation of each vault store, you chose from the following options:

Use the archive attribute. Files on the partition whose archive attributes are cleared are considered backed up and Enterprise Vault removes the corresponding safety copies. This option is appropriate only if your backup software clears archive attributes after backup. Check for a trigger file. A partition is considered backed up when Enterprise Vault finds a trigger file on the partition. Typically, this trigger file is placed on the partition by your backup software. When you choose this option, you can also configure how often the partition is checked for the presence of a trigger file

You can change this setting subsequently in the Administration console. To configure which method Enterprise Vault uses to ensure a partitions data is backed up

1 2 3 4

In the left pane of the administration console, expand the Vault Store Groups container and select the vault store contains the partition. In the right pane, right-click the partition and click Properties. Click the Backup tab. Select one of the following options:

Use the archive attribute Check for a trigger file

Day-to-day administration About managing partition rollover

61

If you selected the Check for a trigger file option, you can also set a partition scan interval, which determines how often Enterprise Vault checks the partition for a trigger file. Select the Scan partition every option and set a scan interval in minutes. Click OK.

About managing partition rollover

Each vault store must contain at least one partition, which is the physical location where Enterprise Vault stores archived data. As the data in a vault store grows, you can create more partitions to provide additional capacity. You can manually change the open partition in a vault store. For example, when the disk that hosts the open partition reaches capacity, close the partition and open a partition on a different disk. Enterprise Vault also provides an automatic partition rollover feature. This feature lets you configure partitions so that archiving rolls over from one partition to another when certain criteria are met. For example, you can configure a partition to roll over to the next available partition when the host disk has only 5% free space. You can also configure a partition to roll over on a specific date. In support of both these features, each partition can exist in one of three states:

Closed. A partition that is closed, is not available for archiving until you manually open it, or make it ready for partition rollover. Open. Each vault store can have only one open partition. Enterprise Vault archives data into the open partition. Without partition rollover, Enterprise Vault automatically closes a partition when the disk that hosts it becomes full, but does not open another. However, if the open partition is rollover enabled, and a ready partition exists, Enterprise Vault automatically opens the ready partition when the open partition meets its rollover criteria. Ready. Each vault store can have any number of ready partitions that are available to Enterprise Vault when partition rollover occurs.

Configuring partition rollover

In each vault store where you use partition rollover, the open partition must be rollover enabled, and there must be at least one ready partition. For partition rollover to work for an extended period without intervention, each ready partition in a vault store must also be partition rollover enabled. If not, partition rollover stops at the first partition that is not rollover enabled. In summary, for Enterprise

62

Day-to-day administration About managing partition rollover

Vault to roll over through a series of partitions, each must be both ready for partition rollover, and partition rollover enabled. Note: Centera partitions cannot be rollover enabled, which means Enterprise Vault cannot roll over from a Centera partition. However, Centera partitions can be rollover ready. You can enable and configure partition rollover for each partition when you create it using the New Partition wizard. For more information on creating a new vault store partition, see the Setting up storage chapter of the Installing and Configuring manual. You can also configure partition rollover for existing vault store partitions, using the Vault Store Partition Properties page. Each partition can be configured to roll over using any of the following options:

Enabled based on volume. Partition rollover is enabled for this partition, and occurs according to the amount of free space on the volume that hosts the partition. Enabled based on time. Partition rollover is enabled for this partition, and occurs according to the time criteria you specify. Enabled based on time or volume. Partition rollover is enabled and occurs according to whichever of the volume criteria or time criteria are met first. For example, you can configure the partition to roll over when its host volume falls below 5% free space, or on a specific date, whichever comes first.

Depending on the choice you make, you can then set appropriate rollover criteria. If you choose either Enabled based on volume or Enabled based on time or volume, you can make appropriate settings to trigger partition rollover according to the remaining free space on partitions host volume. Set one of the following criteria to trigger rollover:

A percentage of free space. A specific amount of free space in MB, GB, or TB.

If you chose either Enabled based on time or Enabled based on time or volume, you can make appropriate settings to trigger partition rollover. Set one of the following criteria to trigger rollover:

An elapsed period of time, in days, weeks, months, or years. A specific date and time for rollover to occur.

This flexibility enables a number of approaches to the management of partition rollover. You can take a purely volume-based approach , in which you configure a series of partitions that roll over when their host disks approach capacity. Normally, this approach would require you to create the partitions on separate

Day-to-day administration About managing partition rollover

63

physical disks. However, it is still possible to host partitions on a single disk when you mount multiple physical volumes in one file system. In this case, Enterprise Vault rolls over based on the free space on the physical volume, rather than on the host file system. The time-based approach to partition rollover lets you roll over according to any time criteria that suit your environment. For example, you can configure partitions to roll over at the end of each week, or on a specific date each month. Note: When you use date-based partition rollover, you must ensure that each partition has sufficient storage capacity for period it is open. Enterprise Vault also lets you use a mixture of volume and time criteria. To enable and configure partition rollover on an existing partition

In the left pane of the administration console, expand the Vault Store Groups container and select the vault store in which you want to configure partition rollover. In the right pane, right-click a partition and click Properties. Click the Rollover tab. From the Partition Rollover list, select one of the following options:

2 3 4

Enabled based on volume Enabled based on time Enabled based on time or volume

Use the options that are available to you to set appropriate rollover criteria for this partition.

Changing rollover order

As you create and configure rollover ready partitions, the order in which they are used depends on the rollover criteria you set. By default, partitions configured with volume-based criteria are used in the same order they are made ready for rollover. Partitions configured with time-based criteria are used in the order the rollover dates determine. You can change partition rollover order using the Partition Rollover tab on the Vault Store Properties page.

64

Day-to-day administration About managing partition rollover

Note: You can place the partitions that are configured for volume-based rollover in any order. However, you cannot break the rollover order for any partitions that are configured for time-based rollover. For example, you cannot move a partition that is configured to roll over on 10 October before one that is configured to roll over on 3 October. To change rollover order

1 2 3 4 5

In the administration console, right-click a vault store and click Properties. Click the Partition Rollover tab. From the list of ready partitions, select the one whose position you want to change. Click Move Up or Move down until the partition is in the correct position. Repeat the previous two steps until the ready partitions are in the correct order.

Forcing partition rollover

You can force partition rollover using the PowerShell cmdlet Start-PartitionRollover. This cmdlet forcibly closes the open partition in the vault store you specify and, if one is available, opens the first ready partition. Note: Start-PartitionRollover forces partition rollover irrespective of the rollover criteria on the current open partition. To force partition rollover

1 2

Open the Enterprise Vault management shell. Run Start-PartitionRollover. The syntax for this cmdlet is:
Start-PartitionRollover -EVServerName server -VaultStore vault_store

where:
server is the Enterprise Vault server that runs the storage service for the

vault store in which you want to force partition rollover.

vault_store is the name or ID of the vault store in which you want to force

partition rollover. For example:

Day-to-day administration Recovering deleted items

65

Start-PartitionRollover EVServer-Win2k3 VS1

This connects to the Enterprise Vault server EVServer-Win2k3 and verifies that vault store VS1 uses the storage service on this server. If it does, Start-PartitionRollover forces partition rollover in vault store VS1.

Recovering deleted items

Enterprise Vault can retain items that users have deleted so that you have some time in which to recover items that users have deleted accidentally. You can configure this recovery feature on the Archive Settings tab of Site Properties. If recovery is enabled, Enterprise Vault retains deleted items for the period of time that is specified on the Archive Settings tab of Site Properties. At the end of that time the item is permanently deleted. When a user deletes an item from an archive, the item is removed from the archive's index, so the item can no longer be found by searching and is not visible in Archive Explorer. However, direct links to the item, such as mailbox shortcuts, still work. The deleted item no longer contributes to the archive quota usage. Note that a user can retrieve a copy of a deleted item by using a shortcut. If the user then rearchives this item without modifying it, the item is still in a deleted state and therefore is not searchable and not visible in Archive Explorer. Recovery is available only for those items that users have deleted. You cannot recover items that Storage Expiry has deleted. Also, if Storage Expiry deletes an item that has already been deleted by a user, you cannot then recover that item. To recover items that have been deleted from an archive

1 2 3 4 5

In the Administration Console, expand the tree view until the Archives container is visible. Expand the Archives container and then click the container that has the archive with the deleted items. Right-click the archive with the deleted items and, on the shortcut menu, click Properties. Click the Deleted Items tab. The tab shows the number of items that can be recovered. Click Recover Items. This recovers all available items in the archive. You cannot select specific items.

66

Day-to-day administration About expiry and deletion

About expiry and deletion

Enterprise Vault can automatically perform the following:
Storage expiry Delete items from archives when the items' retention periods have expired. Delete shortcuts from users Exchange mailbox folders and Exchange public folders. You can configure Enterprise Vault to delete shortcuts over a certain age, or shortcuts to items that have been deleted from an archive.

Shortcut deletion

Setting up storage expiry

If you configure storage expiry, the Enterprise Vault Storage service automatically deletes items from archives when their retention periods expire. When the Exchange Mailbox task next runs, it automatically deletes the associated shortcuts from the mailboxes. Similarly, the Exchange Public Folder task deletes the shortcuts that are associated with expired items in public folders. When certain items such as calendar, task, and meeting items are archived, the original item in the mailbox is not replaced with a shortcut. By default, the archiving task does not delete the original items when it performs shortcut deletion. To include such items in shortcut deletion, configure the registry setting, DeleteNonShortcutItems. The setting is described in the Registry Values manual. If storage expiry for Exchange Server Archiving is based on archived date, and you have configured Enterprise Vault to archive unexpired calendar, meeting, and task items (that is, items with an end date in the future), then we recommend that you use the advanced Exchange Mailbox policy setting, Future item retention category. This ensures that storage expiry does not delete any archived calendar, meeting, or task items before their end date. See Future item retention category (Exchange Archiving General setting) on page 112. To set up storage expiry

1 2 3

In the left pane of the Administration Console expand the hierarchy until the appropriate vault site is visible. Right-click the vault site and then, on the shortcut menu, click Properties. In the Site Properties dialog box, click the Storage Expiry tab.

Day-to-day administration Creating a new retention category

67

4 5

Select the settings to use, and then click OK. You do not need to configure shortcut deletion in the Exchange Mailbox policy or Exchange Public Folder policy. The Exchange Mailbox task and Exchange Public Folder task automatically delete expired item shortcuts when they next run.

Setting up shortcut deletion

The Exchange Mailbox task and Exchange Public Folder task perform shortcut deletion. The tasks delete the shortcuts for expired items automatically. The following additional shortcut deletion options are available on the Shortcut Deletion tab of the Exchange Mailbox policy and the Exchange Public Folder policy:

Delete shortcuts that exceed the specified age. Delete orphaned shortcuts. Orphaned shortcuts are shortcuts for items that have previously been deleted from the archive.

When certain items such as calendar, task, and meeting items are archived, the original item is not replaced with a shortcut. By default, the archiving task does not delete the original items when it performs shortcut deletion. To include such items in shortcut deletion, configure the registry setting, DeleteNonShortcutItems. The setting is described in the Registry Values manual. If you have configured Enterprise Vault to archive unexpired calendar, meeting, and task items, any items with an end date in the future will not be deleted from users' mailboxes. To set up shortcut deletion options

1 2 3 4

In the Administration Console, expand the hierarchy until the appropriate Exchange Mailbox or Public Folder policy is visible. Right-click the policy. On the shortcut menu, click Properties. In the policy dialog box, click the Shortcut Deletion tab. Select the required options, and then click OK.

Creating a new retention category

By assigning a retention category to items at the time they are archived, it is possible to categorize stored items. This categorization makes it easier to retrieve items because it is possible to search by category. A retention category also specifies a retention period, which is the minimum amount of time after its last modification date that an item must be retained. For

68

Day-to-day administration Creating a new retention category

mail messages, the Retention Period is the time since the message was received. For documents, it is the time since the document was last modified. Users can select retention categories from the list and assign them to items in their mailboxes. When Enterprise Vault archives an item, it is stored with the appropriate retention category. If you later modify a retention category, the changes are retrospective. For example, if you have a retention category called "Customer Accounts" with a retention period of 5 years and you change it to 10 years, then items that have been already archived with the "Customer Accounts" retention category are retained for a minimum of 10 years. You can create as many retention categories as you require. You can also modify the standard retention categories to suit your own needs. If you modify a retention category, the changes apply to all items that are archived with that retention category and also to all items that have already been archived with that retention category. Each retention category has a retention period, which indicates how long you want to retain the items that are archived with this retention category. When the retention period has elapsed, Enterprise Vault can automatically delete the items. See the Storage Expiry tab in Site Properties to set up expiry. Note: If you plan to store items indefinitely on a WORM storage device, then ensure that the retention settings on the device are correctly configured. For details, refer to Enterprise Vault hardware requirements in the manual, Installing and Configuring. To create a new retention category

1 2 3

In the left pane of the Administration Console, expand the vault site hierarchy until Policies is visible. Expand Policies. Right-click Retention Categories and, on the shortcut menu, click New Retention Category. The New Retention Category wizard starts.

Work through the wizard.

Day-to-day administration About maintaining provisioning groups

69

About maintaining provisioning groups

The Exchange Provisioning task automatically provisions new mailboxes provided that they are included in its list of targets. Mailboxes that are not included in the list of targets do not result in any warnings when the Provisioning task runs. If you have chosen to have mailboxes enabled automatically, remember that a mailbox is provisioned according to the first provisioning group in which it appears, so it is important that the mailbox is in the correct group before the Exchange Provisioning task runs. Note: If you choose to use the inherited vault store or inherited Indexing Service, and the provisioning group includes mailboxes from more than one Exchange Server, different vault stores or Indexing Services may be used for mailboxes that are enabled according to this provisioning group. Depending on the configuration options you have chosen, it is also possible that mailboxes on a particular Exchange Server cannot be enabled because no vault store or Indexing Service is defined for them.

Enabling archiving for new mailboxes

You can enable archiving for a new Microsoft Exchange Server mailbox in the following ways:

You can make Enterprise Vault automatically enable archiving for new Microsoft Exchange Server mailboxes. If you do this, Enterprise Vault automatically creates the mailbox's archive in the default vault store. You can manually enable archiving for specific Microsoft Exchange Server mailboxes. If you have not set up Enterprise Vault to enable archiving for mailboxes automatically, you must use this method to enable archiving for mailboxes.

Making Enterprise Vault enable archiving for new mailboxes automatically means that you do not need to enable each mailbox manually whenever there is a new Microsoft Exchange Server mailbox. The advantage of enabling archiving manually is that you can select a specific vault store as the location for each archive that is created. Note that, if you make Enterprise Vault automatically enable archiving for new mailboxes, the new archives are created the next time an Exchange Mailbox task runs. If there is a new mailbox that you want to be archived somewhere other than the default vault store, you must manually enable archiving for that mailbox

70

Day-to-day administration Enabling archiving for new mailboxes

before the Exchange Mailbox task runs. If you do not enable the mailbox yourself, Enterprise Vault automatically enables archiving for it and creates an archive in the default location. If you want all the new archives to be in the same vault store, making Enterprise Vault automatically create archives is the option that means the least work on your part. It is easy to turn this option on or off. For example, you can make Enterprise Vault automatically create archives on the first run of the Exchange Mailbox task, and then turn off the option and enable new mailboxes manually. When Enterprise Vault automatically enables archiving for a mailbox, the new archive is stored in the default location. To make Enterprise Vault enable archiving for new mailboxes automatically

1 2 3 4 5

In the left pane of the Administration Console, expand the vault site hierarchy until the name of the vault site is visible. Expand the vault site and then expand Archiving Targets. Expand Exchange. Expand the required domain. Click Provisioning Group. If no provisioning groups are listed, create a new one as follows:

Right-click Provisioning Group and, on the shortcut menu, click New and then Provisioning Group. Work through the New Provisioning Group wizard.

6 7 8 9

In the right pane, double-click the provisioning group that will contain the mailboxes that will be enabled automatically. In the Provisioning Group Properties, click the Archiving Defaults tab. Select Automatically enable mailboxes. If you want to use a specific vault store for the new mailbox archives, click Override the inherited Vault Store and click Change to pick the vault store to use. If you do not specify a vault store, the vault store that will be used is the one defined in the Enterprise Vault server properties. If no vault store is defined there, the vault store that is defined in the Exchange Server properties is used.

Day-to-day administration Enabling archiving for new mailboxes

71

10 If you want to use a specific Indexing Service when archiving from the new
mailboxes, click Override the inherited Indexing Service and click Change to pick the Indexing Service to use. If you do not specify an Indexing Service, the Indexing Service that is used is the one defined in the Enterprise Vault server properties. If no Indexing Service is defined there, the Indexing Service that is defined in the Exchange Server properties is used.

11 Select the default retention category to use for items that are stored in the
new archives. Users can select other retention categories to use from the list of those available.

12 Select OK.
To enable archiving for mailboxes manually

On the Tools menu, click Enable Mailboxes. The Enable Mailbox wizard starts.

Work through the wizard. Note the following:

You can manually disable a new mailbox. This stops Enterprise Vault from automatically enabling archiving for the mailbox. You would then have to enable the mailbox at some point, as otherwise Enterprise Vault would never archive items from it. When you enable a mailbox, Enterprise Vault automatically selects one of the open Indexing Locations to use to store the indexing data that is associated with that mailbox's archive. Before you enable mailboxes, make sure that the open Indexing Locations are the ones you want to use. Enterprise Vault does not provide a way to change a mailbox's Indexing Location after you have enabled archiving for the mailbox. You can select an existing archive to use for a mailbox that is being enabled. This is useful when a mailbox has been migrated to a different Exchange Server in the same Enterprise Vault site and needs to be enabled for archiving to the same archive as before.

Checking for hidden mailboxes

By default, Enterprise Vault archives only the mailboxes that are listed in the Exchange Global Address List. In the Enterprise Vault Administration Console, hidden mailboxes are not listed in the Enable Mailbox wizard and do not appear

72

Day-to-day administration About moving archives

in Exchange Mailbox archiving task reports. If you want Enterprise Vault to archive hidden mailboxes, you can use the registry setting, ProcessHiddenMailboxes. Enterprise Vault does not process the mailboxes of disabled Active Directory accounts. Even if you have configured the registry value ProcessHiddenMailboxes, the mailboxes of hidden disabled accounts are not processed. To force Enterprise Vault to include the mailboxes of users whose accounts have been disabled, configure both of the registry settings, ProcessHiddenMailboxes and ExcludeDisabledADAccounts. These settings are documented in the Registry Values manual. To check if a mailbox is hidden

1 2 3 4

Click Start > Microsoft Exchange > Active Directory Users and Computers. Click View and select Advanced features. Navigate to the user of the mailbox that you want to check, and display the properties for that user. Select the Exchange Advanced tab. Check if the option, Hide from Exchange Address Lists, is selected.

About moving archives

Enterprise Vaults Move Archive wizard lets you move content from existing Domino and Exchange mailbox archives, and from Domino and Exchange journal archives, to new archives or existing archives in other vault stores. You can use the wizard to move archives between vault stores in one site, and between two sites. This includes moves between two sites that are controlled by different Enterprise Vault directories. Note: Move Archive supports the move of archives to destination servers that run Enterprise Vault 8.0 SP4 or later. Move Archive handles each move operation differently, depending whether the source and destination archives are associated with a mailbox at the time of the move. Move Archive considers an archive to be:

Active if it is associated with a mailbox, regardless of whether the mailbox is enabled for archiving Inactive if it is not associated with a mailbox

Move Archive does not support move operations for the following archive types:

File System Archiving (FSA) archives

Day-to-day administration About moving archives

73

SharePoint archives Shared archives Exchange public folder archives

Move Archive also prevents moves in the following circumstances:

The source archive exceeds its archive usage limit and the destination is a new archive. The destination archive exceeds its archive usage limit.

In these cases you should increase the appropriate archives usage limit on the Archive Properties: Archive Usage Limit tab in the Administration Console.

How Move Archive works

When you have submitted a number of Move Archive operations using the wizard, each move is then controlled by the Move Archive task. The Move Archive task is responsible for the actions that must take place as part of an archive move. For example, the Move Archive task copies the content from the source archive to the destination. The Move Archive task also manages the wait time that is necessary while other archiving operations take place. For example, the Move Archive task waits for the mailbox archiving task to point mailbox shortcuts to the items in the destination archive. For each Move Archive operation, the Move Archive task:

Closes the source archive to prevent Enterprise Vault from archiving any further content to it. Renames the source archive Copies the content from the source archive to the destination archive. Synchronizes the permissions from the users mailbox to the destination archive. Waits for the mailbox archiving task to point shortcuts to the items in the destination archive (in the case of mailbox archives). Waits for the destination vault store to be backed up. Verifies that all the data is present in the destination archive. If any items are missing from the destination archive, the Move Archive task repeats the copy of content from the source, and all the subsequent steps. This can happen up to five times before the Move Archive task fails the move operation.

When verification has completed successfully, the move operation is complete. If necessary, you can then delete the source archive.

74

Day-to-day administration About moving archives

How Compliance Accelerator and Discovery Accelerator affect Move Archive

The use of Compliance Accelerator and Discovery Accelerator in your environment can place certain restrictions on Move Archive operations. Both Compliance Accelerator and Discovery Accelerator can register an interest in an archive. This happens in the following circumstances:

Items in the archive appear in the results of a Compliance Accelerator or Discovery Accelerator search. Items in the archive are in a Compliance Accelerator or Discovery Accelerator review set.

When Compliance Accelerator or Discovery Accelerator has registered an interest in an archive, you can move the archive, but cannot delete it at the end of the move operation. Discovery Accelerator also lets users place cases on legal hold to prevent the deletion of archived items that are included in the case. Move Archive prevents you from moving and deleting any archives which contain items included in Discovery Accelerator cases that have been placed on legal hold.

Move Archive and indexing levels

When you move an archive to an existing destination archive, the destination archive retains the indexing level it had before the move. However, when you move an archive to a new destination archive, the indexing level that Move Archive sets depends on whether the archive is associated with a mailbox after the move. If the new destination archive is associated with a mailbox after the move, the archive inherits the mailboxs indexing level. If there is no mailbox association after the move, Move Archive sets the destination sites default indexing level on the archive.

Move Archive and user deleted items

Enterprise Vault lets you retain items that users delete from their archives so that they are available for recovery for a period of time. You can enable this feature using the Enable recovery of user deleted items option on the Site Properties: Archive Settings tab. Enterprise Vault then retains user deleted items for the number of days you set.

Day-to-day administration About moving archives

75

Note: During a move operation, Move Archive does not copy these deleted items from the source archive to the destination. As a result, the deleted items are not available for recovery from the destination archive.

About moving mailbox archives within a site

Move Archive lets you move archives within an Enterprise Vault site. For example, this is useful when you want to move existing archives to a new storage device. You might also want to move archives to a newer server to take advantage of the features introduced in Enterprise Vault version 8.0, such as the optimized single instance storage model. Within an Enterprise Vault site, Move Archive supports the following moves:

Moving an active archive to a new archive Moving an inactive archive to an active archive Moving an active archive to an inactive archive

Moving an active archive to a new archive

This section describes the move of an archiving enabled users default archive in the source vault store, to a new archive in the destination vault store. In this case, the new archive in the destination automatically becomes the default archive for subsequent archiving. In summary, this Move Archive operation includes the following steps:

Move Archive closes the source archive to prevent Enterprise Vault from archiving any further content to it. However, the source archive is still accessible in read-only mode. Move Archive renames the source archive. It appends the archives creation date, and the date of the move operation to the archives name. Move Archive copies the data from the source archive to the destination. Enterprise Vault synchronizes the permissions from the users Domino or Exchange mailbox to the new archive. From this point, Enterprise Vault archives new content to the destination archive. The mailbox archiving task on the destination server points all the shortcuts in the users mailbox to the content in the new archive in the destination site. Move Archive completes this step even if you do not use mailbox shortcuts in your environment. Move Archive waits for the destination vault store to be backed up.

76

Day-to-day administration About moving archives

Move Archive verifies that all the data is present in the destination archive.

The move operation is now complete and you may delete the source archive.

Moving an inactive archive to an active archive

This section describes the move of an archiving enabled users non-default archive in the source vault store, to an existing default archive in the destination vault store. In summary, this move operation includes the following steps:

Move Archive closes the source archive. However, the source archive is still accessible in read-only mode. Move Archive renames the source archive. It appends the archives creation date, and the date of the move operation to the archives name. Move Archive copies the data from the source archive to the destination. The mailbox archiving task on the destination server runs and processes shortcuts if required. Move Archive completes this step even if you do not use mailbox shortcuts in your environment. Move Archive waits for the destination vault store to be backed up. Move Archive verifies that all the data is present in the destination archive.

The move operation is now complete and you may delete the source archive.

Moving an active archive to an inactive archive

This section describes the move of an archiving enabled users default archive in the source vault store, to an inactive archive in the destination vault store. In summary, this Move Archive operation includes the following steps:

Move Archive closes the source archive to prevent Enterprise Vault from archiving any further content to it. However, the source archive is still accessible in read-only mode. Move Archive renames the source archive. It appends the archives creation date, and the date of the move operation to the archives name. Move Archive copies the data from the source archive to the destination. Move Archive waits for the destination vault store to be backed up. Move Archive verifies that all the data is present in the destination archive.

The move operation is now complete and you may delete the source archive.

Day-to-day administration About moving archives

77

Moving other mailbox archives

You can also move other mailbox archives between vault stores, such as source archives that are not associated with archiving enabled mailboxes. You can move these archives to new destination archives, or to other existing archives that are not associated with a mailbox. In cases like these, Move Archive moves the content from one archive to another. However, Enterprise Vault does not complete any shortcut processing because neither the source archive nor the destination archive is associated with an archiving enabled user.

About moving mailbox archives between sites

Move Archive lets you move archives between Enterprise Vault sites. This includes sites that belong to different Enterprise Vault directories. For example, a move between sites is useful when users move to a new location and you move their mailboxes to a mail server in the new site. Note: When move operations cross two Active Directory domains, a two way trust is required for the moves to proceed. Between Enterprise Vault sites, Move Archive supports the following move:

Moving an inactive archive to an active archive

Moving active archives between sites

Move Archive lets you move archives between Enterprise Vault sites. This is useful when you want to move an individual users mailbox to a different Domino or Exchange mail server in another Enterprise Vault site. In this case, you must disable archiving for the user in the source site, then move the mailbox and enable it for archiving in the destination. When you have done this, you can use Move Archive to move the associated archive to the destination site. This section describes the actions you must complete to move a users mailbox, and the subsequent steps that are required to move the archive. To move the users mailbox:

Disable archiving on the users mailbox in the source site. Move the users mailbox from the source mail server to the mail server in the destination site. Provision the users mailbox on the destination Enterprise Vault server.

78

Day-to-day administration About moving archives

Enable the user for archiving in the destination site.

The users mailbox is now enabled for archiving in the destination site, but the existing shortcuts in the users mailbox still point to the source archive. New content is archived to the newly created destination archive. When you have moved the users mailbox and enabled it for archiving in the destination site, you can move the inactive source archive. In this case, the move operation includes the following steps:

Move Archive closes the source archive. However, the source archive is still accessible in read-only mode. Move Archive renames the source archive. It appends the archives creation date, and the date of the move operation to the archives name. Move Archive copies the data from the source archive to the destination. The mailbox archiving task on the destination server points all the shortcuts in the users mailbox to the content in the newly created archive in the destination site. Move Archive completes this step even if you do not use mailbox shortcuts in your environment. Move Archive waits for the destination vault store to be backed up. Move Archive verifies that all the data is present in the destination archive.

The move operation is now complete and you may delete the source archive.

Moving other mailbox archives between sites

You can also move an inactive archive in the source site to an existing inactive archive or to a new archive in the destination site. However Enterprise Vault completes shortcut processing only when the destination is an existing archive that is associated with a user mailbox. In summary, these Move Archive operations include the following steps:

Move Archive closes the source archive to prevent Enterprise Vault from archiving any further content to it. However, the source archive is still accessible in read-only mode. Move Archive renames the source archive. It appends the archives creation date, and the date of the move operation to the archives name. Move Archive copies the data from the source archive to the destination. If the destination archive is associated with a user mailbox, Enterprise Vault synchronizes the permissions from the users Domino or Exchange mailbox to the new archive.

Day-to-day administration About moving archives

79

If the destination archive is associated with a user mailbox, the mailbox archiving task on the destination server points all the shortcuts in the users mailbox to the content in the destination archive. Move Archive completes this step even if you do not use mailbox shortcuts in your environment. Move Archive waits for the destination vault store to be backed up. Move Archive verifies that all the data is present in the destination archive.

The move operation is now complete and you may delete the source archive.

About moving journal archives within a site

Move Archive lets you move Domino and Exchange journal archives only within an Enterprise Vault site, and you cannot move a journal archive that is currently in use by the journaling task. When you want to move a source journal archive that is in use, first you must configure the journaling task to use a new archive in the destination vault store. To change the archive that is used by the journaling task, use the Administration Console to edit the journal mailbox properties. You can move an inactive journal archive to a new archive, to an existing active archive, or to another inactive archive.

About configuring Move Archive

You can control Move Archives behavior using two XML configuration files:

EvMoveArchiveTask.exe.config, which controls the Move Archive task EvTaskGuardian.exe.config, which controls the task guardian service

Configuring Move Archive task

EvMoveArchiveTask.exe.config controls the moves of any archives in the vault

stores that are associated with the storage service on the server where it is present. A basic version of this file exists in the Enterprise Vault installation folder, for example C:\Program Files (x86)\Enterprise Vault. The installation folder also contains another file which is called Example EvMoveArchiveTask.exe.config. This file contains examples of the additional settings you can change to control the Move Archive task.

80

Day-to-day administration About moving archives

To change the default behavior of the Move Archive task

1 2 3 4

Rename EvMoveArchiveTask.exe.config in case you need to revert to it later. Edit the settings in Example EvMoveArchiveTask.exe.config, as described in the following sections. Rename the file to EvMoveArchiveTask.exe.config. Restart the Move Archive task.

ReportVersions (Move Archive)

For each source archive it processes, Move Archive creates a report file in the Reports\Move Archive subfolder of the Enterprise Vault installation folder (for example C:\Program File (x86)\Enterprise Vault). If you move the same archive a second time, following a failure for example, Move Archive creates another report when it processes the archive for the second time. ReportVersions sets the number of these report files it retains for each source archive, before it removes the oldest file.
Default value: Minimum value: Maximum value: 5 1 100

RescheduleIntervalInMins (Move Archive)

For each move operation, Move Archive enters a sleep state between each stage of the move. For example, Move Archive enters the sleep state while it waits for shortcut processing, and for destination archive backup. RescheduleIntervalInMins sets the length of this sleep state in minutes. At the end of the interval, Move Archive resumes processing if a processing slot is available. You should consider setting a longer interval in environments where you move large numbers of archives at the same time.
Default value: Minimum value: Maximum value: 30 5 1000

SkipDuplicateItems (Move Archive)

If Move Archive finds that items from the source archive are duplicated in the destination vault store, it writes errors to the event log for the first 10 duplicates,

Day-to-day administration About moving archives

81

then marks the move operation as failed. It does this because the presence of duplicates can indicate that the source archive has already been moved to the destination. Note: All the items in one vault store must have a unique transaction ID. Move Archive considers two items in one vault store to be duplicates when they both have the same transaction ID. You can change this behavior by setting SkipDuplicateItems to 1. Then, Move Archive still logs the duplicate items but skips them and proceeds with the move operation.
Default value: 0

Configuring task guardian service

When Move Archive enters a temporary error state while it processes an archive, it waits for a period of time before it retries the archive. You can change the default retry interval using the RetryTimeInMinutes key in the task guardian service configuration file. EvTaskGuardian.exe.config controls the retry interval on each Enterprise Vault server where it is present. A basic version of this file exists in the Enterprise Vault installation folder, for example C:\Program Files (x86)\Enterprise Vault. The installation folder also contains another file called Example EvTaskGuardian.exe.config. This file contains an example of the RetryTimeInMinutes key.
Default value: Minimum value: Maximum value: 30 5 1000

To change the default behavior of the task guardian service

1 2 3 4

Rename EvTaskGuardian.exe.config in case you need to revert to it later. Edit the RetryTimeInMinutes setting in Example EvTaskGuardian.exe.config. Rename the file to EvTaskGuardian.exe.config. Restart the task guardian service.

82

Day-to-day administration About moving archives

Changing Move Archives performance

By default, Move Archive operations are given a lower priority than other Enterprise Vault tasks on the server. You can change Move Archives priority setting and other aspects of its performance using the Settings tab in Move Archive Task properties. For guidance on Move Archive performance adjustment using the options on the Settings tab, see the Enterprise Vault Performance Guide which is available on the Enterprise Vault Support Web site: http://www.symantec.com/docs/TECH125795 To change Move Archives performance

1 2 3

In the Administration Console, right-click the Move Archive Task and click Properties. Click the Settings tab. Change the settings as required and click OK.

If you change Priority of Move Archive operations in relation to other processes or Number of threads per move operation, you must restart the Move Archive Task for the changes to take effect. If you change Number of concurrent move operations, you must restart the Task Controller service for the changes to take effect.

Running Move Archive

To run the Move Archive wizard, you must log in using the vault service account, or use an account that is assigned to the power administrator role. In the case of moves between two sites that are controlled by different Enterprise Vault directories, your source user account must be assigned to the power administrator role in the destination Enterprise Vault directory. See Roles-based administration in the Administrators Guide. To run Move Archive

1 2

In the left pane of the Administration Console, right-click Archives and click Move Archive. Work through the pages of the wizard and select appropriate options.

Move Archive introduction page

This page introduces the Move Archive wizard and provides important information which you should read before you proceed.

Day-to-day administration About moving archives

83

Note: Move Archive supports the move of archives to destination servers that run Enterprise Vault 8.0 SP4 or later. Move Archive does not support move operations for the following archive types:

Closed archives File System Archiving (FSA) archives SharePoint archives Shared archives Exchange public folder archives

Move Archive also prevents moves in the following circumstances:

The source archive exceeds its archive usage limit and the destination is a new archive. The destination archive exceeds its archive usage limit.

In these cases you should increase the appropriate archives usage limit on the Archive Properties: Archive Usage Limit tab in the Administration Console.

Selecting a destination site

Move Archive lets you move mailbox and journal archives within the current Enterprise Vault site, or between two sites. Use this page to select the site into which you want to move the archives. Note: You can move journal archives only within a site. To move archives within a site

Select the Move archives within the current Enterprise Vault Site option.

To move archives to another site

1 2

Select the Move archives to a different Enterprise Vault Site option. Enter the name of the Directory Service Computer that controls the destination vault stores.

Selecting a site
If you have chosen to move archives to a destination that contains more than one site, this page lets you select a destination site.

84

Day-to-day administration About moving archives

To select a destination site

Select a site from the Destination Site list.

Selecting archives
Use this page to select the archives you want to move, and to select destination archives. Note: Move Archive does not let you move ineligible archives. You cannot move closed archives, FSA archives, SharePoint archives, shared archives, Exchange public folder archives, or archives that contain items placed on legal hold by Discovery Accelerator. To add archives

1 2

Click Add. Use the Select Source dialog box to add the archives you want to move.

When you move an archive that is currently in use by an archiving-enabled user, you can only move it to a new archive. In this case, <New archive> is selected automatically in the Destination Archive column next to the archive, and you cannot change it. You can only move active archives within a site. When you move an inactive archive, you can select an existing archive as the destination, either in the current site or in another site. To select a destination archive

1 2 3

Select the source archive for which you want to select a destination archive. Click Move To and click Select Destination. Use the Select Destination dialog box to select a destination archive.

To move archives to new destination archives

1 2

Select one or more archives. Click Move To and click New Archive.

To remove an archive from the list

Select an archive and click Remove.

You can also display more information about any pair of source and destination archives on this page.

Day-to-day administration About moving archives

85

To display the properties of a pair of source and destination archives

1 2

Select the row whose properties you want to display. Click Properties.

Select destination
Use this dialog box to search for the archive you want to set as the destination. To search for a specific archive

1 2

Enter all or part of the name of an archive in the search box. Click the search icon. The archives whose names contain the string you entered appear in the list.

You can display the properties of any of the archives in the list. To show an archives properties

1 2

Select the archive whose properties you want to see. Click Properties.

To set an archive as the destination

Select the archive and click OK.

Selecting destination vault stores

If you have chosen to move any archives to new destination archives, this page lets you choose a destination vault store for each. Each destination archive must be in a different vault store from the associated source archive. To select destination vault stores

1 2 3

Select one or more source archives. Click Select Destination. Use the Select Vault Store dialog box to select a destination vault store for the selected archives.

Selecting billing accounts

Use this page to change the billing accounts assigned to the destination archives. By default, new destination archives are assigned the same billing account as the source archive. For existing destination archives, the New Billing Account column shows the billing account already assigned to the archive.

86

Day-to-day administration About moving archives

To change a billing account

1 2

Find the archive whose billing account you want to change. Under the New Billing Account column, enter a new billing account in this format: domain\username You can also click the browse icon next to the billing account and use the Select a User or Group dialog box to select a new billing account.

Matching retention categories

When you move archives from one Enterprise Vault site to another, you can use this page to match source retention categories to destination retention categories. For each source retention category, Move Archive tries to find a retention category in the destination site that matches the source, based on name and retention period. If it can find a matching category, it appears in the Destination Retention Category column. You can change the destination retention categories that Move Archive has matched automatically. A check icon in the right column indicates that Move Archive has matched retention categories automatically. The first time you run the Move Archive wizard, this icon is green. Move Archive remembers the selections you make each time you run the wizard, and they become the defaults for next time. When you run the Move Archive wizard again, the matched retention categories are identified by a gray check icon. In the case of Exchange managed folders, Move Archive maps all their associated retention categories in the source to just one destination retention category. You can change the destination retention category, but the change maps all the source retention categories to the single destination category you select. For each source retention category where there is no match, you must select a destination retention category. To select or change a destination retention category

1 2

Find the source retention category whose destination retention category you want to change. Under the Destination Retention Category column, use the drop-down list by each source retention category to select a destination retention category.

You can also display more information about any pair of source and destination retention categories on this page.

Day-to-day administration About moving archives

87

To display the properties of a pair of source and destination retention categories

1 2

Select the row whose properties you want to display. Click Properties.

If you do not find a suitable retention category in the destination site, you can use the Administration Console at the destination site to create one. When you have done this, click Refresh on this page to make the new retention category available for selection.

Reviewing the archives you have chosen to move

This page lets you review the archives you have chosen to move before you close the Move Archive wizard. This page lists the following for each archive:

Type. The icon shows the archives type: Domino mailbox archive, Domino journal archive, Exchange mailbox archive, or Exchange journal archive. Source Archive. The name of the source archive. Destination Archive. The name of the destination archive. This column shows <New archive> if you are moving the source archive to a new archive. Destination Vault Store. The name of the vault store that hosts the destination archive.

Once you have reviewed the archives you have chosen to move, click Finish.

Displaying the status page

On this page, select the Show the Move Archive Status dialog option if you want to monitor the progress of the archive moves. The first time you move an archive associated with a particular storage server, Enterprise Vault creates a Move Archive task on that server. The task is configured to start automatically each time the task controller service starts. If you want to start the task straight away, select the Start the new tasks now option. Enterprise Vault shows this option only once for each storage server.

Monitoring Move Archive

All the Move Archive operations you have submitted are displayed in the Move Archive Status page. If you selected the Show the Move Archive Status dialog option when you ran the Move Archive wizard, Enterprise Vault displays the Move Archive Status page when you close the wizard. You can also display the page at any other time.

88

Day-to-day administration About moving archives

To display the Move Archive Status page

In the Administration Console, right-click Archives and click Move Archive Status.

For each move operation, the Move Archive Status page shows the following:

Source Archive. The original name of the source archive. This is the archives name before Move Archive renames it. Move Status. The current move status for this archive. See Move Archive statuses on page 89. Destination Archive. The name of the destination archive. This column shows <New archive> if you are moving the source archive to a new archive. Source Server. The fully qualified domain name of the source storage service computer. Destination Server. The fully qualified domain name of the destination storage service computer. Start Time. The date and time at which the archive was submitted.

To see additional information about any of the move operations in the list

1 2

Select a move operation. Click Properties. The Move Archive Properties dialog box shows additional information, including the names and locations of the log files associated with the move operation.

To see the latest statuses for the archives you have submitted

Click the refresh button on the toolbar.

If you are moving large numbers of archives, you can find specific source archives using the search feature on the Move Archive Status page. To search for a source archive

1 2

Enter all or part of the name of the source archive in the Find source archive where the name contains: box. Click the search button.

You can also sort any of the columns on the Move Archive Status page by clicking the column heading.

Day-to-day administration About moving archives

89

Starting, stopping, and restarting archives in the queue

The Move Archive Status page lets you selectively stop, start, and restart archives in the queue. For example, you can sort the archives by destination site, select all these archives, then stop them during maintenance on the site. Note: You cannot stop a move operation during the shortcut processing stage. To start, stop, or restart archives in the queue

1 2 3

Select the archives you want to start, stop, or restart. Click the start, stop, or restart button. Click the refresh button to see the changes in statuses for the selected archives.

Move Archive statuses

Archives in the Move Archive Status page can have the following statuses:

Queued. The archive is queued for processing. Move Archive starts processing the archive when the Move Archive task runs. You can wait for the task to run to its schedule, or right-click the task and click Run Now. Step 1 of 5 - Copying (x%). Move Archive is processing the archive. Step 2 of 5 - Waiting to update shortcuts. Move Archive has finished moving items from the source archive to the destination, and is waiting for the Domino or Exchange mailbox archiving task to update the shortcuts in the users mailbox. You can wait for the task to run to its schedule, or right-click the task and click Run Now. Note: Shortcut processing for disabled archives occurs only when you run the mailbox archiving task for all mailboxes. During this stage, Move Archive checks whether shortcut processing has completed and enters a sleep state if it has not completed. By default, the length of the sleep state is 30 minutes. When the sleep state ends, Move Archive again checks to see if the shortcut processing has completed. Move Archive completes this step even if you do not use mailbox shortcuts in your environment.

Step 3 of 5 - Updating shortcuts. The Domino or Exchange mailbox archiving task is updating the shortcuts in the users mailbox.

90

Day-to-day administration About moving archives

Step 4 of 5 - Waiting for destination backup. Move Archive is waiting for the vault store that contains the destination archive to be backed up. During this stage, Move Archive checks whether the destination archive has been backed up and enters a sleep state if it has not been backed up. By default, the length of the sleep state is 30 minutes. When the sleep state ends, Move Archive again checks to see if the destination archive has been backed up. Step 5 of 5 - Verifying moved items (x%). Move Archive is checking that the destination contains all the items that it moved from the source archive. This does not include items that users have deleted, and items that Enterprise Vault has expired. Error. When Move Archive encounters an error on an archive, it tries to move the archive five times before it changes the status to Failed. In between retries, Move Archive sets the archives status to Error. Completed. Move Archive has completed all processing for this archive. Completed with errors. Move Archive has completed all processing but there were some errors. For more information on move operations that have completed with errors, see the following technical note on the Enterprise Vault Support Web site: http://www.symantec.com/docs/TECH77475 Failed. Move Archive has failed to process the archive.

To find why a Move Archive operation has failed, check the Move Archive report files in the Reports\Move Archive subfolder of the Enterprise Vault installation folder (for example C:\Program File (x86)\Enterprise Vault). See Move Archive reporting and monitoring on page 92. Move Archive lets you retry move operations that have a status of Failed, or Completed with errors unless the failure occurred during the verification stage. See Retrying Move Archive operations on page 91.

Deleting archives after Move Archive

When Enterprise Vault has finished moving an archive, its status in the Move Archive Status page is Completed. You can remove the completed archives from this page, and a prompt asks if you also want to delete the source archive. Note: You cannot delete an archive when Compliance Accelerator or Discovery Accelerator has registered an interest in it, or when Discovery Accelerator has placed items in the archive on legal hold.

Day-to-day administration About moving archives

91

See How Compliance Accelerator and Discovery Accelerator affect Move Archive on page 74. At the end of a move operation, an archives status can be Completed with errors. This happens when Move Archive records errors during the move, but does not consider the errors to be serious enough to terminate the move operation. Before you remove archives that have completed with errors, you should check the Move Archive log files for the archive to ensure the errors are not serious or unexpected. For example, you might expect some items to be absent following the failure of a storage device. For more information on move operations that have completed with errors, see the following technical note on the Enterprise Vault Support Web site: http://www.symantec.com/docs/TECH77475 To remove completed archives

1 2 3

Select the completed archives you want to remove from the Move Archive Status page. Click the Delete button on the toolbar. At the prompt Do you want to delete the source archives as well?, click Yes if you want to delete the associated source archives, or No if you do not.

If you choose not to delete source archives when you remove them from the Move Archive Status page, you can remove them subsequently from the Administration Console.

Retrying Move Archive operations

Move operations can fail or complete with errors due to transient problems. For example, move operations can fail because the source vault store is unavailable during the initial data copy stage. When this happens, you can retry move operations after you have resolved the problem. Move Archive lets you retry move operations that have a status of Failed, or Completed with errors unless the errors occurred during the verification stage. For more information on move operations that have completed with errors, see the following technical note on the Enterprise Vault Support Web site: http://www.symantec.com/docs/TECH77475

92

Day-to-day administration About moving archives

To retry move operations

1 2 3

In the Move Archive Status page, select one or more move operations that have the status Failed or Completed with errors Right-click the selected move operations and click Retry. Click OK to confirm your request. Move Archive resubmits the move operations, and their status initially reverts to Queued before processing begins again.

When Move Archive starts processing a retried move operation, it begins processing from the first point of failure.

Move Archive reporting and monitoring

Move Archive creates up to three report files for each move operation, in the Reports\Move Archive subfolder of the Enterprise Vault installation folder (for example C:\Program File (x86)\Enterprise Vault). Move Archive names the three report files using the following convention:
MoveArchive_archive_yyyymmddhhmmss.txt MoveArchive_archive_yyyymmddhhmmss_Errors.txt MoveArchive_archive_yyyymmddhhmmss_Verification_nnnn.txt

where:

archive is the name of the archive. yyyymmddhhmmss is the date and time when the report was generated. nnnn represents a sequential number. To produce verification files of a manageable size, Move Archive rolls over the verification report to a new file each time the maximum file size is reached. This sequential number shows the order of the files.

MoveArchive_archive_yyyymmddhhmmss.txt contains a summary report for the

move operation. The report shows the start and end time for the move operation, including the times for the start and end of each phase. It also shows counts of the items processed.
MoveArchive_archive_yyyymmddhhmmss_Errors.txt reports errors that occurred

during the move operation.

MoveArchive_archive_yyyymmddhhmmss_Verification_nnnn.txt contains a

report of any differences between source items and their corresponding items in the destination archive.

Day-to-day administration Deleting an archive

93

For information on how to troubleshoot Move Archive verification errors, see the following technical note on the Enterprise Vault Support Web site: http://www.symantec.com/docs/TECH77475

Deleting an archive
You can delete an archive, provided that the Administration Console shows a status of Available or Closed. Note the following:

There is no undo when you delete an archive, and you cannot stop the deletion process. Be careful about deleting an archive that still has an associated mailbox. There will be many errors from the Exchange Mailbox task when it tries to archive to a deleted archive. Make a note of those users who have access to the archive and then get them to change their archiving settings, so that they do not try to archive to the archive you are about to delete. Use the Permissions tab on the archive's property page to find out who has access to the archive.

To delete an archive

1 2 3

In the Administration Console, with the archive displayed in the listing, press F5 to refresh the view. This shows you the archive's current status. Right-click the archive that you want to delete and, on the shortcut menu, click Delete. When prompted, confirm that you do want to delete the archive. The archive's status changes to Marked for deletion. You can no longer view the properties of the archive and shortcuts to items within the archive no longer work.

Deleting a vault store

You can delete a vault store that is no longer required. Deletion permanently removes all the partitions and archives that the vault store contains, and all the items that are stored in them. You can delete a vault store only if all of the following conditions apply to the vault store:

It is not a default vault store for automatically-enabled archives. It does not contain any archives that are associated with archiving targets.

94

Day-to-day administration Setting a system message

Its status is Available. It is not in backup mode.

When you delete a vault store, its status changes to Marked for Deletion. Shortcuts to items within the vault store's archives no longer work. Enterprise Vault may take a long time to complete the deletion operation. If the vault store contains any items that are on legal hold, or any SIS parts that are referenced by other vault stores, Enterprise Vault marks the vault store for deletion but it does not delete the vault store until these conditions no longer apply. Note: If you delete a vault store, you cannot stop or undo the process. The action overrides any form of deletion protection that is applied to items or Retention Categories, other than legal hold. To delete a vault store

1 2

In the Administration Console, select the vault store group that contains the vault store that you want to delete. The right pane of the Administration Console displays the status of the group's vault stores. Click F5 to refresh the view. The right pane displays each vault store's current status, and indicates whether backup mode is set. You can only delete a vault store if the status is Available and backup mode is not set. Right-click the vault store that you want to delete and, on the shortcut menu, click Delete. On the warning dialog, click Delete. The status of the vault store changes to Marked for Deletion. When Enterprise Vault eventually completes the deletion, it removes the vault store from the list.

3 4

Setting a system message

Users see the system message when they use the Enterprise Vault Web Access application. For example, you can use the message to indicate periods when there is going to be an interruption to the service because of hardware changes. The message is not visible to a user who is using a shortcut to retrieve an item, but only to a user who is searching by using the Enterprise Vault Web Access application. The message is available to all users in the Enterprise Vault site.

Day-to-day administration About index volumes

95

To change the system message from the Vault Administration Console

1 2 3 4 5 6

In the left pane of the Administration Console expand the hierarchy until the appropriate vault site is visible. Right-click the vault site and then, on the shortcut menu, click Properties. In the Site Properties dialog box, click the General tab. Edit System message as required. Click OK to accept your changes. Stop and restart the IIS Admin service to make the change take effect.

About index volumes

When an index volume becomes full, Enterprise Vault automatically creates a new one. In the Administration Console, the Advanced tab of an archives properties shows the number of index volumes. Each new index volume does not have the same index root path as the previous one. The new location for the new index is a random selection from the Indexing Services open index root paths. If an archive has more than one index volume, the initial search is performed against the current index volume, which contains the most recently-archived items. To view search results from earlier index volumes, you must choose a date range from a list. The date ranges correspond to the archived date range of items in the index volumes. Rollover is more likely to occur for File System Archiving archives, Journal archives, and Public Folder archives than for normal mailbox archives. Rollover archives created before Enterprise Vault 6.0 SP1 are not merged back into the master archive. Archiving continues to the current rollover archive, and that archives index expands to multiple index volumes as necessary.

Moving the directory database

You can move the directory database between SQL Server instances. This is useful for reconfiguration and disaster recovery. To move the directory database

1 2

Move the directory database to the new SQL Server. Make sure that the Vault Service account has the correct permissions to access the new database.

96

Day-to-day administration Moving a vault store database

3 4 5 6 7

Make sure that the new SQL Server is running. In the left pane of the Administration Console, right-click the Enterprise Vault icon. On the shortcut menu, click Properties. Click Change Directory SQL Server. Enter the new SQL Server.

Moving a vault store database

You can move a vault store database to a different SQL Server. This is useful for reconfiguration and disaster recovery. To move the vault store database

1 2 3 4 5 6 7 8

Move the vault store database to the new SQL Server. Make sure that the Vault Service account has the correct permissions to access the new database. Make sure that the new SQL Server is running. Stop the storage service that is associated with the vault store whose database you want to move. In the Administration Console, right-click the vault store whose database you want to move, and click Properties. Click the Database tab. In the SQL Server box, enter the name of the new SQL Server. Click OK.

Moving a fingerprint database

You can move a vault store group's fingerprint database to a different SQL Server if required, for example during disaster recovery. For information on how to move a fingerprint database, see the following TechNote on the Enterprise Vault Support Web site: http://www.symantec.com/docs/TECH64655

Day-to-day administration Moving the Monitoring database

97

Moving the Monitoring database

You can move the Monitoring database between SQL Server instances. This is useful for reconfiguration and disaster recovery. To move the Monitoring database

1 2 3 4

Move the EnterpriseVaultMonitoring database to the new SQL Server. Ensure that the Vault Service account has the required permissions to access the new database. Ensure that the new SQL Server is running. Connect to the SQL server that is hosting the EnterpriseVaultMonitoring database, using SQL Enterprise Manager or SQL Query Analyzer, or a similar tool. Enter and run the following SQL commands:
USE EnterpriseVaultDirectory UPDATE MonitoringSettings SET SQLServer = "New_SQL_Server"

where New_SQL_Server is the name of the new SQL server.

Moving the audit database

You can move the audit database to a different SQL Server if required, for example during disaster recovery. When you have moved the database, complete the following procedure on each Enterprise Vault server on which auditing is enabled. To move the audit database

1 2 3

Move the audit database to the new SQL Server. On the Enterprise Vault server, use the ODBC Data Source Administrator to select the new SQL Server on the EVAudit ODBC data source. Test the data source when the ODBC Data Source Administrator gives you the opportunity.

98

Day-to-day administration Moving the audit database

Chapter

Advanced Domino mailbox and desktop policy settings

This chapter includes the following topics:

About the advanced policy settings for Domino mailbox and desktop policy Editing the advanced settings for Domino mailbox and desktop policy Domino mailbox policy advanced settings Domino desktop policy advanced settings

About the advanced policy settings for Domino mailbox and desktop policy
The Domino mailbox policy advanced settings control advanced archiving behavior such as the action to take for failed items, and the method for resolving email addresses. The Domino desktop policy advanced settings let you fine-tune the user experience provided by the Domino client desktops. The settings control advanced features and functionality of Vault Cache.

Editing the advanced settings for Domino mailbox and desktop policy
The advanced settings for a policy are provided on the Advanced tab of the policy properties.

100

Advanced Domino mailbox and desktop policy settings Domino mailbox policy advanced settings

To edit the advanced settings for a policy

1 2 3 4 5

In the left pane of the Administration Console, expand the hierarchy until Policies is visible. Expand Policies. Expand Domino. Click Mailbox or Desktop as appropriate. In the right-hand pane, double-click the name of the policy you want to edit. The policys properties are displayed.

6 7 8

Click the Advanced tab. Next to List settings from, select the category of settings that you want to modify. Edit the settings as required. You can double-click a setting to edit it, or click it once to select it and then click Modify.

How to apply the new settings for Domino mailbox and desktop policy
Modified mailbox and desktop policy settings are applied to users' mailboxes during the next synchronization run of the Domino Provisioning task. If you want to apply the changes before the next synchronization, run Synchronize Individual Mailboxes, which is on the Synchronization tab of the Domino Provisioning tasks properties.

Domino mailbox policy advanced settings

These settings control advanced aspects of Domino mailbox archiving. There is one category of Domino mailbox policy advanced settings:

Archiving General: Domino mailbox policy

Archiving General: Domino mailbox policy

These settings control advanced aspects of archiving behavior. The Archiving General settings are:

Action for failed items (Domino Archiving General setting) Archive draft items (Domino Archiving General setting) Lookup e-mail addresses (Domino Archiving General setting)

Advanced Domino mailbox and desktop policy settings Domino mailbox policy advanced settings

101

Reset archive names (Domino Archiving General setting) Strip attachments to non-shortcut items (Domino Archiving General setting)

Action for failed items (Domino Archiving General setting)

Description Lets you control whether items that fail three times to be archived are processed on later archiving runs. Reprocess. Items that have failed repeatedly are reprocessed on each archiving run. Do not reprocess (default). Items that have failed repeatedly are not reprocessed on later archiving runs.

Supported values

Legacy name

SetFailedMsgsDoNotArchive

Archive draft items (Domino Archiving General setting)

Description Lets you control whether draft items are archived. Changes to the setting are applied to users' mail files when the Domino Provisioning task next runs. To apply the changes immediately, click Synchronize Individual Mailboxes on the Synchronization tab of the Domino Provisioning task properties.

Supported values

Off (default). Draft items are not archived. On. Draft items are archived. When draft items are archived, they never change into shortcuts, and attachments are not removed.

Legacy name

ArchiveDraftItems

Lookup e-mail addresses (Domino Archiving General setting)

Description Controls whether email addresses are resolved using the Domino Directory, including SMTP addresses where available.

Supported values

On (default). Email addresses are resolved. Off. Email addresses are not resolved.

Legacy name

LookupNames

102

Advanced Domino mailbox and desktop policy settings Domino desktop policy advanced settings

Reset archive names (Domino Archiving General setting)

Description Controls whether archive names are kept synchronized with Domino user names. If the setting is On, any changes to the Domino user name are applied to the archive name when the Domino Provisioning task runs, either on a scheduled run or when the administrator clicks Synchronize Individual Mailboxes on the task properties.

Supported values

On (default). Archive names are updated during synchronization. Off. Archive names are not updated during synchronization.

Strip attachments to non-shortcut items (Domino Archiving General setting)

Description Controls whether attachments are removed from appointments and tasks after archiving. These items are not changed into Enterprise Vault shortcuts when they are archived. If Enterprise Vault removes an attachment, it replaces it with a link to the attachment. On (default). Attachments are removed from non-shortcut items after archiving. Off. Attachments are not removed from non-shortcut items after archiving.

Supported values

Legacy name

StripAttachmentsToNonShortcutItems

Domino desktop policy advanced settings

These settings allow you to fine-tune the behavior of the Enterprise Vault Lotus Notes client. There is one category of Domino desktop policy advanced settings:

Vault Cache: Domino desktop policy

Vault Cache: Domino desktop policy

These settings control advanced behavior of the Lotus Notes client with respect to Vault Cache. The Vault Cache settings are:

Pause interval (Domino Vault Cache setting) Preemptive archiving threshold (Domino Vault Cache setting)

Advanced Domino mailbox and desktop policy settings Domino desktop policy advanced settings

103

Pause interval (Domino Vault Cache setting)

Description Specifies the number of minutes to wait before Enterprise Vault starts searching for items that need to be added to the Vault Cache.

Supported values

Integer value, specifying a number of minutes. The default is 3.

Preemptive archiving threshold (Domino Vault Cache setting)

Description Specifies the number of days before archiving at which Enterprise Vault copies items preemptively to the Vault Cache, in anticipation that the items will soon be archived. The copy takes place on the user's computer, with no further download required.

Supported values

Integer value, specifying a number of days. The default is 7.

104

Advanced Domino mailbox and desktop policy settings Domino desktop policy advanced settings

Chapter

Advanced Exchange mailbox and desktop policy settings

This chapter includes the following topics:

About the advanced Exchange mailbox and desktop settings Editing the advanced Exchange mailbox and desktop settings Exchange mailbox policy advanced settings Exchange desktop policy advanced settings

About the advanced Exchange mailbox and desktop settings

The Exchange mailbox policy advanced settings control advanced aspects of archiving behavior such as whether deleted items and unexpired calendar events are archived. The Exchange desktop policy advanced settings let you fine-tune the user experience provided by the Exchange client desktops. The settings control the advanced features and functionality provided by Vault Cache and Virtual Vault for Outlook and the Outlook and OWA clients.

106

Advanced Exchange mailbox and desktop policy settings Editing the advanced Exchange mailbox and desktop settings

Editing the advanced Exchange mailbox and desktop settings

The advanced settings for a policy are provided on the Advanced tab of the policy properties. To edit the advanced settings for a policy

1 2 3 4 5

In the left pane of the Administration Console, expand the hierarchy until Policies is visible. Expand Policies. Expand Exchange. Click Mailbox or Desktop as required. In the right-hand pane, double-click the name of the policy you want to edit. The policys properties are displayed.

6 7 8

Click the Advanced tab. Next to List settings from, select the category of settings that you want to modify. Edit the settings as required. You can double-click a setting to edit it, or click it once to select it and then click Modify.

How to apply the new Exchange mailbox and desktop settings

Modified mailbox and desktop policy settings are applied to users' mailboxes during the next synchronization run of the Exchange Mailbox task. If you want to apply the changes before the next synchronization, run Synchronize, which is on the Synchronization tab of the Exchange Mailbox tasks properties.

Exchange mailbox policy advanced settings

These settings control advanced aspects of Exchange mailbox archiving. There is one category of Exchange mailbox policy advanced settings:

Archiving General (Exchange mailbox policy advanced settings)

Archiving General (Exchange mailbox policy advanced settings)

The Archiving General settings enable you to control advanced archiving behavior.

Advanced Exchange mailbox and desktop policy settings Exchange mailbox policy advanced settings

107

The Archiving General settings are:

Archive deleted items (Exchange Archiving General setting) Archive draft items (Exchange Archiving General setting) Archive Exchange Managed Folders (Exchange Archiving General setting) Archive naming convention (Exchange Archiving General setting) Archive unexpired Calendar Events (Exchange Archiving General setting) Code pages for right-to-left custom shortcuts (Exchange Archiving General setting) Do not archive pending reminders (Exchange Archiving General setting) Encode custom body using appropriate code pages (Exchange Archiving General setting) Future item retention category (Exchange Archiving General setting) Include default and anonymous permissions (Exchange Archiving General setting) Inherited permissions (Exchange Archiving General setting) Maximum message size to archive in MB (Exchange Archiving General setting) Pending shortcut timeout (Exchange Archiving General setting) Reset archive names (Exchange Archiving General setting) Set failed messages 'Do Not Archive' (Exchange Archiving General setting) Shortcut sync for mail clients (Exchange Archiving General setting) Strip attachments to non-shortcut items (Exchange Archiving General setting) Synchronize folder permissions (Exchange Archiving General setting) Warn if default or anonymous permissions exist (Exchange Archiving General setting) Warn when mailbox not under quota after archiving run (Exchange Archiving General setting)

Archive deleted items (Exchange Archiving General setting)

Description Supported values Controls whether items are archived from the Deleted Items folder.

Off (default). Items in the Deleted Items folder are not archived. On. Items in the Deleted Items folder are archived.

108

Advanced Exchange mailbox and desktop policy settings Exchange mailbox policy advanced settings

Legacy name

ArchiveDeletedItems

Archive draft items (Exchange Archiving General setting)

Description Controls whether draft items are archived. This applies to all draft items, not just those in the Drafts folder. Enterprise Vault does not convert archived draft items to shortcuts, even if the policy is configured to create shortcuts. Archived draft items are treated as shortcuts for purposes of shortcut deletion. Enterprise Vault does not remove attachments from archived draft items. Supported values

Off (default). Draft items not archived. On. Draft items are archived.

Archive Exchange Managed Folders (Exchange Archiving General setting)

Description Controls whether items are archived from Microsoft Exchange managed folders, and whether to apply managed content settings. Managed folders were introduced in Exchange Server 2007. Off. Enterprise Vault does not archive items from managed folders. Additionally, users are not allowed to archive items manually from managed folders. Normal. Enterprise Vault treats managed folders as normal mailbox folders. Managed (default). Enterprise Vault archives items from managed folders and uses retention settings that are synchronized from Exchange Server.

Supported values

Legacy name

ArchiveManagedFolders2

Advanced Exchange mailbox and desktop policy settings Exchange mailbox policy advanced settings

109

Archive naming convention (Exchange Archiving General setting)

Description By default, archives are given the same name as the associated mailbox on an Exchange Server. In some environments this may mean that the archive name is not unique. This can cause confusion when searching multiple archives, especially when items are returned from different archives that have the same name. The Archive naming convention setting lets you select the naming convention to use for archives. You can use this setting to ensure that the name given to an archive is unique within the organization. This setting is particularly useful if you use Symantec Discovery Accelerator to search multiple Exchange mailbox archives. If you modify the value of this setting, check that the value of the advanced policy setting, Reset archive names, is On. This setting is in the Archiving general list of settings. To update the names of existing archives so that they conform to the new naming convention, synchronize the mailboxes that use the modified policy.

110

Advanced Exchange mailbox and desktop policy settings Exchange mailbox policy advanced settings

Supported values

The following list describes the valid values for the setting. In the examples given, the resultant archive names assume that the user, John Doe, has the following account and mailbox details: Account logon name in Active Directory: "JDoe" Domain: "EXAMPLE" Exchange Server mailbox name: "John Doe"

Mailbox name (Default) The name of the associated Exchange mailbox. For example, John Doe Mailbox name (account name) The name of the associated mailbox, followed by the mailbox user's account logon name in Active Directory. For example, John Doe (JDoe) Mailbox name (domain-qualified account name) The name of the associated mailbox, followed by the domain and account logon name of the mailbox user (in the form DOMAIN\name). For example, John Doe (EXAMPLE\JDoe) Account name (mailbox name) The account logon name of the mailbox user, followed by the name of the associated mailbox. For example, JDoe (John Doe) Domain-qualified account name (mailbox name) The domain and account logon name of the mailbox user (in the form DOMAIN\name), followed by the name of the associated mailbox. For example, EXAMPLE\JDoe (John Doe)

Legacy name

ArchiveNameFormat

Archive unexpired Calendar Events (Exchange Archiving General setting)

Description Supported values Controls whether unexpired calendar items are archived.

Off (default). Unexpired calendar items are not archived. On. Unexpired calendar items are archived.

Legacy name

ArchiveNonExpiredCalEvents

Advanced Exchange mailbox and desktop policy settings Exchange mailbox policy advanced settings

111

Code pages for right-to-left custom shortcuts (Exchange Archiving General setting)
Description A semicolon-separated list of code pages. Custom shortcuts that use these code pages are always formatted right-to-left.

Supported values

A list of code pages, separated by semicolons. For example, 1255;1256. Default is 1255.

Legacy name

CustomShortcutRTLCodePages

Do not archive pending reminders (Exchange Archiving General setting)

Description Controls whether Enterprise Vault archives items that have pending reminders.

Supported values

Off. Items that have pending reminders are archived. On (default). Items that have pending reminders within the next five years are not archived.

Legacy name

DontArchiveItemsPendingReminder

Encode custom body using appropriate code pages (Exchange Archiving General setting)
Description Use the appropriate ANSI code pages (rather than always using Unicode) when encoding the bodies of customized Enterprise Vault shortcuts. Off. Use Unicode when encoding the bodies of customized Enterprise Vault shortcuts. On. Always use ANSI code pages when encoding the bodies of customized Enterprise Vault shortcuts.

Supported values

Legacy name

EncodeCustomBodyUsingAppropriateCodePages

112

Advanced Exchange mailbox and desktop policy settings Exchange mailbox policy advanced settings

Future item retention category (Exchange Archiving General setting)

Description The name of the retention category to use for calendar, meeting, and task items that have end dates in the future; that is, unexpired calendar, meeting, and task items. The retention category must exist. If Enterprise Vault storage expiry for your site is based on the archived date of an item, then archived calendar, meeting, or task items with an end date in the future could be deleted by Enterprise Vault storage expiry before the end date of the item. To prevent this, you can create a retention category that Enterprise Vault will apply automatically to such items when they are archived, and specify this retention category in this policy setting. In the retention category properties, we recommend that you set the value of Base expiry on to Modified date, and configure the retention period as Retain items forever.

Note: The retention category will not be applied retrospectively to

items that have already been archived. Supported values The name of an existing retention category that you have set up to be used for these items. For example, Future Calendar Items. Leave blank to use the default retention category for the provisioning group. This is the default value.

Legacy name

FutureItemsRetCat

Include default and anonymous permissions (Exchange Archiving General setting)

Description Controls whether Enterprise Vault includes Default and Anonymous permissions when synchronizing each mailbox with its default archive. Enterprise Vault automatically removes existing Default and Anonymous user settings from archives unless you choose to synchronize them. Supported values Off (default). Do not synchronize Default or Anonymous permissions. On. Synchronize Default and Anonymous permissions. This has the side-effect that users can view each others archives.

Legacy name

IncludeDefOrAnonPerms

Advanced Exchange mailbox and desktop policy settings Exchange mailbox policy advanced settings

113

Inherited permissions (Exchange Archiving General setting)

Description Controls whether Enterprise Vault includes inherited permissions when synchronizing permissions between mailboxes and archives.

Supported values

Off (default). Do not synchronize inherited permissions. On. Synchronize inherited permissions.

Legacy name

IncludeInheritedRights

Maximum message size to archive in MB (Exchange Archiving General setting)

Description Supported values Controls the maximum size of messages that are archived.

0. No restriction on maximum message size. Integer larger than 0. The maximum size of messages that are archived, in megabytes. Default is 250.

Legacy name

MaxMessageSizeToArchiveMB

Pending shortcut timeout (Exchange Archiving General setting)

Description Specifies the number of days to allow items to remain in the state of archive-pending, restore-pending, or delete-pending before they are reset. Off (default). Archive-pending, restore-pending, and delete-pending shortcuts are never reset. 0. When run in report mode, Exchange Mailbox tasks reset all archive-pending, restore-pending, and delete-pending shortcuts. When run in normal mode, the shortcuts are not reset. Any integer larger than zero. Archive-pending, restore-pending, and delete-pending shortcuts that are older than this number of days are reset. This happens in both normal archiving and in Report Mode.

Supported values

Legacy name

PendingShortcutTimeout

Reset archive names (Exchange Archiving General setting)

Description Controls whether, during synchronization, archive names are automatically changed to match mailboxes names.

114

Advanced Exchange mailbox and desktop policy settings Exchange mailbox policy advanced settings

Supported values

Off. During synchronization archive names are never changed. On (default). During synchronization, archive names are automatically changed if necessary to match mailbox names.

Legacy name

ResetArchiveNames

Set failed messages 'Do Not Archive' (Exchange Archiving General setting)
Description If an item cannot be archived, the default Exchange Mailbox task behavior is to reprocess the item on the next archiving run because such items can often be successfully archived on a second try. This setting enables you to change the behavior so items that fail archiving are marked as Do Not Archive and thus are not reprocessed on the next archiving run. Supported values

Off (default). Failed items are not marked as Do Not Archive. On. Failed items are marked as Do Not Archive.

Legacy name

SetFailedMsgsDoNotArchive

Shortcut sync for mail clients (Exchange Archiving General setting)

Description Controls whether Enterprise Vault creates shortcuts for items in the cache of a simple mail client, such as Microsoft Entourage. This setting applies to registered Entourage mailboxes only. Because of the way in which shortcuts are synchronized, this setting has no effect when it is used with Entourage 2008 Web Services Edition. This setting applies to Entourage 2004 and Entourage 2008 only. Supported values

Off (default). Do not create shortcuts. On. Create shortcuts for items in the cache.

Advanced Exchange mailbox and desktop policy settings Exchange mailbox policy advanced settings

115

Strip attachments to non-shortcut items (Exchange Archiving General setting)

Description Controls whether attachments are removed from calendar items, meeting items (including requests, responses and cancellations), task and task request items, and contacts after archiving. These items are not changed into Enterprise Vault shortcuts when they are archived. If Enterprise Vault removes an attachment, it replaces it with a link to the attachment. On (default). Attachments are removed from non-shortcut items after archiving. Off. Attachments are not removed from non-shortcut items after archiving.

Supported values

Legacy name

StripAttachmentsToNonShortcutItems

Synchronize folder permissions (Exchange Archiving General setting)

Description Controls whether synchronization of delegate and shared folder permissions within mailboxes are synchronized. If these are not synchronized, only mailbox owners have access to the corresponding archives. For example, this prevents delegates, from having access to mailbox archives.

Supported values

Off. Folder permissions are not synchronized. On (default). Folder permissions are synchronized.

Legacy name

SynchronizeFolderPermissions

116

Advanced Exchange mailbox and desktop policy settings Exchange mailbox policy advanced settings

Warn if default or anonymous permissions exist (Exchange Archiving General setting)

Description Controls whether Enterprise Vault places an entry in the Enterprise Vault Event Log when a folder has Default or Anonymous permissions set. The warning looks similar to the following: Date: 29/06/2004 Time: 18:00:42 Type: Warning User: N/A Computer: DEMO Description: The folder has Anonymous permissions set that grant all users access to this folder. By default, this has not been synchronized to the users archive. MailboxDn: /o=Admin/ou=First Administrative Group/cn=Recipients/cn=HardyO FolderPath: Inbox Source: Enterprise Vault Category: Archive Service Event ID: 3284

Supported values

Off. Do not warn when a folder has Default or Anonymous permissions set. On (default). Warn when a folder has Default or Anonymous permissions set.

Legacy name

WarnWhenDefOrAnonPerms

Warn when mailbox not under quota after archiving run (Exchange Archiving General setting)
Description Controls whether a warning is entered in to the event log when too few archivable items were available to take a mailbox below the quota-free level setting. Off. Never log a warning if too few items were available to reduce the mailbox to the required usage level. On (default). Log a warning if too few items were available to reduce the mailbox to the required usage level.

Supported values

Legacy name

WarnNotEnoughArchivedForQuota

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

117

Exchange desktop policy advanced settings

These settings control advanced aspects of Exchange desktop policy configuration. There are four categories of Exchange desktop policy advanced settings:

Outlook (Exchange desktop policy advanced settings) OWA (Exchange desktop policy advanced settings) Vault Cache (Exchange desktop policy advanced settings) Virtual Vault (Exchange desktop policy advanced settings)

Outlook (Exchange desktop policy advanced settings)

The Outlook settings enable you to control the behavior of the Enterprise Vault Outlook Add-Ins. Except where noted, none of the settings has any effect in the Enterprise Vault Client for Mac OS X. The Outlook settings are:

Add server to intranet zone (Exchange Outlook setting) Allow script in public folders (Exchange Outlook setting) Allow script in shared folders (Exchange Outlook setting) Allow shortcut copy (Exchange Outlook setting) Automatically delete IE file cache (Exchange Outlook setting) Automatically re-enable Outlook add-in (Exchange Outlook setting) Behavior when Archive Explorer closes (Exchange Outlook setting) Deploy forms locally (Exchange Outlook setting) Folder properties visible (Exchange Outlook setting) Force form reload on error (Exchange Outlook setting) Forward original item (Exchange Outlook setting) Launch Archive Explorer (Exchange Outlook setting) Limit automatic re-enabling of add-in (Exchange Outlook setting) Mailbox properties visible (Exchange Outlook setting) Mark PST files (Exchange Outlook setting) Message properties visible (Exchange Outlook setting) Outlook Add-In behavior (Exchange Outlook setting)

118

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Printing behavior (Exchange Outlook setting) PST Import pause interval (Exchange Outlook setting) PST Import work check interval (Exchange Outlook setting) PST search interval (Exchange Outlook setting) Public Folder operations (Exchange Outlook setting) Remove PST entries (Exchange Outlook setting) Remove server from intranet zone (Exchange Outlook setting) Reply behavior (Exchange Outlook setting) RPC over HTTP connection (Exchange Outlook setting) RPC over HTTP Proxy URL (Exchange Outlook setting) RPC over HTTP restrictions (Exchange Outlook setting) Search behavior (Exchange Outlook setting) Shortcut download progress (Exchange Outlook setting) Soft deletes (Exchange Outlook setting) Use proxy settings (Exchange Outlook setting) Web Application URL (Exchange Outlook setting)

Add server to intranet zone (Exchange Outlook setting)

Description Adds the listed servers to the Internet Explorer local intranet zone. If you use this setting, users are not prompted for their logon details when they search their archives or view or restore archived items. The change applies to the current user only, so other users of the same computer are unaffected. If the user does not have permission to modify Internet Explorer, the security settings are not changed and no error is generated. You cannot use this setting if you have applied Federal Desktop Core Configuration (FDCC) group policy objects (GPO) to Windows XP and Vista computers in your organization. On FDCC-compliant desktops users cannot change settings in the local intranet zone on their computers. For instructions on how you can configure Internet Explorer for these users, see the section Publishing Enterprise Vault server details to FDCC compliant computers in the Installing and Configuring manual.

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

119

Supported values

A text string. Defines the computers to be added to the Internet Explorer local intranet zone. The string can contain wildcard characters, domain names, DNS aliases, or IP addresses. To specify multiple computers, separate the names using a semicolon (;). The syntax is as follows: computer1[;computer2][;computer3]... Some examples of text strings are as follows: webserver.mycorp.com *.mycorp.com mywebserver;*.mycorp.com

Legacy name

AddServerToIntranetZone

Allow script in public folders (Exchange Outlook setting)

Description Controls whether the Outlook Add-in automatically sets the Allow Script In Public Folders setting. This setting is required in order for the Outlook Add-In to open shortcuts that are in public folders. Force off. The Outlook Add-in cannot open shortcuts that are in public folders. Force on (default). The Outlook Add-in can open shortcuts that are in public folders. Keep users setting. The users Outlook setting of Allow Script In Public Folders is not changed.

Supported values

Legacy name

AllowScriptPublicFolders

Allow script in shared folders (Exchange Outlook setting)

Description Controls whether the Outlook setting Allow Script In Shared Folders is automatically set by the Outlook Add-in. This setting is required in order for the Outlook Add-In to be able to open shortcuts that are in shared folders. Force off. The Outlook Add-in cannot open shortcuts that are in shared folders. Force on (default). The Outlook Add-in can open shortcuts that are in shared folders. Keep users setting. The users Outlook setting of Allow Script In shared Folders is not changed.

Supported values

120

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Legacy name

AllowScriptSharedFolders

Allow shortcut copy (Exchange Outlook setting)

Description Controls the behavior when a user tries to copy a shortcut. It is possible to make Enterprise Vault restore the original item, rather than copy the shortcut. This can prevent any confusion that could arise if an archived item is later deleted, leaving orphaned shortcuts that no longer work. Off (default). When a user tries to copy a shortcut, a message is displayed explaining that the item cannot be copied, but it can be copied after the item is restored. On. The user is allowed to copy the shortcut. (This is the same behavior as in Enterprise Vault versions before 6.0.) If the user later deletes the shortcut and the corresponding archived item, any copies of the shortcut will no longer work.

Supported values

Legacy name

AllowCopyShortcut

Automatically delete IE file cache (Exchange Outlook setting)

Description Controls whether the Enterprise Vault add-in to Outlook automatically deletes a user's Temporary Internet files if the Internet Explorer cache is preventing archived items from being displayed. Do not delete files (default). Temporary Internet files are never deleted. Delete files and tell user. The Temporary Internet files are deleted and a message informs the user that they have been deleted. Delete files silently. The Temporary Internet files are deleted and the user is not informed. Ask user. The user is asked whether the Temporary Internet files should be deleted.

Supported values

Legacy name

AutoDeleteIECache

Automatically re-enable Outlook add-in (Exchange Outlook setting)

Description Controls whether the Enterprise Vault Outlook Add-In is automatically re-enabled if it has been disabled.

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

121

Supported values

Do not re-enable. The Outlook Add-In is never automatically re-enabled if it has been disabled. Re-enable and tell user (default). The Outlook Add-In is automatically re-enabled if it has been disabled and a message informs the user that this has happened. Re-enable silently. The Outlook Add-In is automatically re-enabled if it has been disabled and the user is not informed. Ask user. The user is asked whether the Outlook Add-In should be re-enabled.

Legacy name

AutoReEnable

Behavior when Archive Explorer closes (Exchange Outlook setting)

Description Controls whether there is a forced refresh of the view when exiting from Archive Explorer on Outlook 2003. This overcomes a problem with some screens not refreshing properly.

Supported values

No refresh. No forced refresh. Refresh (default). Force a refresh.

Legacy name

UseFolderSwitchOnAEClose

Deploy forms locally (Exchange Outlook setting)

Description Controls how the Enterprise Vault Exchange forms are deployed to users' Personal Form Libraries. This setting enables you to control the deployment of Enterprise Vault Exchange forms in an environment in which there is no Organizational Forms library. If you choose to deploy forms locally, the forms are automatically updated when you upgrade to a later version of Enterprise Vault.

122

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Supported values

Never. Never deploy the Enterprise Vault Exchange forms to users Personal Form Libraries. When no Org Forms. Deploy to users Personal Form Libraries when there is no Organization Forms Library.

Always (default). Always deploy forms locally. Delete. Delete locally-deployed forms. This may be useful if, for example, your Exchange Server environment changes so that an Organizational Forms Library becomes available. This setting enables you to remove all locally-deployed forms from users computers. When upgrading to a later Enterprise Vault version, you do not need to use this option to delete existing local forms. The forms are automatically upgraded.

Legacy name

DeployFormsLocally

Folder properties visible (Exchange Outlook setting)

Description Controls whether folder properties show the Enterprise Vault property tab. If you have locked all the Enterprise Vault settings, you may want to hide the property tab too. By hiding the property tab, you are in effect locking all the settings, because users cannot get to the tab page to change them. Supported values

Hide tab. Enterprise Vault folder properties are hidden. Show tab (default). Enterprise Vault folder properties are shown.

Legacy name

FolderPropertiesVisible

Force form reload on error (Exchange Outlook setting)

Description Controls whether the Outlook registry entry ForceFormReload is written to force Outlook to reload forms on error. Note that this registry entry applies to all Outlook forms, so changing this setting may affect other applications. See the following Microsoft articles for more information:

http://support.microsoft.com/kb/839804 (Outlook 2003) http://support.microsoft.com/kb/919596 (Outlook 2007)

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

123

Supported values

Remove entry. Remove the registry entry. This means that Outlook does not reload forms on error. Write entry (default). Write the registry entry. This forces Outlook to reload forms on error.

Legacy name

SetForceFormReload

Forward original item (Exchange Outlook setting)

Description Controls the behavior when a user forwards a shortcut. The default is to forward the archived item, but it is possible to forward the contents of the shortcut itself.

Supported values

Shortcut. Forward the shortcut. Original (default). Forward the archived item. Items of type IPM.Document or IPM.Appointment cannot be forwarded. If a user tries to forward one of these an explanatory message is displayed.

Legacy name

ForwardOriginalItem

Launch Archive Explorer (Exchange Outlook setting)

Description Controls whether Archive Explorer appears integrated with the Outlook window or appears in a separate Web browser window. Note that there is also an equivalent registry value that you can set on individual computers. To set the registry value, create a DWORD value that is called LaunchAEInBrowser under the following registry key on the user's computer: HKEY_CURRENT_USER\SOFTWARE\KVS\Enterprise Vault\Client Give LaunchAEInBrowser a value of 1 to force Archive Explorer to appear in a separate browser window, or 0 to make Archive Explorer appear integrated with the Outlook window. Supported values In Outlook (default). Archive Explorer appears integrated with the Outlook window. Separate browser. Archive Explorer appears in a separate Web browser window.

Legacy name

LaunchAEInBrowser

124

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Limit automatic re-enabling of add-in (Exchange Outlook setting)

Description Controls the maximum number of times in any seven-day period that the Outlook Add-In can re-enable itself as an Outlook add-in.

Supported values

An integer specify the maximum number of times that the Outlook Add-In can re-enable itself in any seven-day period. The default is 3.

Legacy name

MaxAutoReEnables

Mailbox properties visible (Exchange Outlook setting)

Description Controls whether the mailbox properties show the Enterprise Vault property tab. If you have locked all the Enterprise Vault settings, you may want to hide the property tab too. By hiding the property tab, you are in effect locking all the settings, because users cannot get to the tab page to change them. The Enterprise Vault mailbox properties tab is not available in Outlook 2010. Supported values

Hide tab. Mailboxes hide the Enterprise Vault property tab. Show tab (default). Mailboxes show the Enterprise Vault property tab.

Legacy name

MailboxPropertiesVisible

Mark PST files (Exchange Outlook setting)

Description Controls whether the Enterprise Vault client marks PST files with details of the owning account. This is useful if you are migrating the contents of PST files to Enterprise Vault. When marking is switched on then, when Outlook starts, the Enterprise Vault client tries to open every PST that is listed in the user's Outlook profile. Users are prompted for passwords to password-protected PSTs and receive error messages for any PSTs that are inaccessible. Supported values

Off. The Enterprise Vault client does not mark PST files On (default). The Enterprise Vault client marks PST files with details of the owning account.

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

125

Legacy name

MarkPSTs

Message properties visible (Exchange Outlook setting)

Description Controls whether individual message properties show the Enterprise Vault property tab. If you have locked all the Enterprise Vault settings, you may want to hide the property tab too.

Supported values

Hide tab. Messages hide the Enterprise Vault property tab. Show tab (default). Messages show the Enterprise Vault property tab.

Legacy name

MessagePropertiesVisible

Outlook Add-In behavior (Exchange Outlook setting)

Description Controls whether the Outlook Add-In behaves in exactly the same manner as the HTTP-Only Outlook Add-In. This can be useful if you want all users to have exactly the same functionality. The only differences in functionality are that the HTTP-Only Outlook Add-In does not provide access to the Enterprise Vault properties of items or folders and that it is not possible to specify the destination archive and retention category when performing a manual archive. Also, the Enterprise Vault mailbox properties tab is not available in Outlook 2010. Supported values

Normal. Outlook Add-In behavior is unchanged. HTTP-only (default). The Outlook Add-In behaves in exactly the same way as the HTTP-Only Outlook Add-In. If you decide to set Outlook Add-In behavior to HTTP-only, and your existing policies allow users to change Enterprise Vault folder settings, you may want to run Policy Manager to return all folders to your site settings. See the Utilities Guide for more information on Policy Manager.

Legacy name

UseSelfInstallFunct

Printing behavior (Exchange Outlook setting)

Description Controls the behavior when a user prints a shortcut. The default is to print the contents of the archived item, rather than the shortcut.

126

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Supported values

Shortcut. Print the contents of the shortcut. Archived item (default). Print the contents of the archived item.

Legacy name

PrintOriginalItem

PST Import pause interval (Exchange Outlook setting)

Description When using client-driven PST migration, this controls the amount of time the Outlook Add-In waits between completing the import of one PST file and starting the import of the next. This is also the time that the Outlook Add-In waits after Outlook is started before continuing with PST file import. Supported values

Integer. When importing PST files, the number of minutes to wait between PST files and the number of minutes to wait after Outlook starts before continuing PST file import. The default is 1 (minute).

Legacy name

PSTImportPauseInterval

PST Import work check interval (Exchange Outlook setting)

Description The number of minutes client-driven PST migration waits, having completed its work, before checking for more work.

Supported values

Integer. An integer value specifying the number of minutes to wait before checking for more work. The default is 60.

Legacy name

PSTImportNoWorkPauseInterval

PST search interval (Exchange Outlook setting)

Description When using client-driven PST migration, this controls the amount of time that the Outlook Add-In waits after searching a users computer for PST files before searching again.

Supported values

Integer. Indicates the number of days to wait between searches. The default is 7 (days).

Legacy name

PSTSearchInterval

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

127

Public Folder operations (Exchange Outlook setting)

Description Controls whether users can do the following:

Manually archive from public folders. Manually restore from public folders In public folders, delete shortcuts and their corresponding archived items

Supported values

Off (default). Users can archive, restore, or delete in public folders. Users must be enabled for mailbox archiving and must have Editor, Publishing Editor, or Owner permissions on the folders that they want to modify. On. Users cannot archive, restore, and delete in public folders.

Legacy name

DisablePublicFolderOps

Remove PST entries (Exchange Outlook setting)

Description Controls whether PST file entries are removed from users profiles when the migration of the corresponding PST files is complete. You can combine the values as required. For example, to remove PST entries for PST files that are hidden (4) or read-only (2), you would set Remove PST Entries to 6. Supported values 0 (default). Do not remove the profile entry after migrating a PST file. 1. Remove the profile entry if the PST file has been deleted from the users computer. 2. Remove the PST entry if the PST file is read-only.

4. Remove the PST entry if the PST file has the Hidden file attribute set.

Legacy name

RemovePSTEntries

128

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Remove server from intranet zone (Exchange Outlook setting)

Description Removes the listed servers from the Internet Explorer local intranet zone. The effect of this is that, unless you set up appropriate access, users are prompted for their user names and passwords when they search their archives or view or restore archived items. The change applies to the current user only, so other users of the same computer are unaffected. If the user does not have permission to modify Internet Explorer the security settings are not changed and no error is generated. Supported values

A text string. Defines the computers to be removed from the Internet Explorer local intranet zone. The string can contain wildcard characters, domain names, DNS aliases, or IP addresses. To specify multiple computers, separate the names using semicolons (;). The syntax is as follows: computer1[;computer2][;computer3]... Some examples of text strings are as follows: webserver.mycorp.com *.mycorp.com mywebserver;*.mycorp.com

Legacy name

RemoveServerFromIntranetZone

Reply behavior (Exchange Outlook setting)

Description Controls the behavior when a user replies to a shortcut. The default is to include the contents of the archived item, but it is possible to include the contents of the shortcut itself. Shortcut. Include the contents of the shortcut in the reply. (This is the same behavior as in Enterprise Vault versions before 6.0.) Original (default). Include the contents of the archived item.

Supported values

Legacy name

ReplyToOriginalItem

RPC over HTTP connection (Exchange Outlook setting)

Description Controls the connection to use when the Outlook Add-In contacts the Enterprise Vault Web Access Application using RPC over HTTP.

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

129

Supported values

Use proxy (default). With Exchange Server 2003, clients connect to the Web server on the Exchange RPC proxy server. In an Exchange Server 2007 or later environment, Outlook Anywhere clients connect to the Enterprise Vault Web Access application on the Enterprise Vault proxy server. Direct. Connect directly to the Enterprise Vault Web Access application on the Enterprise Vault server that hosts the archive.

Legacy name

RPCOverHTTPUseDirectConnection

RPC over HTTP Proxy URL (Exchange Outlook setting)

Description Enables you to specify an alternative URL for Enterprise Vault clients to contact when Outlook is configured to use RPC over HTTP. If RPC over HTTP connection is set to Use proxy, then Exchange Server 2003 RPC over HTTP clients connect to the virtual directory, EnterpriseVaultProxy, on the Exchange RPC proxy server. In an Exchange Server 2007 or later environment, Outlook Anywhere clients connect to the virtual directory, EnterpriseVault, on the Enterprise Vault proxy server. If you change the name of the virtual directory, then you can use this setting to specify the alternative URL. For example, if you change the virtual directory name to EVProxy, then you use the RPC over HTTP Proxy URL setting to specify the URL HTTP://Web_server/EVProxy where Web_server is the name of the proxy server. Supported values

A URL. Alternative URL for Enterprise Vault clients to contact when Outlook is configured to use RPC over HTTP.

Legacy name

RPCOverHTTPProxyURL

RPC over HTTP restrictions (Exchange Outlook setting)

Description Controls the behavior of the Enterprise Vault Outlook Add-In when Outlook is configured to use RPC over HTTP. On a default installation, the Outlook Add-In is disabled for use with RPC over HTTP.

130

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Supported values

None. All Enterprise Vault client Add-In functionality is available when using RPC over HTTP. Disable User Extensions (default). Connecting to Enterprise Vault using RPC over HTTP is not enabled in the Enterprise Vault client.

Disable Vault Cache. Vault Cache is disabled when using RPC over HTTP. Disable PST Import. Client-side PST migration is disabled when using RPC over HTTP. Disable Vault Cache and PST Import. Both Vault Cache and client-side PST migration are disabled when using RPC over HTTP.

Legacy name

RPCOverHTTPRestrictions

Search behavior (Exchange Outlook setting)

Description Controls the behavior of the Search Vaults menu option and the Search Vaults button. This setting affects users of the Enterprise Vault Outlook Add-Ins only. For users of the Enterprise Vault Client for Mac OS X, the Enterprise Vault Web Access application always opens in a separate Web browser window. Supported values Separate browser. The search always uses the Enterprise Vault Web Access application in a separate Web browser window. In Outlook (default). The search is always the new-style page that appears in Outlook if the user has the prerequisite software. If the user does not have the prerequisite software, the page appears in a separate Web browser window.

Legacy name

UseNewStyleSearch

Shortcut download progress (Exchange Outlook setting)

Description Controls the display of the progress window that appears when a user opens a shortcut and the item is being downloaded to the user's computer. This setting is effective in both Outlook and Entourage. Supported values

0. Do not display download dialog at all. An integer greater than zero. Show the progress dialog after this number of seconds. Default is 1 (second).

Legacy name

DownloadShortcutHideProgress

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

131

Soft deletes (Exchange Outlook setting)

Description Controls the behavior when a user deletes a shortcut and an archived item. The default is to perform a permanent deletion of the shortcut; that is, a deletion that is not recoverable in Exchange. If the permanent deletion fails, a recoverable deletion is performed. In Outlook 2003/2007, the permanent deletion always fails when Outlook is in Cached Exchange Mode. If recoverable deletion is unacceptable, set the value to Off. Supported values

On (default). Allow recoverable deletion. Off. Do not allow recoverable deletion and display an error message instead.

Legacy name

NoSoftDeletes

Use proxy settings (Exchange Outlook setting)

Description Controls whether the Outlook Add-In uses the proxy settings on the client computer.

Supported values

Use proxy settings (default). Ignore proxy settings.

Legacy name

InternetOpenTypeDirect

Web Application URL (Exchange Outlook setting)

Description Specifies the address of the Web Access application in one or more different vault sites. This setting enables shortcuts from the specified vault sites to work. For example, you need to use this setting in the following cases: When you want users to be able to access archived items from mailbox shortcuts in other vault sites When Exchange Public Folder tasks from more than one vault site process a public folder hierarchy

132

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Supported values

The URLs of Web Access applications in other vault sites. Enter one or more addresses in the following format: [site1_dns_alias]=URL;[site2_dns_alias]=URL where: site1_dns_alias and site2_dns_alias are the DNS aliases of other vault sites. URL is the address of the Web Access application in the vault site. If you specify multiple addresses, separate them with semicolons (;). The overall length of the string cannot exceed 255 characters. For example: [site1.server.com]=http://site1.server.com/ EnterpriseVault;[site2...

Legacy name

WebAppURL

OWA (Exchange desktop policy advanced settings)

The OWA settings let you control the behavior of OWA 2003 or later clients. The OWA settings are:

Archive confirmation (Exchange OWA setting) 'Archive Explorer' in Basic OWA client (Exchange OWA setting) 'Archive Explorer' in Premium OWA client (Exchange OWA setting) Archive subfolders (Exchange OWA setting) Basic archive function (Exchange OWA setting) Basic restore function (Exchange OWA setting) Client connection (Exchange OWA setting) Delete shortcut after restore (Exchange OWA setting) Forward mode (Exchange OWA setting) Location for restored items (Exchange OWA setting) Open mode (Exchange OWA setting) OWA 'Archive Policy' context menu option (Exchange OWA setting) Premium archive function (Exchange OWA setting) Premium restore function (Exchange OWA setting) Reply mode (Exchange OWA setting)

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

133

'Reply To All' mode (Exchange OWA setting) Restore confirmation (Exchange OWA setting) 'Search Vaults' in Basic OWA client (Exchange OWA setting) 'Search Vaults' in Premium OWA client (Exchange OWA setting) View mode (Exchange OWA setting) Web Application alias (Exchange OWA setting)

Archive confirmation (Exchange OWA setting)

Description Specifies whether there is a confirmation prompt when a user tries to archive an item manually.

Supported values

Off. No confirmation. On (default). Prompt for confirmation.

Legacy name

OWA2003ArchiveConfirmation

'Archive Explorer' in Basic OWA client (Exchange OWA setting)

Description Controls whether the Archive Explorer option is available on the navigation bar of the OWA Basic client.

Supported values

Off. The Archive Explorer option is hidden. On (default). The Archive Explorer option is available.

Legacy name

OWA2003ArchiveExplorerFromBasicNavbar

'Archive Explorer' in Premium OWA client (Exchange OWA setting)

Description Controls whether the Archive Explorer option is available on the navigation bar of the OWA Premium client.

Supported values

Off. The Archive Explorer option is hidden. On (default). The Archive Explorer option is available.

Legacy name

OWA2003ArchiveExplorerFromPremiumNavbar

134

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Archive subfolders (Exchange OWA setting)

Description For manual archiving, controls whether subfolders are archived if they are included in a users selection.

Supported values

Off (default). Subfolders are not archived. On. Subfolders are archived.

Legacy name

OWA2003ArchiveSubFolders

Basic archive function (Exchange OWA setting)

Description Controls whether users of the OWA Basic client are allowed to choose archiving settings, such as retention category and destination archive, when archiving items manually. Basic (default). Users cannot change settings when archiving. The archive settings on Outlook folders are used, which may be set by the user in Outlook or by the administrator. Enhanced. Users can select archiving settings when they perform manual archives.

Supported values

Legacy name

OWA2003BasicArchiveFunction

Basic restore function (Exchange OWA setting)

Description Controls whether the OWA context menu for the OWA Basic client has a Restore option.

Supported values

Basic (default). There is no Restore option on the context menu. Enhanced. There is a Restore option on the context menu.

Legacy name

OWA2003BasicRestoreFunction

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

135

Client connection (Exchange OWA setting)

Description Controls the connection to use when OWA clients or Outlook clients using RPC over HTTP contact the Enterprise Vault Web server. In an Exchange Server 2003 environment, the default setting value is Use proxy. This means that OWA 2003 clients and Outlook in RPC over HTTP mode route all Enterprise Vault requests through the front-end/back-end Exchange Servers. Changing this setting to Direct in an Exchange Server 2003 environment has the following effect: OWA 2003 clients connect directly to the Enterprise Vault Web server URL for Archive Explorer and archive search requests. Outlook clients in RPC over HTTP mode connect to the Enterprise Vault server directly for all Enterprise Vault requests.

When OWA 2003 clients access mailboxes through an Exchange Server 2007 CAS, the clients always attempt to contact the Enterprise Vault server directly for Archive Explorer and archive search requests, irrespective of the value of this setting. In an Exchange Server 2007 or later environment, OWA clients always attempt to contact the Enterprise Vault server directly for Archive Explorer and archive search requests, irrespective of the value of this setting. By default, Outlook Anywhere clients always attempt to contact the Enterprise Vault server directly for all Enterprise Vault requests. In an Exchange Server 2007 or later environment, Use proxy has the following effect: OWA clients continue to contact the Enterprise Vault server directly for Archive Explorer and archive search requests, irrespective of the value of the setting. Outlook Anywhere clients first attempt to connect to the default Enterprise Vault Web server. If the URL cannot be contacted, then the clients attempt to contact an Enterprise Vault proxy server using the RPC over HTTP proxy URL configured in the advanced Outlook settings in the desktop policy. The Enterprise Vault proxy server routes the requests to the Enterprise Vault server that hosts the archive.

Supported values

Use proxy (default) Direct

Legacy name

OWAClientUseDirectConnection

136

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Delete shortcut after restore (Exchange OWA setting)

Description Controls whether a shortcut is deleted when it is used to restore the corresponding archived item. Retain. The shortcut is not deleted when the archived item is restored. Delete (default). The shortcut is deleted when the archived item is restored.

Supported values

Legacy name

OWA2003RestoreDeleteShortcut

Forward mode (Exchange OWA setting)

Description Controls the behavior when a user chooses to forward an Enterprise Vault shortcut. It is possible to forward either the shortcut itself, or the archived item. The recipients cannot access the archived item unless they have access to the archive.

Supported values

Shortcut. The shortcut contents are forwarded. Archived item (default). The archived item is forwarded.

Legacy name

OWA2003ForwardMode

Location for restored items (Exchange OWA setting)

Description Controls the destination for an item that is restored using a shortcut. The destination can be either of the following:

The current location (the same folder as the shortcut). The Enterprise Vault Restored Items folder.

Supported values

Current location (default). Restore to the same folder as the shortcut. Restored items. Restore to the Restored Items folder.

Legacy name

OWA2003RestoreToRestoredItems

Open mode (Exchange OWA setting)

Description Supported values Controls the behavior when a user opens an Enterprise Vault shortcut.

Shortcut. The shortcut itself is opened. Archived item (default). The archived item is opened.

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

137

Legacy name

OWA2003OpenMode

OWA 'Archive Policy' context menu option (Exchange OWA setting)

Description In Exchange Server 2010 the OWA archive policy enables users to archive items to the secondary Exchange Server mailbox. This setting lets you hide the OWA archive policy options in OWA 2010 Premium clients. Setting the value to On removes the OWA archive policy option from the following menus:

Folder context menu Item context menu (non-conversation view) Item context menu (conversation view) Conversation Actions menu On. The option is not displayed in the menus. Off (default). The option is displayed on the menus.

Supported values

Legacy name

OWA2010HideOWAArchivePolicy

Premium archive function (Exchange OWA setting)

Description Controls whether users of the OWA Premium client are allowed to choose archiving settings, such as retention category and destination archive, when archiving items manually. Basic. Users cannot change settings when archiving. The archive settings on Outlook folders are used, which may be set by the user in Outlook or by the administrator. Enhanced (default). Users can select archiving settings when they perform manual archives.

Supported values

Legacy name

OWA2003PremiumArchiveFunction

Premium restore function (Exchange OWA setting)

Description Controls whether users of the OWA Premium client are allowed to choose archiving settings, such as retention category and destination archive, when archiving items manually.

138

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Supported values

Basic. Users cannot change settings when archiving. The archive settings on Outlook folders are used, which may be set by the user in Outlook or by the administrator. Enhanced (default). Users can select archiving settings when they perform manual archives.

Legacy name

OWA2003PremiumRestoreFunction

Reply mode (Exchange OWA setting)

Description Controls the behavior when a user chooses to reply to an Enterprise Vault shortcut.

Supported values

Shortcut. The shortcut is replied to. Archived item (default). The archived item is replied to.

Legacy name

OWA2003ReplyMode

'Reply To All' mode (Exchange OWA setting)

Description Controls the behavior when a user selects a shortcut and chooses Reply to All.

Supported values

Shortcut. The shortcut is replied to. Archived item (default). The archived item is replied to.

Legacy name

OWA2003ReplyToAllMode

Restore confirmation (Exchange OWA setting)

Description Controls whether the user is asked for confirmation after choosing to restore an archived item.

Supported values

Off. The item is restored without asking the user for confirmation. On (default). There is a confirmation prompt before an item is restored.

Legacy name

OWA2003RestoreConfirmation

'Search Vaults' in Basic OWA client (Exchange OWA setting)

Description Controls whether the archive search option is available in the OWA Basic client.

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

139

Supported values

Off. The archive search option is not available. On (default). The archive search option is available.

Legacy name

OWA2003SearchFromBasicNavbar.

'Search Vaults' in Premium OWA client (Exchange OWA setting)

Description Controls whether the archive search option is available in the OWA Premium client.

Supported values

Off. The archive search option is not available. On (default). The archive search option is available.

Legacy name

OWA2003SearchFromPremiumNavbar

View mode (Exchange OWA setting)

Description Controls whether when a user clicks Open the Original Item in the banner of a custom shortcut, the original item is rendered by OWA (and looks like an Outlook message), or by Enterprise Vault (and looks like a Web browser page).

Supported values

Enterprise Vault. Enterprise Vault renders the original item. OWA (default). OWA renders the original item.

Legacy name

OWA2003ViewMode

Web Application alias (Exchange OWA setting)

Description Specifies the name of the virtual directory for anonymous connections, EVAnon. This is synchronized to the hidden settings in each mailbox.

Supported values

A text string. The name of the virtual directory to use for anonymous connections.

Legacy name

OWAWebAppAlias

Vault Cache (Exchange desktop policy advanced settings)

The Vault Cache advanced settings let you control the behavior of Vault Cache. The Vault Cache settings are:

Archive Explorer connection mode (Exchange Vault Cache setting)

140

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Download item age limit (Exchange Vault Cache setting) Lock for download item age limit (Exchange Vault Cache setting) Manual archive inserts (Exchange Vault Cache setting) Message Class exclude (Exchange Vault Cache setting) Message Class include (Exchange Vault Cache setting) Offline store required (Exchange Vault Cache setting) Pause interval (Exchange Vault Cache setting) Per item sleep (Exchange Vault Cache setting) Preemptive archiving in advance (Exchange Vault Cache setting) Root folder (Exchange Vault Cache setting) Root folder search path (Exchange Vault Cache setting) Search across all indexes (Exchange Vault Cache setting) Show Setup Wizard (Exchange Vault Cache setting) Synchronize archive types (Exchange Vault Cache setting) WDS search auto-enable (Exchange Vault Cache setting)

Archive Explorer connection mode (Exchange Vault Cache setting)

Description Controls whether Archive Explorer respects the connection state when Outlook is in Cached Exchange Mode. This setting has no effect unless Cached Exchange Mode is being used. Respect connection (default). Archive Explorer checks the Outlook connection state each time Archive Explorer starts. If a connection is available, online Archive Explorer is used; if there is no connection, offline Archive Explorer is used. Always offline. Offline Archive Explorer is always used.

Supported values

Legacy name

ForceOfflineAEWithOutlookCacheMode

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

141

Download item age limit (Exchange Vault Cache setting)

Description Specifies the maximum age of items, in days, at which items are considered too old to be initially downloaded to the Vault Cache. For example, if Download item age limit is set to 30 then items up to 30 days old are downloaded. If Download item age limit is set to 0 then all items are downloaded. Supported values

0. No age limit. All items are downloaded. Integer. The maximum age, in days, of items that will be downloaded. All items up to this age will be downloaded.

Legacy name

OVDownloadItemAgeLimit

Lock for download item age limit (Exchange Vault Cache setting)
Description Supported values Controls whether users can change the download age limit.

On. Locked. Off. Not locked.

Legacy name

OVLockDownloadItemAgeLimit

Manual archive inserts (Exchange Vault Cache setting)

Description Controls whether an item that is manually archived is also automatically added to the Vault Cache. On (default). Automatically add manually archived items to the Vault Cache. Off. Do not add to the Vault Cache.

Supported values

Legacy name

OVNoManualArchiveInserts.

Message Class exclude (Exchange Vault Cache setting)

Description A list of message classes that the Vault Cache never processes. Use semi-colons to separate the classes.

Supported values

Text string. A list of message classes to exclude, separated by semi-colons.

Legacy name

OVMessageClassExclude

142

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Message Class include (Exchange Vault Cache setting)

Description A list of message classes that the Vault Cache always processes. Use semi-colons to separate the classes.

Supported values

Text string. A list of message classes to include, separated by semi-colons.

Legacy name

OVMessageClassInclude

Offline store required (Exchange Vault Cache setting)

Description Controls whether Vault Cache can be enabled when no offline store is present. Users have offline store (OST) files if Outlook Cached Exchange Mode is enabled. If a user does not have an OST file, Enterprise Vault cannot perform preemptive caching. If there is no preemptive caching, there is an increased load on Vault Cache content synchronization for newly archived items. The increased load is only a consideration if the Vault Cache content strategy is Store all items. Supported values Yes (default). An offline store is required for Vault Cache to be enabled. No. An offline store is not required for Vault Cache to be enabled.

Legacy name

OVRequireOfflineStore

Pause interval (Exchange Vault Cache setting)

Description The number of minutes to wait before Enterprise Vault starts searching for items that need to be added to the Vault Cache.

Supported values Legacy name

An integer value. The default is 3 (minutes).

OVPauseInterval

Per item sleep (Exchange Vault Cache setting)

Description The delay, in milliseconds, that will be used between items when updating the Vault Cache.

Supported values

Integer. The number of milliseconds to use between items when updating the Vault Cache Default is 100 (milliseconds).

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

143

Legacy name

OVPerItemSleep

Preemptive archiving in advance (Exchange Vault Cache setting)

Description The Outlook Add-In copies items from the user's Outlook .OST file to the Vault Cache before the items are due to be archived. The process is known as preemptive caching. Preemptive caching takes place on the user's computer. It reduces the number of items that need to be downloaded from the mailbox archive to the Vault Cache when the two are synchronized. Preemptive caching obeys the settings in the Exchange mailbox policy's archiving rules. The Outlook Add-In uses the Preemptive archiving in advance value when it determines the age of items on which to perform preemptive caching. To determine the age, it deducts the Preemptive archiving in advance value from the Archive items when they are older than value in the Exchange mailbox policy's archiving rules. For example, you do not change Preemptive archiving in advance from its default value. You set the Archive items when they are older than mailbox policy setting to six weeks. The Outlook Add-In deducts the Preemptive archiving in advance default value of seven days from six weeks, and preemptively caches the items that are five weeks old or older. Note that if you use an archiving strategy that includes quotas, it is difficult to predict the age at which items are archived. It is then usually advantageous to preemptively cache items as soon as possible. Enterprise Vault therefore uses 0 days as the age at which to perform preemptive caching if both of the following are true: The mailbox policy uses an archiving strategy that is based on quota or age and quota. You do not change the Preemptive archiving in advance setting from its default value.

Supported values Legacy name

An integer, specifying a number of days. The default is 7.

OVPreemptAdvance

Root folder (Exchange Vault Cache setting)

Description The location in which to place Vault Caches. This value is used when a user enables Vault Cache. Changing this value has no effect on existing Vault Caches.

144

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Supported values

Path. A path to a folder that Enterprise Vault can create on the user's local computer. If you do not specify Root Folder, Enterprise Vault uses an Enterprise Vault subfolder in the user's Application Data folder.

Legacy name

OVRootDirectory

Root folder search path (Exchange Vault Cache setting)

Description Enables you to supply a list of possible locations for the Vault Cache. The first such location that is valid on a user's computer is the one that will be used at the time the Vault Cache is created. This enables you to specify a list that is likely to be suitable for computers with different configurations. For example, if you specify E:\vault;C:\vault then the Vault Cache would be created in E:\vault if that was valid on the user's computer and, if it was not valid, then in C:\vault. If none of the locations is valid, the one specified by Root folder is used, if possible. See Root folder (Exchange Vault Cache setting) on page 143. Supported values

A text string. A semicolon-separated list of possible locations for the Vault Cache.

Legacy name

OVRootDirectorySearchPath

Search across all indexes (Exchange Vault Cache setting)

Description If offline Archive Explorer fails to find an item in its index, it can also perform a search across all indexes, which may be slow. This setting controls whether this fallback search is allowed.

Supported values

Off (default). Do not allow a search across all indexes. On. Allow the fallback search.

Legacy name

EnableStoreTrawling

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

145

Show Setup Wizard (Exchange Vault Cache setting)

Description Controls whether the client shows the Vault Cache setup wizard. The setup wizard does the following:

Summarizes what Vault Cache does and what is about to happen. Asks whether the user wants to start a download automatically after the initial scan has finished. The default is to start the download.

If the wizard is turned off, Vault Cache waits for the amount of time that is specified in Pause interval and then automatically begins looking for items to download. See Pause interval (Exchange Vault Cache setting) on page 142. Supported values

0. Do not show the setup wizard. 1 (default). Show the setup wizard.

Legacy name

OVSetupWizard

Synchronize archive types (Exchange Vault Cache setting)

Description Supported values Controls what is synchronized by Vault Cache.

Default mailbox. Synchronize the primary mailbox only.

All mailbox archives. Synchronize the primary mailbox archive, and any delegate mailbox archives to which the user has access. All mailbox and shared archives. Synchronize the primary mailbox archive, and any delegate or shared mailbox archives to which the user has access. Legacy name OVSyncArchiveTypes

WDS search auto-enable (Exchange Vault Cache setting)

Description Controls whether the Vault Cache search plug-in for Windows Desktop Search is automatically enabled for users. This plug-in, which is installed with the Outlook Add-In, enables users to search their Vault Cache using Windows Desktop Search. Supported values

Force off. Disable this feature. Force on. Enable this feature. Keep users setting. Retain the users setting for this feature.

146

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Legacy name

OVWDSAutoEnable

Virtual Vault (Exchange desktop policy advanced settings)

The Virtual Vault settings let you control the behavior of Virtual Vault. The Virtual Vault settings are:

Max archive requests per synchronization (Exchange Virtual Vault setting) Max attempts to archive an item (Exchange Virtual Vault setting) Max data archived per synchronization (Exchange Virtual Vault setting) Max delete requests per synchronization (Exchange Virtual Vault setting) Max item size to archive (Exchange Virtual Vault setting) Max item updates per synchronization (Exchange Virtual Vault setting) Max total size of contentless operations (Exchange Virtual Vault setting) Max total size of items to archive (Exchange Virtual Vault setting) Show content in Reading Pane (Exchange Virtual Vault setting) Threshold number of items to trigger synchronization (Exchange Virtual Vault setting) Threshold total size of items to trigger synchronization (Exchange Virtual Vault setting) Users can archive items (Exchange Virtual Vault setting) Users can copy items to another store (Exchange Virtual Vault setting) Users can copy items within their archive (Exchange Virtual Vault setting) Users can hard delete items (Exchange Virtual Vault setting) Users can reorganize items (Exchange Virtual Vault setting)

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

147

Max archive requests per synchronization (Exchange Virtual Vault setting)

Description Controls the maximum number of archive requests during a Vault Cache synchronization. Any remaining requests are made at the next synchronization. When a user stores unarchived items in Virtual Vault, the archive operation does not take place until after the next Vault Cache header synchronization. No limit or a high value can increase the time that is required to complete a Vault Cache synchronization. This effect is a consideration if the additional load affects the Enterprise Vault server. Also, until the items that a user has stored in Virtual Vault are archived in the online archive, moved and copied items exist only on the user's computer. You can set two thresholds that trigger automatic Vault Cache synchronization based on the number or total size of pending archive items in Virtual Vault. See Threshold number of items to trigger synchronization (Exchange Virtual Vault setting) on page 152. See Threshold total size of items to trigger synchronization (Exchange Virtual Vault setting) on page 152. Supported values Legacy name

An integer value. The default is 0 (no limit).

OVMaxItemArchivesPerSync

Max attempts to archive an item (Exchange Virtual Vault setting)

Description Specifies how many times Enterprise Vault tries to archive an item. The archive operation is tried this number of times before the item is listed in the Virtual Vault Search folder named Could Not Archive. Supported values Legacy name

An integer value. The default is 3.

OVItemArchiveAttempts

148

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Max data archived per synchronization (Exchange Virtual Vault setting)

Description Controls the maximum amount of data in megabytes that can be uploaded during a Vault Cache synchronization. Any remaining data is uploaded at the next synchronization. No limit or a high value can increase the time that is required to complete a Vault Cache synchronization. This effect is a consideration if the additional load affects the Enterprise Vault server. Also, until the items that the user stores in Virtual Vault have been archived in the online archive, moved and copied items exist only on the user's computer. You can set two thresholds that trigger automatic Vault Cache synchronization based on the number or total size of pending archive items in Virtual Vault. See Threshold number of items to trigger synchronization (Exchange Virtual Vault setting) on page 152. See Threshold total size of items to trigger synchronization (Exchange Virtual Vault setting) on page 152. The value of this setting must be greater than or equal to the value of Max item size to archive. If not, the value of Max item size to archive is used. Supported values

An integer value. The default is 512 (MB). The value 0 specifies no limit.

Legacy name

OVMaxToArchivePerSyncMB

Max delete requests per synchronization (Exchange Virtual Vault setting)

Description Controls the maximum number of delete requests during a Vault Cache synchronization. Any remaining requests are made at the next synchronization. Deletion requests use relatively few resources on the Enterprise Vault server. Supported values Legacy name

An integer value. The default is 0 (no limit).

OVMaxItemDeletesPerSync

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

149

Max item size to archive (Exchange Virtual Vault setting)

Description Controls the maximum size in megabytes of an item that can be moved or copied into Virtual Vault. If this value is similar to the value of Max total size of items to archive, a full synchronization can consist of one item. The Max item size to archive value may be used automatically for Max data archived per synchronization or Max total size of items to archive. It is used if the value of those settings is less than the Max item size to archive value. You can set two thresholds that trigger automatic Vault Cache synchronization based on the number or total size of pending archive items in Virtual Vault. See Threshold number of items to trigger synchronization (Exchange Virtual Vault setting) on page 152. See Threshold total size of items to trigger synchronization (Exchange Virtual Vault setting) on page 152. Supported values

An integer value. The default is 256 (MB). The value 0 specifies no limit.

Legacy name

OVMaxMessageSizeToArchiveMB

Max item updates per synchronization (Exchange Virtual Vault setting)

Description Controls the maximum number of property change requests during a Vault Cache synchronization. Any remaining requests are made at the next synchronization. Update requests use relatively few resources on the Enterprise Vault server. Supported values Legacy name

An integer value. The default is 0 (no limit).

OVMaxItemUpdatesPerSync

150

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Max total size of contentless operations (Exchange Virtual Vault setting)

Description Controls the maximum total size in megabytes of copy and move operations when items have no content in Vault Cache. This setting does not apply to documents that are placed directly in the mailbox. It only applies to standard Outlook mail types, for example, mail items, calendar items, tasks, and contacts. This setting only applies when two or more items with no content are involved in the operation. Retrieval of one item is allowed regardless of its size. Supported values

An integer value. The default is 64 (MB). The value 0 specifies no limit.

Legacy name

VVDenyMultiContentlessOpsAboveMB

Max total size of items to archive (Exchange Virtual Vault setting)

Description Controls the maximum total size in megabytes of pending archive data in Vault Cache. Pending archive data consists of items that the user has moved or copied into Virtual Vault. These items are pending archive until Vault Cache synchronization has successfully uploaded and archived them. The value of this setting must be greater than or equal to the value of Max item size to archive. If not, the value of Max item size to archive is used. You can set two thresholds that trigger automatic Vault Cache synchronization based on the number or total size of pending archive items in Virtual Vault. See Threshold number of items to trigger synchronization (Exchange Virtual Vault setting) on page 152. See Threshold total size of items to trigger synchronization (Exchange Virtual Vault setting) on page 152. Supported values

An integer value. The default is 512 (MB). The value 0 specifies no limit.

Legacy name

OVMaxTotalToArchiveMB

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

151

Show content in Reading Pane (Exchange Virtual Vault setting)

Description Controls whether the content of an item that is selected in Virtual Vault is shown in the Outlook Reading Pane. If the item itself is a document, it is not displayed in the Reading Pane. A message in the Reading Pane advises the user to open the item to read the item's contents. Supported values Never show content. The Reading Pane always shows only the selected item's header. A banner provides a link to open the original item. When in Vault Cache (default). The Reading Pane shows the selected item's header. If the item is in Vault Cache, it also shows the content. If the content is not shown, a banner provides a link to open the original item. When the Vault Cache content strategy is Store only items that user opens, the effect of this value is that the Reading Pane only shows the content of previously opened items. Always show content. The Reading Pane always shows the header and content of the item that is selected in Virtual Vault.

Show content in Reading Pane can only have the value Always show content if the following conditions apply:

You have upgraded from an earlier release. In the earlier release, Show content in Reading Pane had the value Always show content.

Always show content is not available in the Modify Setting dialog. So if Always show content is the current value and you change it, you cannot go back to it. Legacy name VVReadingPaneContent

152

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Threshold number of items to trigger synchronization (Exchange Virtual Vault setting)

Description Specifies the total number of pending archive items in Virtual Vault that triggers automatic Vault Cache synchronization. Pending archive data consists of items that the user has moved or copied into Virtual Vault. These items are pending archive until Vault Cache synchronization has successfully uploaded and archived them. If you enable this setting, consider how it interacts with other settings, as follows: Max item size to archive and Max total size of items to archive can prevent the user from adding items to Virtual Vault, so that the threshold is never reached. Max archive requests per synchronization may have a value that is lower than the value of Threshold number of items to trigger synchronization. In this case, automatic synchronization may occur but not all the pending archive items are archived.

Supported values

0 (default). The threshold is inactive. Non-zero integer. The total number of pending archive items in Virtual Vault that triggers automatic Vault Cache synchronization.

Legacy name

VVAutoSyncItemThreshold

Threshold total size of items to trigger synchronization (Exchange Virtual Vault setting)
Description Specifies the total size in megabytes of pending archive items in Virtual Vault that triggers automatic Vault Cache synchronization. Pending archive data consists of items that the user has moved or copied into Virtual Vault. These items are pending archive until Vault Cache synchronization has successfully uploaded and archived them. If you enable this setting, consider how it interacts with other settings, as follows: Max item size to archive and Max total size of items to archive can prevent the user from adding items to Virtual Vault, so that the threshold is never reached. Max data archived per synchronization may have a value that is lower than the value of Threshold total size of items to trigger synchronization. In this case, automatic synchronization may occur but not all the pending archive items are archived.

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

153

Supported values

0 (default). The threshold is inactive. Non-zero integer. The total size in megabytes of pending archive items in Virtual Vault that triggers automatic Vault Cache synchronization.

Legacy name

VVAutoSyncItemsSizeThresholdMB

Users can archive items (Exchange Virtual Vault setting)

Description Controls whether users can archive items manually by adding new items to Virtual Vault using standard Outlook actions. Examples of these standard Outlook actions are drag and drop, move and copy, and Rules.

Note: No safety copies exist for these items.

If you disable this setting, users can still create folders if Users can reorganize items is enabled. If you enable this setting, consider setting the thresholds that trigger automatic Vault Cache synchronization. See Threshold number of items to trigger synchronization (Exchange Virtual Vault setting) on page 152. See Threshold total size of items to trigger synchronization (Exchange Virtual Vault setting) on page 152. Supported values

Yes (default). Users can archive items manually in Virtual Vault. No. Users cannot archive items manually in Virtual Vault.

Legacy name

VVAllowArchive

Users can copy items to another store (Exchange Virtual Vault setting)
Description Controls whether users can copy and move items from a Virtual Vault to another message store. If users can copy or move items out of Virtual Vault and the content is available in Vault Cache, the items are retrieved from Vault Cache. If the Vault Cache content strategy is Do not store any items in cache, the items are retrieved from the online archive. In this case, use the Virtual Vault advanced setting Max total size of contentless operations to control the maximum total size of view, copy, and move operations.

154

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Supported values

Yes (default). Users can copy and move items to another message store. No. Users cannot copy and move items to another message store.

Legacy name

VVAllowInterStoreCopyAndMove

Users can copy items within their archive (Exchange Virtual Vault setting)
Description Controls whether users can copy items within their archive. If users can copy items within their archive and the content is available in Vault Cache, the items are retrieved from Vault Cache. If the Vault Cache content strategy is Do not store any items in cache, the items are retrieved from the online archive. In this case, use the Virtual Vault advanced setting Max total size of contentless operations to control the maximum total size of view, copy, and move operations. If you enable this setting, consider setting the thresholds that trigger automatic Vault Cache synchronization. See Threshold number of items to trigger synchronization (Exchange Virtual Vault setting) on page 152. See Threshold total size of items to trigger synchronization (Exchange Virtual Vault setting) on page 152. Supported values

Yes. Users can copy items within their archive. No (default). Users cannot copy items within their archive.

Legacy name

VVAllowIntraStoreCopy

Users can hard delete items (Exchange Virtual Vault setting)

Description Controls whether users can hard delete items from Virtual Vault. For this setting to take effect, the option Users can delete items from their archives must be enabled on the Archive Settings tab in the Site Properties dialog box. If you disable this setting, users can still move items to the Deleted Items folder if Users can reorganize items is enabled. Supported values

Yes (default). Users can hard delete items from Virtual Vault. No. Users cannot hard delete items from Virtual Vault.

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

155

Legacy name

VVAllowHardDelete

Users can reorganize items (Exchange Virtual Vault setting)

Description Controls whether users can reorganize items in Virtual Vault. This setting can enable users to move items between folders and to create, move, rename, or delete folders. If folders still exist in the mailbox, users cannot move, rename, or delete them. Users can hard delete only empty folders, unless Users can hard delete items is enabled. Supported values

Yes (default). Users can reorganize items in Virtual Vault. No. Users cannot reorganize items in Virtual Vault.

Legacy name

VVAllowReOrg

156

Advanced Exchange mailbox and desktop policy settings Exchange desktop policy advanced settings

Chapter

Advanced Exchange journal policy settings

This chapter includes the following topics:

Editing the advanced Exchange journal policy settings Archiving General (Exchange journal policy advanced settings)

Editing the advanced Exchange journal policy settings

The settings are available in the properties of Exchange journal policies. For details of the various settings, see the individual sections. To edit the settings for a policy

1 2 3 4 5

In the left pane of the Administration Console, expand the hierarchy until Policies is visible. Expand Policies. Expand Exchange. Click Journaling. In the right-hand pane, double-click the name of the policy you want to edit. The policys properties are displayed.

6 7 8

Click the Advanced tab. Next to List settings from, select the category of settings that you want to modify. Edit the settings as required. You can double-click a setting to edit it, or click it once to select it and then click Modify.

158

Advanced Exchange journal policy settings Archiving General (Exchange journal policy advanced settings)

Archiving General (Exchange journal policy advanced settings)

The Archiving General settings enable you to control archiving behavior. The Archiving General settings are:

ClearText copies of RMS Protected items (Exchange Archiving General setting) Expand distribution lists (Exchange Archiving General setting) Failed DL expansion behaviour (Exchange Archiving General setting) Inherited permissions (Exchange Archiving General setting) Maximum message size to archive in MB (Exchange Archiving General setting) Pending shortcut timeout (Exchange Archiving General setting) Queue Journal items (Exchange Archiving General setting) Reset archive names (Exchange Archiving General setting) Return failed items to inbox (Exchange Archiving General setting)

ClearText copies of RMS Protected items (Exchange Archiving General setting)

Description If journal report decryption is configured on Exchange Server 2010, then two messages are attached to the journal report the original RMS- protected message and a clear text version. This policy setting controls whether Enterprise Vault uses the clear text message or the RMS-protected message as the primary message during archiving. Enterprise Vault stores both versions of the message and the journal report in the message saveset. However, Enterprise Vault does not currently support the retrieval of the secondary message or the journal report from the archive.

Advanced Exchange journal policy settings Archiving General (Exchange journal policy advanced settings)

159

Supported values

Treat as Primary (default) The clear text message is returned in response to retrieval requests from Enterprise Vault clients and Symantec Discovery Accelerator. As Exchange Server does not decrypt any attachments that have been individually protected, Enterprise Vault cannot preview these attachments. Enterprise Vault indexes the content and properties of the clear text message, and any attachments that are not encrypted. With this option, single instance sharing between Exchange mailbox and journal archiving is not possible. Custom filters that process RMS-protected messages must explicitly retrieve the RMS-protected message from the attachments to the journal report message (P1 message).

Treat as Secondary The RMS-protected message is returned in response to retrieval requests from Enterprise Vault clients and Symantec Discovery Accelerator. Enterprise Vault cannot preview these messages unless an application, such as the Enterprise Vault Adapter for Secure Messaging and Rights Management (SMRM), is used to decrypt the messages. Information available for indexing is restricted to Subject, Recipients, and other message metadata. The item can be shared between Exchange mailbox and journal archiving. The message content and attachments are not indexed, unless an application, such as the Enterprise Vault Adapter for Secure Messaging and Rights Management (SMRM), is used to decrypt the messages. Custom filters that do not decrypt RMS-protected messages cannot read the message content.

Legacy name

ClearTextPrimary

Expand distribution lists (Exchange Archiving General setting)

Description Controls whether the Exchange Journaling Task expands distribution lists.

Supported values

Off. Do not expand distribution lists. On (default). Expand distribution lists.

Legacy name

ExpandDistributionLists

160

Advanced Exchange journal policy settings Archiving General (Exchange journal policy advanced settings)

Failed DL expansion behaviour (Exchange Archiving General setting)

Description Controls the behavior when an Exchange Journaling Task fails to expand a distribution list. Move to Failed DL Expansion folder. Move the item without archiving it. Archive item (default). Archive the item.

Supported values

Legacy name

FailedDLExpansion

Inherited permissions (Exchange Archiving General setting)

Description Controls whether Enterprise Vault includes inherited permissions when synchronizing permissions between mailboxes and archives.

Supported values

Off (default). Do not synchronize inherited permissions. On. Synchronize inherited permissions.

Legacy name

IncludeInheritedRights

Maximum message size to archive in MB (Exchange Archiving General setting)

Description Supported values Controls the maximum message size to archive.

Integer. An integer value specifying the maximum size of messages that can be archived, in megabytes. Default is 250.

Legacy name

MaxMessageSizeToArchiveMB

Pending shortcut timeout (Exchange Archiving General setting)

Description Specifies the number of days to allow items to remain in an archive-pending state before being reset.

Advanced Exchange journal policy settings Archiving General (Exchange journal policy advanced settings)

161

Supported values

Off (default). Archive-pending shortcuts are never reset.

0. When run in report mode, Exchange Mailbox tasks reset all archive-pending shortcuts. When run in normal mode, archive-pending shortcuts are not reset. Any integer larger than zero. Archive-pending shortcuts that are older than this number of days are reset. This happens in both normal archiving and in Report Mode. Legacy name PendingShortcutTimeout

Queue Journal items (Exchange Archiving General setting)

Description Controls the Exchange Journaling Tasks' use of MSMQ, thus improving performance.

Supported values

All single threaded. Use if all your tasks are single threaded. Multiple threads (default). Improves performance if any Journaling Task uses multiple threads.

Legacy name

QueueJournalItems

Reset archive names (Exchange Archiving General setting)

Description Controls whether, during synchronization, archive names are automatically changed to match mailboxes names.

Supported values

Off. During synchronization archive names are never changed. On (default). During synchronization, archive names are automatically changed if necessary to match mailbox names.

Legacy name

ResetArchiveNames

Return failed items to inbox (Exchange Archiving General setting)

Description Controls whether, when the Journaling task starts, messages that are stored in the failed folders are automatically moved back into the Inbox to be reprocessed. Off (default). Do not move items in the failed folders to the Inbox when the task starts. On. Move items the failed folders to the Inbox when the task starts.

Supported values

Legacy name

MoveFailedItemsToInbox

162

Advanced Exchange journal policy settings Archiving General (Exchange journal policy advanced settings)

Chapter

Advanced Exchange public folder policy settings

This chapter includes the following topics:

Editing advanced Exchange public folder settings Archiving General (Exchange public folder policy advanced settings)

Editing advanced Exchange public folder settings

The settings are available in the properties of Exchange public folder policies. For details of the various settings, see the individual sections. To edit the settings for a policy

1 2 3 4 5

In the left pane of the Administration Console, expand the hierarchy until Policies is visible. Expand Policies. Expand Exchange. Click Public Folder. In the right-hand pane, double-click the name of the policy you want to edit. The policys properties are displayed.

6 7 8

Click the Advanced tab. Next to List settings from, select the category of settings that you want to modify. Edit the settings as required. You can double-click a setting to edit it, or click it once to select it and then click Modify.

164

Advanced Exchange public folder policy settings Archiving General (Exchange public folder policy advanced settings)

Archiving General (Exchange public folder policy advanced settings)

The Archiving General settings enable you to control archiving behavior. The Archiving General settings are:

Archive unexpired Calendar Events (Exchange Archiving General setting) Code pages for right-to-left custom shortcuts (Exchange Archiving General setting) Do not archive pending reminders (Exchange Archiving General setting) Inherited permissions (Exchange Archiving General setting) Maximum message size to archive in MB (Exchange Archiving General setting) Pending shortcut timeout (Exchange Archiving General setting) Set failed messages 'Do Not Archive' (Exchange Archiving General setting) Strip attachments to non-shortcut items (Exchange Archiving General setting)

Archive unexpired Calendar Events (Exchange Archiving General setting)

Description Supported values Controls whether unexpired calendar items are archived.

Off (default). Unexpired calendar items are not archived. On. Unexpired calendar items are archived.

Legacy name

ArchiveNonExpiredCalEvents

Code pages for right-to-left custom shortcuts (Exchange Archiving General setting)
Description A semicolon-separated list of code pages. Custom shortcuts that use these code pages are always formatted right-to-left.

Supported values

A list of code pages, separated by semicolons. For example, 1255;1256. Default is 1255.

Legacy name

CustomShortcutRTLCodePages

Advanced Exchange public folder policy settings Archiving General (Exchange public folder policy advanced settings)

165

Do not archive pending reminders (Exchange Archiving General setting)

Description Controls whether Enterprise Vault archives items that have pending reminders.

Supported values

Off. Items that have pending reminders are archived. On (default). Items that have pending reminders within the next five years are not archived.

Legacy name

DontArchiveItemsPendingReminder

Inherited permissions (Exchange Archiving General setting)

Description Controls whether Enterprise Vault includes inherited permissions when synchronizing permissions between public folders and archives.

Supported values

Off (default). Do not synchronize inherited permissions. On. Synchronize inherited permissions.

Legacy name

IncludeInheritedRights

Maximum message size to archive in MB (Exchange Archiving General setting)

Description Supported values Controls the maximum size of messages that are archived.

0. No restriction on maximum message size. Integer larger than 0. The maximum size of messages that are archived, in megabytes. Default is 250.

Legacy name

MaxMessageSizeToArchiveMB

Pending shortcut timeout (Exchange Archiving General setting)

Description Specifies the number of days to allow items to remain in the state of archive-pending, restore-pending, or delete-pending before they are reset.

166

Advanced Exchange public folder policy settings Archiving General (Exchange public folder policy advanced settings)

Supported values

Off (default). Archive-pending, restore-pending, and delete-pending shortcuts are never reset. 0. When run in report mode, the archiving tasks reset all archive-pending, restore-pending, and delete-pending shortcuts. When run in normal mode, the shortcuts are not reset. Any integer larger than zero. Archive-pending, restore-pending, and delete-pending shortcuts that are older than this number of days are reset. This happens in both normal archiving and in report mode.

Legacy name

PendingShortcutTimeout

Set failed messages 'Do Not Archive' (Exchange Archiving General setting)
Description If an item cannot be archived, the default archiving task behavior is to reprocess the item on the next archiving run because such items can often be successfully archived on a second try. This setting enables you to change the behavior so items that fail archiving are marked as Do Not Archive and thus are not reprocessed on the next archiving run. Supported values

Off (default). Failed items are not marked as Do Not Archive. On. Failed items are marked as Do Not Archive.

Legacy name

SetFailedMsgsDoNotArchive

Strip attachments to non-shortcut items (Exchange Archiving General setting)

Description Controls whether attachments are removed from calendar items, meeting items (including requests, responses and cancellations), task and task request items, and contacts after archiving. These items are not changed into Enterprise Vault shortcuts when they are archived. If Enterprise Vault removes an attachment, it replaces it with a link to the attachment. On (default). Attachments are removed from non-shortcut items after archiving. Off. Attachments are not removed from non-shortcut items after archiving.

Supported values

Legacy name

StripAttachmentsToNonShortcutItems

Chapter

Customizing the Web Access application

This chapter includes the following topics:

About customizing the Web Access application General Web Access application configuration Configuring Web Access application search results Web Access application automatic domain authentication Web Access application user interface tweaks Web Access application Archive Explorer interface tweaks

About customizing the Web Access application

You can modify the behavior of the Web Access application by creating an initialization file that is called WebApp.ini and placing it into the Enterprise Vault program folder on the computer that runs the Web Access application. Within WebApp.ini, each line has the following format:
setting = value

where setting is the name of the setting and value is the value that you want to assign to it. Note the following:

Entries in this file are case-sensitive. The file must be saved with ANSI encoding.

168

Customizing the Web Access application General Web Access application configuration

General Web Access application configuration

The following general configuration settings are available:

AllowNonAsciiFilenames (Web Access application: general configuration) DefaultFormatCodepage (Web Access application: general configuration) DefaultFormatType (Web Access application: general configuration) HTMLNotNotes (Web Access application: general configuration) MaxPreviewSize (Web Access application: general configuration) Noclient (Web Access application: general configuration) URLEncodeFilenames (Web Access application: general configuration) ViewMessage_Format (Web Access application: general configuration)

AllowNonAsciiFilenames (Web Access application: general configuration)

Description Determines whether, when you open an archived message attachment whose file name contains non-ASCII characters, those characters are removed or preserved. 0 (default). Removes any non-ASCII characters from the file names of message attachments. When all the characters are non-ASCII, the file name is replaced with "EnterpriseVault". 1. Preserves any non-ASCII characters in the file names of message attachments.

Supported values

DefaultFormatCodepage (Web Access application: general configuration)

Description Specifies the code page to use if you have set DefaultFormatType to ANSI. If you do not specify a code page, Enterprise Vault sends items to the client in the code page in which they were stored. Supported values

Code page number. The number that identifies the code page. For a list of the available code pages, see the following article on the Microsoft MSDN site: http://msdn.microsoft.com/en-us/library/ms537500(VS.85).aspx

Customizing the Web Access application General Web Access application configuration

169

DefaultFormatType (Web Access application: general configuration)

Description Specifies the format in which to return items that are stored as Unicode to the client. If all clients are running Outlook 2003 or later, set DefaultFormatType to Unicode. This prevents unnecessary conversions and possible problems when viewing characters. Supported values Unicode (default). Returns archived Unicode items to the client as Unicode. ANSI. Returns archived Unicode items to the client as ANSI.

HTMLNotNotes (Web Access application: general configuration)

Description Specifies how to display the contents of archived Lotus Notes items when users find them with the Enterprise Vault browser search facilities and then, in the Search Results page, click 'View whole item' to open the items. You can choose to display the items using the Lotus Notes mail client, or you can display an HTML preview of them. Unlike the HTML preview of a Microsoft Exchange item, the HTML preview of a Lotus Notes item does not include the 'Archive Explorer', 'Download', 'Restore', and 'Settings' buttons at the top of the window. Only the 'Search', 'Delete', and 'Help' buttons are visible. Supported values 0 (default). Display the contents of archived Lotus Notes items using the Lotus Notes mail client. Users who do not have the client installed receive the message "Page cannot be displayed" when trying to open these items. 1. Display an HTML preview of the contents of archived Lotus Notes items.

MaxPreviewSize (Web Access application: general configuration)

Description Specifies the maximum size of archived files that can be displayed in the Archive Explorer preview pane. MaxPreviewSize applies only to files. It does not apply to messages, which are previewed whatever their size. Supported values

An integer. The maximum size in kilobytes of archived files that can be displayed in the Archive Explorer preview pane. The default is 512.

170

Customizing the Web Access application General Web Access application configuration

Noclient (Web Access application: general configuration)

Description Controls whether items are downloaded in their native format, rather than as .MSG format files.

Supported values

Any integer. Items are downloaded in their native format. If you want to turn off Noclient, remove the entry from the file.

URLEncodeFilenames (Web Access application: general configuration)

Description Determines whether, when you open an archived message attachment whose file name contains non-ASCII characters, those characters are rendered in URL-encoded form. It is advisable to render file names in URL-encoded form when the Enterprise Vault client and server use different language code pagesfor example, when the client uses a Japanese version of Windows and Outlook, and the server uses English Windows. When the client and server use the same code page, assigning a value of 1 to AllowNonAsciiFilenames should suffice. Supported values 0 (default). Leaves the non-ASCII characters in the file names of message attachments in their original form. 1. Renders the non-ASCII characters in the file names of message attachments in URL-encoded form. Note that, because of Internet Explorer limits on the number of characters in a file name string, multi-byte file names may be truncated to 15 characters when URL-encoded.

ViewMessage_Format (Web Access application: general configuration)

Description Controls the display format that is used when the user's browser does not allow cookies or the user has never chosen a format to use. This affects the following:

Links in custom shortcuts. Items that are opened from within Archive Explorer.

The user can use the Settings dialog box to override the behavior you specify with ViewMessage_Format.

Customizing the Web Access application Configuring Web Access application search results

171

Supported values

WEB (default). Display the item in a browser window.

MSG. Use Outlook to display the item. (Not available on Mac clients.) ASK. Prompt the user for the format to use. (Not available on Mac clients.)

Configuring Web Access application search results

Most of the following settings let you configure federated searching, a facility that allows users to conduct searches across multiple index volumes simultaneously. The following settings are available to configure search results:

DefaultRankResults (Web Access application: search result configuration) FederatedSearchMaxItems (Web Access application: search result configuration) FederatedSearchMaxVolSets (Web Access application: search result configuration) FederatedSearchTimeout (Web Access application: search result configuration) SearchRSS (Web Access application: search result configuration) ShowAllMaxResults (Web Access application: search result configuration) UseFederatedSearch (Web Access application: search result configuration)

DefaultRankResults (Web Access application: search result configuration)

Description Controls the default sort order of results that are returned from an Integrated search. For example, to make the Integrated search list the newest items first, enter the following: DefaultRankResults = date

172

Customizing the Web Access application Configuring Web Access application search results

Supported values

Use the following values to sort the items by the required criteria.

adat. Archived date, oldest first. -adat. Archived date, newest first. anum. Attachment number, cover notes last. -anum. Attachment number, cover notes first. auth. Author, alphabetical order. -auth. Author, reverse alphabetical order. date. Sent/received date, oldest first. -date. Sent/received date, newest first. mdat. Modified date, oldest first. -mdat. Modified date, newest first. natc. Number of attachments, least first. -natc. Number of attachments, most first. size. Size, smallest first. -size. Size, largest first. snum. Sequence number, increasing. -snum. Sequence number, decreasing. subj. Subject, alphabetical order. -subj. Subject, reverse alphabetical order.

FederatedSearchMaxItems (Web Access application: search result configuration)

Description Specifies the maximum number of items to obtain from each index volume. This number also determines the maximum number of results to display in response to a user query. This is because the most relevant results for the query may come from one index volume only.

Supported values

An integer. The maximum number of items to obtain from each index volume. The default is 1000.

FederatedSearchMaxVolSets (Web Access application: search result configuration)

Description Specifies the maximum number of index volumes to search simultaneously.

Supported values

An integer. The maximum number of index volumes. The default is 5.

Customizing the Web Access application Configuring Web Access application search results

173

FederatedSearchTimeout (Web Access application: search result configuration)

Description Sets a time limit on how long a federated search can take before it should be ended.

Supported values

An integer. The time limit in seconds. The default is 60.

SearchRSS (Web Access application: search result configuration)

Description Specifies the maximum number of search results to display initially. Users can click a Show All or Click Here link to view more results. Use this setting with the ShowAllMaxResults setting. Supported values

An integer. The number of search results to display initially. The default is 100.

ShowAllMaxResults (Web Access application: search result configuration)

Description Specifies the maximum number of results that can be displayed when the user clicks the Show All or Click Here link.

Supported values

An integer. The maximum number of search results to display. The default is 500.

UseFederatedSearch (Web Access application: search result configuration)

Description Controls whether to allow federated searching for everyone who uses the WebApps. For configuration or performance reasons, you may want to turn off this functionality.

Supported values

0. Disable federated searching. 1 (default). Allow federated searching.

174

Customizing the Web Access application Web Access application automatic domain authentication

Web Access application automatic domain authentication

You can configure Enterprise Vault so that the Web Access application automatically uses the same domain name as you have specified for IIS basic authentication. This means that users in the default domain do not need to specify a domain name when logging on to the Web Access application. For more information, see the "Postinstallation tasks" chapter of the Installing and Configuring manual.

Web Access application user interface tweaks

The following sections list settings that you can use to control which options are available in the integrated and browser search results user interface. The following settings are available for the user interface:

BSDeleteButton (Web Access application: user interface) BSRestoreButton (Web Access application: user interface) ISDeleteButton (Web Access application: user interface) ISRestoreButton (Web Access application: user interface) ISRestoreButton (Web Access application: user interface) RestoreToPSTOption (Web Access application: user interface)

BSDeleteButton (Web Access application: user interface)

Description Controls whether browser search displays options that are related to deleting archived items. This setting applies to browser search for both Exchange Server users and Domino Server users.

Supported values

0. The options are not displayed. 1 (default). The options are displayed.

BSRestoreButton (Web Access application: user interface)

Description Controls whether browser search displays options that are related to restoring archived items. This setting applies to browser search for both Exchange Server users and Domino Server users.

Customizing the Web Access application Web Access application user interface tweaks

175

Supported values

0. The options are not displayed. 1 (default). The options are displayed.

ISDeleteButton (Web Access application: user interface)

Description Controls whether the properties of an item that is found by a search show the "Delete this item from the Vault" option. This setting applies to integrated search in both Outlook and Lotus Notes.

Supported values

0 (default). The option is not displayed. 1. The option is displayed.

ISRestoreButton (Web Access application: user interface)

Description Controls whether the Restore Whole Item icon is displayed in the search results so that users can restore items that are found by searches. This setting applies to integrated search in both Outlook and Lotus Notes.

Supported values

0. The restore icon is not displayed. 1 (default). The restore icon is displayed.

ISShowRetention (Web Access application: user interface)

Description Controls whether the properties of an item that is found by a search show the items retention category. This setting applies to integrated search in both Outlook and Lotus Notes.

Supported values

0 (default). The retention category is not displayed. 1. The retention category is displayed.

176

Customizing the Web Access application Web Access application Archive Explorer interface tweaks

RestoreToPSTOption (Web Access application: user interface)

Description Gives users the option to export items found by a search to PST files. This setting applies to Exchange Server users only. It is possible to grant the option to all users, or to a selected list. This option is intended to be used by just a few users. Local paths refer to the Exchange Mailbox task computer and must already exist. If the user specifies a local path when setting the output destination the PST is saved with that path name on the Exchange Mailbox task computer. Supported values

All. The option is provided for all users. A list of user accounts in the format Domain\User1,Domain\User2,...

Web Access application Archive Explorer interface tweaks

The following sections list settings that you can use to control which options are available in the Archive Explorer user interface. The following settings are available:

ArchiveExplorerDelete (Web Access application: Archive Explorer interface)zzz ArchiveExplorerForward (Web Access application: Archive Explorer interface) ArchiveExplorerHelp (Web Access application: Archive Explorer interface) ArchiveExplorerReply (Web Access application: Archive Explorer interface) ArchiveExplorerReplyAll (Web Access application: Archive Explorer interface) ArchiveExplorerRestore (Web Access application: Archive Explorer interface) ArchiveExplorerSaveAs (Web Access application: Archive Explorer interface) ArchiveExplorerSearch (Web Access application: Archive Explorer interface) ArchiveExplorerSettings (Web Access application: Archive Explorer interface)

Customizing the Web Access application Web Access application Archive Explorer interface tweaks

177

ArchiveExplorerDelete (Web Access application: Archive Explorer interface)

Description Controls whether the following are available to a user in Archive Explorer:

The right-click menu option 'Delete' The right-click menu option 'Move to Mailbox' 0. The options are not available. 1 (Default). The options are shown, provided that you have also selected 'Users can delete items from their archives' in Site Properties.

Supported values

ArchiveExplorerForward (Web Access application: Archive Explorer interface)

Description Controls whether the 'Forward' option is available when a user right-clicks a message in Archive Explorer.

Supported values

0. The option is not available. 1 (Default). The option is available only when the user has selected 'Microsoft Outlook' under 'View archived items using' in the Archive Explorer settings.

ArchiveExplorerHelp (Web Access application: Archive Explorer interface)

Description Controls whether the 'Help' button and right-click 'Help' menu option are available in Archive Explorer.

Supported values

0. The button and right-click menu option are not available. 1 (Default). The button and right-click menu option are shown.

ArchiveExplorerReply (Web Access application: Archive Explorer interface)

Description Controls whether the 'Reply' option is available when a user right-clicks an item in Archive Explorer.

178

Customizing the Web Access application Web Access application Archive Explorer interface tweaks

Supported values

0. The option is not available. 1 (Default). The option is shown. The option is available only when the user has selected 'Microsoft Outlook' under 'View archived items using' in the Archive Explorer settings.

ArchiveExplorerReplyAll (Web Access application: Archive Explorer interface)

Description Controls whether the 'Reply to All' option is available when a user right-clicks an item in Archive Explorer.

Supported values

0. The option is not available. 1 (Default). The option is shown. The option is available only when the user has selected 'Microsoft Outlook' under 'View archived items using' in the Archive Explorer settings.

ArchiveExplorerRestore (Web Access application: Archive Explorer interface)

Description Controls whether Archive Explorer shows the following: The 'Restore from Vault' button, which enables users to restore archived items to their mailboxes. The right-click menu option 'Copy to Mailbox'.

The right-click menu option 'Move to Mailbox'. 0. The button and the menu options are not displayed. 1 (Default). The button and the menu options are shown

Supported values

ArchiveExplorerSaveAs (Web Access application: Archive Explorer interface)

Description Controls whether the 'Save As' option is available when a user right-clicks an item in Archive Explorer.

Supported values

0. The option is not available. 1 (Default). The option is shown. The option is available only when the user has selected 'Microsoft Outlook' under 'View archived items using' in the Archive Explorer settings.

Customizing the Web Access application Web Access application Archive Explorer interface tweaks

179

ArchiveExplorerSearch (Web Access application: Archive Explorer interface)

Description Controls whether Archive Explorer shows the 'Search' button and right-click 'Search' menu option are available. These options enable users to search from within Archive Explorer.

Supported values

0. The button and the menu option are not available. 1 (Default). The button and the menu option are shown.

ArchiveExplorerSettings (Web Access application: Archive Explorer interface)

Description Controls whether Archive Explorer shows the 'Settings' button, which enables users to specify the following:

The Exchange Server to which items will be restored The mailbox to which items will be restored Whether to use Microsoft Outlook or a web browser to view archived items 0. The button is not displayed. 1 (Default). The button is displayed.

Supported values

180

Customizing the Web Access application Web Access application Archive Explorer interface tweaks

Chapter

Automatic monitoring
This chapter includes the following topics:

About automatic monitoring Monitoring in Site Properties About monitoring using MOM About monitoring using SCOM

About automatic monitoring

Enterprise Vault provides the following mechanisms that you can use for automatic monitoring:

If you have installed the Enterprise Vault Operations Manager Web Application, you can use it to remotely monitor the following:

The status of Enterprise Vault services and archiving tasks Performance counters for vault stores and Enterprise Vault server disks, memory, and processors Exchange Server journal mailbox target archiving parameters

See About Enterprise Vault Operations Manager on page 189.

The Status section of the Administration Console lists the results of the automatic monitoring checks. The Monitoring tab in Site Properties lets you turn on performance monitoring of important aspects of Enterprise Vault. If a monitored item reaches its threshold, a message is logged in the Application Event log and in the Status section of the Administration Console. If you have other tools to monitor the event log you can use those to alert you when monitoring messages are logged.

182

Automatic monitoring Monitoring in Site Properties

If you have Microsoft Operations Manager (MOM), you can use the supplied Enterprise Vault Management Pack to monitor Enterprise Vault operations and performance. If you have Microsoft System Center Operations Manager 2007 (SCOM), you can use the supplied Enterprise Vault Management Pack, to monitor Enterprise Vault operations and performance.

Monitoring in Site Properties

When you enable monitoring in Site Properties you can then select any number of available alerts. When an alert you have selected reaches its threshold level, Enterprise Vault writes an appropriate entry in the Application Event Log. Enterprise Vault also shows the alert in the Status section of the Administration Console. Additionally, when you enable any of the alerts, Enterprise Vault turns on a performance counter for that alert. Thus you can monitor the counter using the Windows Performance Monitor or any other programs that you use to monitor performance counters. To enable monitoring

1 2 3

In the left pane of the Administration Console, right-click the vault site and, on the shortcut menu, click Properties. Click the Monitoring tab of Site Properties. Select the items for which you want to receive notifications. For each item, you can click the following to modify them:
Threshold This is the level at which Enterprise Vault issues a notification. For example, if Directory Backup has a threshold of 2 Days, then a warning is issued if the Enterprise Vault has not been backed up after 2 Days. This is how often Enterprise Vault checks this item. In the case of performance-related items, this is the frequency with which Enterprise Vault writes the associated performance counter. The time at which measuring starts. If you do not select a time, the statistics are collected when the monitoring process starts and then at the interval that is defined in the Frequency column.

Frequency

Start At

Click OK.

Automatic monitoring About monitoring using MOM

183

About monitoring using MOM

You must already have a working Microsoft MOM installation before you can install the Enterprise Vault Management Pack. This section assumes that you have some familiarity with MOM administration. See the MOM documentation if you need help with using MOM. The Enterprise Vault Management Pack contains rules that enable MOM to monitor critical Enterprise Vault events in the Application Event Log. It is also possible to use MOM to monitor all the alerts that are on the Monitoring tab in Site Properties. To do so, you start by enabling the monitoring in Site Properties. See Monitoring in Site Properties on page 182. Those alerts are written as critical events to the Application Event Log. There are MOM rules defined, and enabled by default, to monitor those same events in the Event Log.

Installing MOM
The Enterprise Vault installation copies the MOM Management Pack to the MOM subfolder of the Enterprise Vault program folder (for example C:\Program Files (x86)\Enterprise Vault\MOM). The Management Pack is EnterpriseVault.akm.

Configuring MOM
You must do the following:

Import the Enterprise Vault Management Pack. Add operators to the Enterprise Vault Notifications Group, Enterprise Vault Administrators. Enabled monitoring in the Enterprise Vault Administration Console.

To import the Enterprise Vault Management Pack

1 2 3

Start the MOM Administrator Console. In the left pane, right-click Processing Rule Groups and, on the shortcut menu, click Import Management Pack. Select the Enterprise Vault Management Pack, EnterpriseVault.akm, and work through the rest of the Import Options wizard.

184

Automatic monitoring About monitoring using MOM

To add operators to the Enterprise Vault notifications group

1 2 3 4 5

In the left pane of the MOM Administrator Console, expand Rule Groups. Click Notification Groups. In the right pane, double-click Enterprise Vault Administrators. Add the operators who should receive alerts. Click OK.

Optional MOM configuration

The Enterprise Vault MOM Management Pack defines many rules for Enterprise Vault monitoring, some of which are enabled by default and some of which are disabled. Review the rules and enable or disable as required. When you have configured your Enterprise Vault MOM management pack, you may need to configure some of the rules before you can use them. For example, if you want to use the following rule you must configure it to specify which SQL server to monitor:
Sample value of the performance counter SQL Server - Checkpoint pages / sec is greater than the defined threshold

Note that some MOM rules concern events that are themselves enabled by the Enterprise Vault Administration Console. In the case of these events, they must be enabled in the Administration Console. Table 9-1 lists the events that can by enabled from the Administration Console that have corresponding MOM rules. By default, all the events in this table are enabled. Table 9-1 Event ID
41008

MOM rules and corresponding events Administration Console name

New items awaiting backup

MOM rule name

Backup warning: Saveset files not backed up or replicated Backup overdue for vault store SQL database. Backup overdue for vault store SQL database transaction log. Space allocation warning for vault store SQL database.

41011

Vault Store database backup

41012

Vault Store transaction log backup

41013

Vault Store transaction log size

Automatic monitoring About monitoring using MOM

185

Table 9-1 Event ID

41014

MOM rules and corresponding events (continued) Administration Console name

Directory database backup

MOM rule name

Backup overdue for Enterprise Vault directory database. Backup overdue for Enterprise Vault directory database. Space allocation warning for Enterprise Vault Directory SQL database. Backup, indexing, or replication operations not completed. Delete operations not completed. Restoration queue length warning.

41015

Directory transaction log backup

41016

Directory transaction log size

41021

Archived items waiting to be indexed

41022

Deleted items waiting to be deleted from indexes Items waiting to be restored

41023

41203

Vault Store fingerprint database backup Backup overdue for Vault Store Group SQL database. Vault Store fingerprint database log backup Backup overdue for Vault Store Group SQL database transaction log. Space allocation warning for Vault Store Group Log size. Vault Store(s) in backup mode (All) Partition(s) not scanned (All) Partition(s) contain items that have not been secured for a while (All) Index locations in backup mode (All) Task(s) in report mode (All) Task schedule is set to 'Never'

41204

41205

Vault Store fingerprint database log size Vault Store in backup mode

41256

41258 41260

Vault Store partition backup scan Partition items secured

41262

Index location in backup mode

41264 41265

Tasks in report mode Unscheduled task

186

Automatic monitoring About monitoring using SCOM

About monitoring using SCOM

Enterprise Vault includes a management pack for System Center Operations Manager 2007 (SCOM). The Enterprise Vault Management Pack defines rules that enable SCOM to monitor critical Enterprise Vault events in the Application Event Log. You must already have a working Microsoft SCOM installation before you can install the Enterprise Vault Management Pack. You can also use SCOM to monitor all the alerts that are on the Monitoring tab in Site Properties. To do so, you start by enabling the monitoring in Site Properties. The alerts are written as critical events to the Application Event Log. SCOM monitors the event log for those events. The SCOM monitoring rules are enabled by default.

Setting up SCOM monitoring for an Enterprise Vault server

This section assumes that you have some familiarity with SCOM administration. See the SCOM documentation if you need help with using SCOM. To set up monitoring:

Use the SCOM management console to add the SCOM monitoring agent to the Enterprise Vault server so that the server is Agent Managed. Import the Enterprise Vault Management Pack, as follows:

On the Enterprise Vault server, start Windows Explorer and navigate to the SCOM subfolder of the Enterprise Vault program folder (normally C:\Program Files\Enterprise Vault\SCOM). Start the SCOM management console. Start the import wizard and import EnterpriseVault.mp. The wizard automatically converts the file to a MOM 2005 Backward Compatibility pack.

Enable monitoring in the Enterprise Vault Administration Console, as follows:

In the left pane of the Administration Console, right-click the vault site and, on the shortcut menu, click Properties. Click the Monitoring tab of Site Properties. Select the items for which you want to receive notifications.

Automatic monitoring About monitoring using SCOM

187

Click OK.

In the SCOM management console, review the Enterprise Vault alerts and modify them as required.

Optional SCOM configuration

The Enterprise Vault SCOM Management Pack defines many rules for Enterprise Vault monitoring, some of which are enabled by default and some of which are disabled. Review the rules and enable or disable as required. When you have configured your Enterprise Vault SCOM management pack, you may need to configure some of the rules before you can use them. For example, if you want to use the following rule, you must configure it to specify which SQL server to monitor:
Sample value of the performance counter SQL Server - Checkpoint pages / sec is greater than the defined threshold

Note that some SCOM rules concern events that are themselves enabled by the Enterprise Vault Administration Console. In the case of these events, they must be enabled in the Administration Console.

188

Automatic monitoring About monitoring using SCOM

Chapter

10

Monitoring with Enterprise Vault Operations Manager

This chapter includes the following topics:

About Enterprise Vault Operations Manager Accessing Operations Manager Using Operations Manager How to view the monitored data About Enterprise Vault server monitoring About Exchange Server journal mailbox archiving About Domino Server journaling archiving Configuring warning and critical status thresholds with Enterprise Vault Monitoring Configuring the Enterprise Vault monitoring parameters Performing an immediate status check on an Enterprise Vault server

About Enterprise Vault Operations Manager

Enterprise Vault Operations Manager is a Web application that makes remote monitoring of Enterprise Vault possible from any computer on which Internet Explorer is installed. Enterprise Vault Operations Manager lets you monitor the following:

The status of Enterprise Vault services and tasks.

190

Monitoring with Enterprise Vault Operations Manager Accessing Operations Manager

Performance counters for vault stores, disk space, memory, and processors. The status of Exchange Server journal mailbox target archiving targets, including item counts for Inbox, Archive Pending, and failed operations such as Failed DL Expansion. The status of Domino Server journaling location archiving targets, including item counts for Inbox, Archive Pending, and failed operations.

Enterprise Vault includes a Monitoring agent on each Enterprise Vault server. The Monitoring agents collect monitoring data at scheduled intervals, typically every few minutes, and store it in the Enterprise Vault Monitoring database. Operations Manager displays the most recent data collected by the Monitoring agents. It provides summary tables for at-a-glance status assessment, and detailed data to help identify problems or bottlenecks. Status indicators warn when values breach chosen thresholds. From the Configuration page you can enable or disable monitoring, adjust the monitoring frequency of the Monitoring agents, and set the status indicator thresholds. There is a mechanism for performing an immediate status check on an Enterprise Vault server, if required. See Performing an immediate status check on an Enterprise Vault server on page 207.

Accessing Operations Manager

Enterprise Vault Operations Manager is a separately installable feature. To monitor the Enterprise Vault servers in an Enterprise Vault site, you must have installed the Operations Manager Web application component on at least one Enterprise Vault server in that site. If you have not already installed Enterprise Vault Operations Manager, you can install it as described in the Installing and Configuring manual.

Monitoring with Enterprise Vault Operations Manager Using Operations Manager

191

To access Enterprise Vault Operations Manager

Enter the following URL in Internet Explorer:

http://host_ipaddress/MonitoringWebApp/default.aspx

where host_ipaddress is the IP address of the computer that is hosting the Enterprise Vault server on which the Enterprise Vault Operations Manager Web application feature is installed. Alternatively, if you are accessing Operations Manager from the computer on which it is installed, you can use the following URL, which does not require step 2:
http://localhost/MonitoringWebApp/default.aspx

In the Connect to IP Address dialog box, enter the user name and password of an account in the host computers domain. Then click OK. Note: Any user other than the Vault Service account must be assigned to a suitable role to access Operations Manager. Users can view only the tabs and tables in Operations Manager that are applicable to the role to which they are assigned. See Roles-based administration on page 24. If the user credentials are valid, Operations Manager displays its site Summary page.

Using Operations Manager

Figure 10-1 shows the Enterprise Vault Operations Manager window, which contains two main panes. Note: If your Enterprise Vault Site is configured to use Roles Based Administration, the information you see in Operations Manager will be appropriate to your role.

192

Monitoring with Enterprise Vault Operations Manager Using Operations Manager

Figure 10-1

A typical Operations Manager screen

Note: For online help for Operations Manager, click Help at the top-right of the Operations Manager window.

Left pane of Operations Manager

The left pane lists the Enterprise Vault sites for which you can view monitoring information. Multiple sites appear in the Sites list if they share the same Enterprise Vault Directory database, provided an Operations Manager is installed on at least one Enterprise Vault server in the site. The first site in the list is the site of the Enterprise Vault server whose Operations Manager you browsed to. To view data for another site, select that site from the Sites list. To collapse or re-expand the left pane, click the icon on the divider between the panes.

Menu bar and content pane of Operations Manager

When you select an option from the Operations Manager menu bar, the page for that option appears in the content pane.

Monitoring with Enterprise Vault Operations Manager How to view the monitored data

193

The menu bar contains multiple options, depending on your configuration.

Enterprise Vault Monitoring Exchange Server Monitoring Displays monitoring data for Enterprise Vault servers. Displays monitoring data for the Exchange journal mailbox archiving targets of each monitored Enterprise Vault server running Exchange journaling tasks. Displays monitoring data for the Domino journaling location archiving targets on each monitored Enterprise Vault server running Domino journaling tasks. Displays the Configuration page, from where you can do the following:

Domino Server Monitoring

Configuration

Enable or disable monitoring. Set the monitoring frequency for the Monitoring agent.

Set the retention period for the Monitoring database data. Configure the thresholds for the warning and critical status indicators that appear on the Enterprise Vault Monitoring, Exchange Server Monitoring, and Domino Server Monitoring pages.

Note: The Exchange Server Monitoring and Domino Server Monitoring options are only shown if one or more Enterprise Vault servers in the site are configured to perform Exchange Server or Domino Server journal mailbox archiving tasks, respectively.

How to view the monitored data

The Enterprise Vault Monitoring, Exchange Server Monitoring, and Domino Server Monitoring pages display the monitored data. They use status indicators to flag warning and critical values.

About Enterprise Vault server monitoring

The Enterprise Vault Monitoring page appears when you first log on to Operations Manager.

194

Monitoring with Enterprise Vault Operations Manager About Enterprise Vault server monitoring

Enterprise Vault Monitoring Summary tab

The Summary tab on the Enterprise Vault Monitoring page provides summary status information for the Enterprise Vault servers in the site. Note: The status indicators on this tab reflect snapshot values that are taken at the last monitoring time. Use them only as a guide, not as real-time indicators. The Summary tab displays the data in two sets of tables.

Task tables (Enterprise Vault Monitoring Summary tab)

Up to four "Servers running task_name tasks" tables appear at the top of the Summary tab. These tables indicate the status of the Enterprise Vault servers running Exchange Server, Domino Server, file server, and SharePoint tasks respectively. The table for a particular task only appears if at least one Enterprise Vault server in the site is configured to run that task. The tables show the following information for each Enterprise Vault server running at least one task of the specified type:
All Services The status of all monitored Enterprise Vault services on the Enterprise Vault server. The status of all monitored Enterprise Vault tasks on the Enterprise Vault server. The number of monitored performance counters at normal, warning, and critical status. The date and time when the Monitoring agent last monitored this data.

All Tasks

Performance Counters

Last Updated

A warning or critical status indicator appears if a value breaches the relevant threshold value for one or more monitored services or tasks.

Service tables (Enterprise Vault Monitoring Summary tab)

The "Servers running service_name Service" tables appear below the task tables on the Enterprise Vault Monitoring Summary tab. These tables indicate the status of a particular Enterprise Vault service on every Enterprise Vault server that is running that service. The monitored services are the Indexing service, the Storage service, and the Shopping service.

Monitoring with Enterprise Vault Operations Manager About Enterprise Vault server monitoring

195

The table for a particular service only appears if at least one Enterprise Vault server in the site is configured to run that service. To view detailed data for a particular server, click the servers name in the Server column. See Enterprise Vault Monitoring Details tab on page 195.

Enterprise Vault Monitoring Details tab

The Details tab on the Enterprise Vault Monitoring page presents detailed monitoring data for the selected Enterprise Vault server. The data includes the status of individual Enterprise Vault services and tasks that are running on the server, and performance counters for vault store status, disk space, memory, and processor use. To view the details of a different Enterprise Vault server in the current Enterprise Vault site, select the server from the server list at the top of the page. Note: The displayed values on this tab represent a snapshot that is taken at the last monitoring time. They are for use only as a guideline, not as real-time indicators. The Details tab displays the data in a series of tables.

Services table (Enterprise Vault Monitoring Details tab)

The Services table displays the status of the following Enterprise Vault services running on the selected server:

Indexing Service Shopping Service Storage Service Task Controller Service

Tasks table (Enterprise Vault Monitoring Details tab)

The Tasks table displays the status of every Enterprise Vault task visible through the Enterprise Vault Administration Console.

196

Monitoring with Enterprise Vault Operations Manager About Enterprise Vault server monitoring

Move Archive Status table (Enterprise Vault Monitoring Details tab)

The Move Archive Status table displays the status of Move Archive operations on the selected server. For each move operation, the table includes the following information:

Type. The icon indicates the source archives type (Domino mailbox archive, Domino journal archive, Exchange mailbox archive, or Exchange journal archive). Source. The name of the source archive. Server. The name of the Enterprise Vault server. Destination site. The name of the site that hosts the destination vault store. Destination. The name of the destination archive for moves to existing archives, or New archive in the case of moves to new archives. Move status. The current status of the move operation. A hyperlink that opens a Move Archive History Details window for the archive.

Performance counters for "Enterprise Vault::VaultStores" table (Enterprise Vault Monitoring Details tab)
The Performance Counters for "Enterprise Vault::VaultStores" table displays the following data for each monitored vault store counter instance:
Instance Name Status The instance name. The status of this instance, based on the status indicator thresholds. The value of this instance when the Monitoring agent last monitored it. The configured warning threshold for this counter. The configured critical threshold for this counter. The date and time when the Monitoring agent last monitored this data.

Value

Warning Threshold Critical Threshold Last Updated

For Operations Manager to be able to sample and display the vault store performance counters, monitoring needs to be enabled for the site in the Enterprise Vault Administration Console. If site monitoring is not enabled, the table is not shown. To check whether Site Monitoring is enabled, right-click the Site node in

Monitoring with Enterprise Vault Operations Manager About Enterprise Vault server monitoring

197

the Administration Console and select Properties. Then, on the Properties dialog, select the Monitoring tab. This tab also specifies the monitoring start time for each counter. The monitoring of the vault store performance counters begins at the Operations Manager monitoring frequency when the monitoring start time is reached. The start time is specified on the Monitoring tab of the Site Properties dialog box. If you want to monitor the performance counters immediately, change the monitoring start time and restart the Enterprise Vault Admin service. Table 10-1 shows the monitored counters and possible consequences of raised values. Table 10-1 Monitored vault store performance counters Counter name Consequence of raised values

Counter description
Number of incomplete backup, indexing or replication operations

Journal Archive Table Indicates a possible issue with Size backup or replication policies, or with the indexing process. If you have chosen the vault store option to remove safety copies immediately after archive, you may suffer a greater data loss in the event of a hardware failure. Indicates that there are many items pending index deletion. A backlog can indicate that there is a problem with the Indexing service. Indicates that a large number of items are waiting to be restored, implying possible problems with the StorageRestore process.

Number of incomplete delete Journal Delete Table operations Size

Number of incomplete restore operations

Journal Restore Table Size

Number of days since the last Vault Store DB Backup If the vault store database is not backup of the vault store backed up periodically, this may database result in data loss or, at minimum, extensive operations to restore Enterprise Vault in the event of hardware failures on the SQL server hosting the database. Space used in the vault store Vault Store DB Log % database transaction log (%) Used Indicates how close the SQL server is to increasing the log file's size by the configured increment for this log file.

198

Monitoring with Enterprise Vault Operations Manager About Enterprise Vault server monitoring

Table 10-1

Monitored vault store performance counters (continued) Counter name

Vault Store DB Log Backup

Counter description
Number of days since last backup of vault store database transaction log

Consequence of raised values

If the vault store database log files are not backed up periodically, this may result in data loss or, at minimum, extensive operations to restore Enterprise Vault in the event of hardware failures on the SQL server hosting the database. The performance of the SQL server may be adversely affected if there is a shortage of disk space where the transaction logs are stored. Indicates a possible problem in backup or replication application policies.

Cumulative size of all the log Vault Store DB Log files in the vault store Size database

Number of Saveset files awaiting backup or replication

Watchfile Table Size

Performance counters for "LogicalDisk" table (Enterprise Vault Monitoring Details tab)
This table lists the value of each "% Free Space" counter instance. This shows the percentage of usable disk space that is available on the logical disk drive. The table also shows the configured warning and critical thresholds for the counter, and the date and time when the Monitoring agent last monitored this data.

Performance counters for "Memory" table (Enterprise Vault Monitoring Details tab)
The Performance counters for "Memory" table lists the value of each "Available Mbytes" counter. This shows the amount of physical memory in MB that is available to be allocated to a process, or for system use. The table also shows the configured warning and critical thresholds for the counter, and the date and time when the Monitoring agent last monitored this data.

Monitoring with Enterprise Vault Operations Manager About Exchange Server journal mailbox archiving

199

Performance counters for "Processor" table (Enterprise Vault Monitoring Details tab)
The Performance counters for "Processor" table lists the value of each "% Processor Time" counter instance. This shows the percentage of the processors time spent executing non-idle threads. The table also shows the configured warning and critical thresholds for the counter, and the date and time when the Monitoring agent last monitored this data.

About Exchange Server journal mailbox archiving

The Exchange Server Monitoring option is available on the menu bar if at least one of the sites servers is running Microsoft Exchange journaling tasks. Select this option to view data for the Exchange Server Journal mailbox archiving targets.

Exchange Server Monitoring Summary tab

The Summary tab displays collective status information for the Exchange Server journal mailbox targets of each monitored Enterprise Vault server running Exchange Server journaling tasks. Note: The displayed values on this tab represent a snapshot that is taken at the last monitoring time. Use them only as a guide, not as real-time indicators. The "Exchange Server Journal Mailboxes: Overall Status" table displays the following information for each Enterprise Vault server.
Server Name Inbox Total Archive Pending Archivable The name of the Enterprise Vault server. Status of Inbox item totals. Status of archive pending item totals. Status of archivable item totals.

200

Monitoring with Enterprise Vault Operations Manager About Exchange Server journal mailbox archiving

Failed Operations

Status of failed operations, listed separately as follows: Copy: The number of items in the Exchange journal mailbox Failed To Copy folder. Store: The number of items in the Exchange journal mailbox Failed To Store" folder. DL Expansion: The number of items in the Exchange journal mailbox Failed DL Expansion folder. External Filter: The number of items in the Exchange journal mailbox Failed External Filter folder.

Days Since Last Backup

The number of days since a backup of the vault store was performed. This value is calculated from the age of the oldest item in a pending archive state. It assumes that the Remove Safety Copies property of the vault store in the Administration Console is set to "After Backup". If Remove Safety Copies is set to another value, you need to interpret the value of Days Since Last Backup accordingly. For example, if Remove Safety Copies is set to "After backup (immediate for journaling)" or "Immediate", the value is typically always 0.

Last Updated

The date and time when the Monitoring agent last monitored this data.

A warning or critical status indicator appears if a value breaches the relevant threshold on one or more journal mailbox targets. For example, a warning indicator in the Inbox Total column indicates that when the server was monitored, at least one Inbox total reached the Inbox Total warning threshold, but none reached the critical threshold. To see detailed data for a particular server, click that servers name in any of the tables to display the Details tab. See Exchange Server Monitoring Details tab on page 201. Note: The Monitoring agents expose the Exchange journal mailbox parameters as performance counters under the "EnterpriseVault::Exchange Journaling" performance object category. These performance counters can be viewed using tools such as perfmon. However, their values only change at the sampling frequency of the Monitoring agents.

Monitoring with Enterprise Vault Operations Manager About Exchange Server journal mailbox archiving

201

Exchange Server Monitoring Details tab

The Details tab on the Exchange Server Monitoring page shows data relating to each Exchange Server journal mailbox target that is associated with the selected Enterprise Vault server. To view these details for a different Enterprise Vault server in the current Enterprise Vault site, select the server from the server list at the top of the page. Note: The displayed values on this tab represent a snapshot that is taken at the last monitoring time. Use them only as a guide, not as real-time indicators. The Details tab contains several tables of monitoring information: Journal Mailbox Details and Archiving Statistics for Last Hour.

Journal Mailbox Details (Exchange Server Monitoring Details tab)

The Journal Mailbox Details table shows the following details for each journal mailbox archiving target. The data relates to the last monitoring time, as shown in the table header.
Journal Mailbox The name of the journal mailbox. The associated archive name is shown in brackets. The total number of Inbox items. The number of items in a pending archive state. The number of Inbox items that are marked for archiving. The number of failed operations, listed separately as follows: Copy: The number of items in the Exchange journal mailbox Failed To Copy folder. Store: The number of items in the Exchange journal mailbox Failed To Store folder. DL Expansion: The number of items in the Exchange journal mailbox Failed DL Expansion folder. External Filter: The number of items in the Exchange journal mailbox Failed External Filter folder.

Inbox Total Archive Pending Archivable Failed Operations

202

Monitoring with Enterprise Vault Operations Manager About Domino Server journaling archiving

Days Since Last Backup

The number of days since a backup of the vault store was performed. This value is calculated from the age of the oldest item in a pending archive state. It assumes that the Remove Safety Copies property of the vault store in the Administration Console is set to "After Backup". If Remove Safety Copies is set to another value you need to interpret the value of "Days Since Last Backup" accordingly. For example, if Remove Safety Copies is set to "After backup (immediate for journaling)" or "Immediate", the value is typically always 0.

Archiving Statistics for Last Hour (Exchange Server Monitoring Details tab)
The "Archiving Statistics for Last Hour" table relates to the journal mailbox items that Enterprise Vault archived in the 60 minutes before the last monitoring time. For each journal mailbox archive, the table shows the following information:
Archive Name Number of Items Cumulative Original Size Cumulative Compressed Size The name of the Enterprise Vault archive The number of items that Enterprise Vault has archived The total original size of the items that were archived The total compressed size that the archived items occupy.

The Details tab also lists the current threshold values for the warning and critical status indicators. Note: The Monitoring agents expose the Exchange journal mailbox parameters as performance counters under the "EnterpriseVault::Exchange Journaling" performance object category. These performance counters can be viewed using tools such as perfmon. However, their values only change at the sampling frequency of the Monitoring agents.

About Domino Server journaling archiving

The Domino Server Monitoring option is available on the menu bar if at least one of the sites servers is running Domino journaling tasks. Select this option to view data for the Domino Server journaling location archiving targets.

Monitoring with Enterprise Vault Operations Manager About Domino Server journaling archiving

203

Domino Server Monitoring Summary tab

The Summary tab on the Domino Server Monitoring page displays collective status information for the Domino Server journaling location archiving targets of each monitored Enterprise Vault server running one or more Domino journaling tasks. Note: The displayed values represent a snapshot that is taken at the last monitoring time. Use them only as a guide, not as real-time indicators. The "Domino Server Journal Mailboxes: Overall Status" table displays the following information for each server:
Server Name Inbox Total Archive Pending Archivable Failed Operations Days Since Last Backup The name of the Enterprise Vault server Status of Inbox item totals Status of archive pending item totals Status of archivable item totals Status of the number of failed items The number of days since a backup of the vault store was performed. This value is calculated from the age of the oldest item in a pending archive state. It assumes that the Remove Safety Copies property of the vault store in the Administration Console is set to "After Backup". If Remove Safety Copies is set to another value you need to interpret the value of "Days Since Last Backup" accordingly. For example, if Remove Safety Copies is set to "After backup (immediate for journaling)" or "Immediate", the value is typically always 0. Last Updated The date and time when the Monitoring agent last monitored this data.

A warning or critical status indicator appears if a value breaches the relevant threshold on one or more Domino journaling location archiving targets. For example, a warning indicator in the Inbox Total column indicates that when the server was monitored, at least one Inbox total breached the Inbox Total warning threshold, but none breached the critical threshold. To see detailed data for a particular server, click that servers name in any of the tables to display the Details tab. See Domino Server Monitoring Details tab on page 204.

204

Monitoring with Enterprise Vault Operations Manager About Domino Server journaling archiving

Note: The Monitoring agents expose the Domino journal mailbox parameters as performance counters under the "EnterpriseVault::Domino Journaling" performance object category. These performance counters can be viewed using tools such as perfmon. However, their values only change at the sampling frequency of the Monitoring agents.

Domino Server Monitoring Details tab

The Details tab on the Domino Server Monitoring page shows data relating to each Domino Server journaling location archiving target that is associated with the selected Enterprise Vault server. To view these details for a different Enterprise Vault server in the current Enterprise Vault site, select the server from the server list at the top of the page. Note: The displayed values represent a snapshot that is taken at the last monitoring time. Use them only as a guide, not as real-time indicators. The Details tab contains two tables of monitoring information: Journaling Location Details, and Archiving Statistics for Last Hour.

Journaling Location Details (Domino Server Monitoring Details tab)

The Journaling Location Details table shows the following details for each Domino journaling location archiving target. The data relates to the last monitoring time, as shown in the table header.
Journal Mailbox Location The Domino journaling location for which collective information for all mailboxes is displayed. The associated archive name is shown in brackets. The total number of Inbox items. The number of items in a pending archive state. The number of Inbox items that are marked for archiving. The number of failed operation items.

Inbox Total Archive Pending Archivable Failed Operations

Monitoring with Enterprise Vault Operations Manager Configuring warning and critical status thresholds with Enterprise Vault Monitoring

205

Days Since Last Backup

The number of days since a backup of the vault store was performed. This value is calculated from the age of the oldest item in a pending archive state. It assumes that the Remove Safety Copies property of the vault store in the Administration Console is set to "After Backup". If Remove Safety Copies is set to another value you need to interpret the value of "Days Since Last Backup" accordingly. For example, if Remove Safety Copies is set to "After backup (immediate for journaling)" or "Immediate", the value will typically always be 0.

Archiving Statistics for Last Hour (Domino Server Monitoring Details tab)
The "Archiving Statistics for Last Hour" table relates to items that Enterprise Vault archived in the 60 minutes before the last monitoring time. For each journal mailbox archive, the table shows the following information:
Archive Name Number of Items Cumulative Original Size Cumulative Compressed Size The name of the Enterprise Vault archive. The number of items that Enterprise Vault has archived. The total original size of the items that were archived. The total compressed size that the archived items occupy.

The Details tab also lists the current threshold values for the warning and critical status indicators. Note: The Monitoring agents expose the Domino journal mailbox parameters as performance counters under the "EnterpriseVault::Domino Journaling" performance object category. These performance counters can be viewed using tools such as perfmon. However, their values only change at the sampling frequency of the Monitoring agents.

Configuring warning and critical status thresholds with Enterprise Vault Monitoring
You can set the threshold values for the warning and critical status indicators that appear on the Enterprise Vault Monitoring, Exchange Server Monitoring, and Domino Server Monitoring pages.

206

Monitoring with Enterprise Vault Operations Manager Configuring warning and critical status thresholds with Enterprise Vault Monitoring

To configure the performance counter status thresholds

1 2 3

Select Configuration on the Operations Manager menu bar. Select the Performance Counters tab on the Configuration page. To change a displayed threshold value, overtype the current value with the required value. Values must be numeric and greater than zero. Critical values must exceed Warning values, except for Available Mbytes and % Free Space, where the Critical value must be less than the Warning value. Repeat step 3 with the threshold values of other counters, if required. Do one of the following:

4 5

To save your changes, click Save. It may take a few seconds for the save to take effect. To return to the values as set when you selected the Performance Counters tab (or last clicked Save), click Reset, and then click Save.

To configure the Exchange or Domino journal mailbox archiving status thresholds

1 2 3

Select Configuration on the Operations Manager menu bar. Select the Exchange Parameters tab or Domino Parameters tab on the Configuration page, as required. To change a displayed threshold value, overtype the current value with the required value. Values must be numeric and greater than zero. Critical values must exceed Warning values. Repeat step 3 for additional values, if required. Do one of the following:

4 5

To save your changes, click Save. It may take a few seconds for the save to take effect. To return to the values as set when you selected the Exchange Parameters tab (or last clicked Save), click Reset, and then click Save.

To reset thresholds to their factory settings

1 2 3 4

Select Configuration on the Operations Manager menu bar. Select the Performance Counters tab, Exchange Parameters tab, or Domino Parameters tab on the Configuration page, as required. Click Reset to factory. Click Save.

Monitoring with Enterprise Vault Operations Manager Configuring the Enterprise Vault monitoring parameters

207

Configuring the Enterprise Vault monitoring parameters

You can configure the following:

Whether monitoring by the Monitoring agents is enabled or disabled. The frequency of the scheduled monitoring. The period for which Enterprise Vault is to retain data in the Monitoring database.

To configure the monitoring parameters

1 2 3 4 5 6

Select Configuration on the Operations Manager menu bar. Select the Monitoring Parameters tab on the Configuration page. To enable or disable monitoring by the Enterprise Vault Monitoring agents, check or uncheck Monitoring Enabled. To change the monitoring frequency, select a new value from the Monitoring Frequency list. To change the retention time for the monitoring data, select a new value from the Retain Records For list. Do one of the following:

To save your changes, click Save. It may take a few seconds for the save to take effect. To return to the values as set when you selected the Monitoring Parameters tab (or last clicked Save), click Reset, and then click Save.

Performing an immediate status check on an Enterprise Vault server

If required, you can perform an immediate status check on an Enterprise Vault server, in addition to the scheduled regular monitoring. For example, you may want to do this if the most recent set of data indicates a potential problem, and you want to investigate the current status. Perform the following procedure on the server on which you require the immediate status check.

208

Monitoring with Enterprise Vault Operations Manager Performing an immediate status check on an Enterprise Vault server

To perform an immediate status check

Edit the configuration file MonitoringAgent.exe.config using a text editor such as Notepad. The configuration file is located in the Enterprise Vault installation folder (for example C:\Program Files (x86)\Enterprise Vault). Set the value of OperationsManagerMonitorObjectChannel to an appropriate available port number on the Enterprise Vault server. Ensure the value of ExposeMonitor is set to true. Stop and restart the Enterprise Vault Admin service, so that Enterprise Vault uses the new configuration settings. Open a Command Prompt window and change directory to the Enterprise Vault installation folder (for example C:\Program Files (x86)\Enterprise Vault). Force the status check by entering the command ForceMonitoringUtil.exe. Within a short time you should see the results of the status check in Operations Manager. For security reasons you should change the value of ExposeMonitor to false and then restart the Admin service after you have finished performing the immediate status check.

2 3 4 5

Chapter

11

Exporting archives
This chapter includes the following topics:

About the Export Archive wizard Importing (migrating) exported files Starting the export with the Export Archive wizard

About the Export Archive wizard

Export Archive can only be used with Exchange Server mailbox archiving. The Export Archive wizard lets you export archived items as follows:

Archives to PST files. This is useful when the following apply:

You want to give a user a personal copy of archived items, perhaps to use when out of the office. You want to send individual mailbox archives somewhere for safekeeping.

Archives to their original mailboxes. This is useful when the following apply:

You are transferring mailboxes and want to send the users' archived items too. You have been running a pilot installation of Enterprise Vault and now want to copy everything that has been archived back to the original mailboxes.

A single archive to a chosen mailbox. This could be useful when the following apply:

210

Exporting archives Importing (migrating) exported files

A person takes over an existing role within the company. For example, You could export to the new mailbox everything that was archived from the old mailbox with a particular retention category. There is a legal investigation. You may want to copy everything that has been archived from a particular mailbox to a new mailbox, ready for subsequent investigation.

You can export only the items that have been archived from mailboxes, and not the items archived from public folders or SharePoint. When you export, you can filter the output by date and by retention category. For example, you can export items less than a year old that were archived with a particular retention category. When you export to PST files, the wizard lets you control the maximum size of the output files. The default maximum of 600 MB is ideal for writing to CD. If a file reaches the maximum size, the wizard automatically creates a numbered sequence of files, none of which exceeds the maximum size. Folders in PST files can contain a maximum of 16,383 items. This is a PST file limitation. If a folder reaches this limit the Export Archive wizard automatically creates a new folder of the same name but with a number suffix. For example, if folder 'Inbox' is full, the Export Archive wizard automatically creates 'Inbox 1' to hold further items. For each PST file, the wizard creates a configuration file that you may need if you intend to import the PST file contents back into Enterprise Vault. You can import files that have been exported, so it is possible to move someone's archived items to another Enterprise Vault system. See Importing (migrating) exported files on page 210.

Importing (migrating) exported files

When you migrate exported PST files to an archive, it is best to locate the destination archive on a different vault store from the original archive. If these archives are on the same vault store, then you must delete the original archive before migrating the PST files. Failure to do this results in duplicate entries in the vault store database. The following steps summarize the procedure for migrating PST files when the destination archive is on the same vault store as the original archive.

Exporting archives Importing (migrating) exported files

211

To migrate PST files to an archive on the same vault store as the original archive

1 2 3 4 5

After you have exported the archive to PST files using the Export Archive wizard, ensure that the export was successful. If the destination archive is to be associated with the same mailbox, then disable the mailbox using the Enterprise Vault Administration Console. In the Enterprise Vault Administration Console, delete the original archive. To create the destination archive, enable the associated mailbox. Use PST Migration to import the PST files into the new archive. To fix any broken shortcuts in the mailbox, configure PST migration as follows:

Do not create shortcuts to newly-archived items. Import items to the root folder . Merge the folder structures.

PST configuration files and exported archives

When you export archives to PST files, a configuration file is automatically created for each PST file. This configuration file contains information that is needed if you intend to import the PST file contents back into Enterprise Vault, including the following:

The retention category that was applied to all the items in the PST file. The Vault ID, which is needed to correct the shortcuts that the move has broken.

At the bottom of the configuration file there is a section called [RETENTION_CATEGORY] that shows details of the retention category that applies to all the items in the corresponding PST file. The [RETENTION_CATEGORY] section is present only if they were exported with Split PST files by retention category selected in the Export Archive wizard. When you import, the wizard tries to match the existing retention categories to the ones in the PST configuration file. If the section is not present, there is no way to determine the original retention category of the items.

Example PST configuration file with an exported archive

This example configuration file shows that the retention category Personal was used when all the items in JohnSmith_Export_0001.pst were archived.
[PST] FILENAME = JohnSmith_Export_0001.pst DESCRIPTION = John Smith

212

Exporting archives Starting the export with the Export Archive wizard

CREATED = 22Aug2002 10:01 AM ORIGIN = EXPORT_ARCHIVE [MAILBOX] NAME = John Smith MAILBOXDN = /O=ACME/OU=LEGAL/CN=RECIPIENTS/CN=JOHNS EXCHANGESERVER = EXCH01 [USER] FIRSTNAME = John LASTNAME = Smith DEPT = Legal TITLE = Audit Manager [VAULT] NAME = John Smith DESCRIPTION = Created by Enable Mailbox Wizard VAULTID = 19A33926632EA274B9822FDBCA82CA09B1110000laguna3.win.kvsinc.com VAULTSTORENAME = CCV4VS [RETENTION_CATEGORY] NAME = Personal DESCRIPTION = Personal items PERIOD = 60 PERIODUNITS = MONTHS

It is possible that the retention category does not match any retention category in your Enterprise Vault site. In this case you must decide on a suitable action, as follows:

You can use an existing retention category that most closely matches the retention category in the configuration file. You can create a new retention category to match the one in the configuration file. However, this new retention category is then available to all users and you may find that its name is likely to confuse existing users.

Starting the export with the Export Archive wizard

When you are ready to export archived items to PST files or mailboxes, follow the instructions below to start the Export Archive wizard.

Exporting archives Starting the export with the Export Archive wizard

213

To start the export

1 2 3

In the left-hand pane of the Administration Console, right-click the Archives icon. On the shortcut menu, click Export. Work through the Export Archive wizard to complete the export.

214

Exporting archives Starting the export with the Export Archive wizard

Chapter

12

Introduction to PST migration

This chapter includes the following topics:

Tools for migrating PST files Overview of the PST migration process PST files and marking PST migration tips About Locate and Migrate Client-driven PST migration Migrating PST files in hosted environments

Tools for migrating PST files

Enterprise Vault provides the following tools for migrating (importing) the contents of PST files to archives:

Locate and Migrate. This tool locates PST files on users computers, copies them to a central location, and then migrates them. Unless you have only a few PST files to migrate, Locate and Migrate is likely to require least effort on your part. Client-driven PST migration. This tool lets you configure users computers to locate PST files automatically and copy them to a central PST holding folder. Enterprise Vault then migrates the PST file contents from the PST holding folder to Enterprise Vault archives. Client-driven PST migration is useful in the following situations:

216

Introduction to PST migration Overview of the PST migration process

User computers are available on the network only occasionally. You do not have permission to access PST files on the users computer. Users need continual access to their PST files.

Scripted migration using Policy Manager. This tool is useful for performing bulk migrations of PST files, but you need to collect the PST files in a central location. PST Migrator wizard-assisted migration. If you have a small number of PST files, this provides a quick and easy way of migrating them to Enterprise Vault.

Overview of the PST migration process

The migration process migrates the contents of PST files to archives. If the PST files then continue to have more items stored in them, you need to perform further migrations to archive new items. If you try to migrate thousands of PST files at the same time, the migration can take a long time to run. The time taken is comparable to the amount of time your Enterprise Vault system would take to archive the same amount of data from mailboxes. We recommend that you experiment with a few PST files and gradually increase the numbers with which you work. Table 12-1 Feature Feature comparison of PST migration tools PST Migrator wizard
Yes

Scripted Locate and using Policy Migrate Manager

No No

Client-driven migration
No

Simple to use for just a few PST files Locate PST files on users computers Collect users PST files in central location

No

No

Yes

Yes

No

No

Yes

Yes

Suitable for migrating large No numbers of PST files Can use supplied password to open PST file No

Yes

Yes

Yes

No

Yes

Yes

Can adjust Exchange Server No quotas

No

Yes

Yes

Introduction to PST migration Overview of the PST migration process

217

Table 12-1 Feature

Feature comparison of PST migration tools (continued) PST Migrator wizard

Yes

Scripted Locate and using Policy Migrate Manager

Yes Yes

Client-driven migration
No

Use marking in PST to determine archive Use mail profile entry to determine archive Use name of host computer to determine archive

No

No

Yes

Yes

No

No

Yes

No

Note the following:

All PST migration tools skip PST files if the vault store that contains the corresponding archive is in backup mode. Classes of items that are not eligible for archiving are ignored when you migrate PST files into Enterprise Vault. You can use the Message Classes tab in the Exchange PST Migration policy to define the classes of items that will be archived when the policy is applied. You can use the Exchange Message Classes tab in Directory properties to edit the list of message classes that appear in policies. Enterprise Vault ignores items that were created on a computer that uses a language that is incompatible with that of the Storage service computer. For example, if a PST file contains both Japanese and English items, and the Storage service computer uses Japanese, then the English items are ineligible for archiving. Contact Symantec Corporation if you want to migrate PST files that contain such items. If you are importing archived items that have previously been exported by Enterprise Vault, then you may need to deal with unknown retention categories. See Importing (migrating) exported files on page 210. In the Exchange mailbox policy you can configure Enterprise Vault to change the retention category of items when they are moved within an archive. Items can be assigned a specific retention category during PST migration. You may want such items to retain this retention category if they are moved later to a folder with a different retention category. To prevent Enterprise Vault from changing the retention category, ensure that the policy option, Include items with Retention Category selected by the user, set by a custom filter, or set by PST migration is not selected. This option is on the Moved items tab of the Exchange mailbox policy properties.

218

Introduction to PST migration PST files and marking

PST files and marking

By default, when a user starts Outlook, the client writes a marker into each PST file that is listed in the mail profile. The marker indicates the Enterprise Vault site, the default archive, and the default retention category. All the PST migration tools can use the marker to determine the owning mailbox and then migrate the file contents to that mailbox's default archive. Marking PST files can be configured off or on in Exchange Desktop policies using the setting, Mark PST files, in the list of advanced Outlook settings. If marking is switched on, then the Enterprise Vault client does the following when Outlook starts:

Tries to open every PST that is listed in the user's mail profile. The next time users start Outlook they will be prompted for passwords to password-protected PSTs and will receive error messages for any PSTs that are inaccessible. Does not update the PST file marker again except when a different mail profile is used that lists that PST file. This means that Policy Manager assumes that the PST is owned by the last profile that was used to access the file. Marks any further PST files that are subsequently added to the mail profile. The marking happens when Outlook is started, so merely opening a PST file and then closing it again is not sufficient to mark that PST.

PST migration tips

Migrate a few PST files and then, when you are familiar with the process, increase the numbers. Migration is much easier if you have PST files in a few locations, rather than in many. (For this reason, Locate and Migrate copies the PST files to a central location before migrating them). Sort out the permissions on the PST files before running Policy Manager, otherwise they will fail. There is a Windows server command-line utility, CACLS, which you can use to grant the Vault Service account Full Control access to the PST files. When Enterprise Vault archives items, it also converts the contents to HTML and indexes them. There is a default conversion timeout of 30 minutes for this process. Enterprise Vault makes three attempts to convert an item, and so can take up to 90 minutes before failing an item and moving on to the next one. If there are very large, or very complex, items in a PST file, it can take a long time to migrate them all. If you do not need the content of the items to be

Introduction to PST migration About Locate and Migrate

219

indexed, then you can improve performance by lowering the conversion timeout to just a few minutes.

This change to the conversion timeout also affects normal archiving, so remember to return it to the original value when you have migrated the PST files. You can also improve performance by making Enterprise Vault create text rather than HTML versions of certain document types. See How to control content conversion on page 312.

To change the conversion timeout

On the Storage service computer, set the string registry entry ConversionTimeout to the timeout, in minutes, that you want to use. The entry must be under the following registry key:
HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault

Restart the Storage service.

About Locate and Migrate

Locate and Migrate partially automates the process of migrating the contents of PST files into Enterprise Vault. It can automatically search for PST files on users computers and move them to a central holding area, from which they can be automatically migrated. Depending on the configuration options you select there may be some manual intervention required to approve migration of PST files. Additionally, you may need to supply the passwords for password-protected PST files. Locate and Migrate comprises several Enterprise Vault task types:

A PST Locator task. This searches your network for computers and PST files. There can be only one PST Locator task in your Enterprise Vault site. A PST Collector task. This moves PST files that the PST Locator task has found to a central PST holding folder, ready for them to be migrated. There can be many PST Collector tasks in your Enterprise Vault site. A PST Migrator task. This migrates the contents of PST files that are in the PST holding folder to Enterprise Vault archives. There can be many PST Migrator tasks in your Enterprise Vault site.

220

Introduction to PST migration Client-driven PST migration

How to schedule Locate and Migrate tasks

The various Locate and Migrate tasks run according to schedules that you define, although there is also the Run Now option for each task so that you can run it immediately, if required. You can schedule the PST Locator task to run during normal office hours. This probably ensures that it will find the maximum possible number of computers and PST files. When the PST Locator task has completed its search for PST files it does no more work, even if its schedule window is still open. It will not scan each computer again for a minimum of one day, although you can increase this period between scans. The PST Collector task moves PST files to the PST holding area, ready for them to be migrated. You can restrict the number of files in the holding area so that they can all be processed by the PST Migrator task during its scheduled run. This ensures that the period for which items within PST files are unavailable is as short as possible. On a dual-processor computer a typical rate of PST file migration is approximately 1.5 GB per hour, although this figure depends on many factors, including the type and complexity of items that are imported. Thus, a holding area with 6 GB of PST files would take approximately four hours to process.

Client-driven PST migration

It is possible to configure the Enterprise Vault Outlook Add-In so that it migrates PST files automatically to a central PST holding folder. The PST Migrator task then processes the PST files and archives the contents. You need to configure a PST Migrator task on every Enterprise Vault server that hosts a Storage service and manages the archives to which you intend to migrate PST files. When migrating a PST file, the migration process runs on the Enterprise Vault server that manages the destination archive. Client-driven PST migration can be useful in the following cases:

You do not have permission to access PST files on the users computer. Users need continual access to their PST files. The users computer is available on the network only occasionally. For example, a user with a laptop computer who visits the office on one day each week.

In summary, the client-driven migration process is as follows:

You enable mailboxes for client-driven PST migration.

Introduction to PST migration Migrating PST files in hosted environments

221

An explanatory mail message is immediately sent to the newly-enabled mailboxes. The next time a user starts Outlook, the computer is scanned for PST files. Starting with PST files in the users profile, each PST file is sent as a series of approximately 10 MB chunks to the PST holding folder. The PST Migrator task migrates the chunks to the users archives. When a PST file has been successfully migrated, checks are made to make sure that no more items have been added to it. Provided that there are no more items, the PST file is removed from the users profile.

Client-driven PST migration does not work if the registry value PSTDisableGrow is enabled on users' computers. For information about how to override PSTDisableGrow, see the Setting up Exchange Server Archiving manual.

Migrating PST files in hosted environments

For each mail item that Enterprise Vault archives, it creates an XML document that contains the items sender and recipient data. This document is archived with the item and Enterprise Vault subsequently uses the XML data during indexing. Enterprise Vault builds the XML data it requires from the sender and recipient information in each item as it is archived. However, if any of the information is not present in the item, Enterprise Vault attempts to establish a connection to the relevant Exchange servers domain controller to gather the information. This process requires that at least one Exchange server is targeted in your site. If you migrate PST files in environments where no suitable Exchange server is available to provide the information that Enterprise Vault requires, migration performance can be degraded. For example, this would happen in the following circumstances:

You migrate legacy data from PST files that were created in an old Exchange environment, whose Exchange servers no longer exist. You migrate data from PST files in a hosted environment that has no Exchange server.

In cases like these, you should set a registry value to bypass the lookup of addresses during archiving.

222

Introduction to PST migration Migrating PST files in hosted environments

To bypass Active Directory address lookups

On every Enterprise Vault storage service computer, create a new registry DWORD value called BypassAddressLookups under the following registry key:
HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault \Storage

2 3

Set BypassAddressLookups to 1. Restart the storage service.

This setting allows PST migrations to use only the sender and recipient data it finds in each mail item it archives. Enterprise Vault does not attempt to establish an Active Directory connection to resolve addresses.

Chapter

13

PST migration: scripted

This chapter includes the following topics:

Overview of the scripting mechanism for PST migration Undertaking the PST migration process using Policy Manager Preparation for PST scripted migration Output from PST migration Example initialization file for PST scripted migration

Overview of the scripting mechanism for PST migration

You can perform scripted migrations of the contents of PST files to Enterprise Vault using Policy Manager. For detailed information on Policy Manager, see the Utilities manual. The scripting mechanism enables you to configure how each PST file is processed. For example, for each PST file you can do the following:

Specify the destination archive. Specify whether to create shortcuts to migrated items and, if so, whether to leave them in the PST file or to put them in a specific folder in the user's mailbox. Specify which retention category to use for migrated items. Control what happens to the PST file itself after the items in it have been migrated.

You write the Policy Manager initialization file, in which you list each of the files whose contents you want to migrate to Enterprise Vault. You can set up default

224

PST migration: scripted Undertaking the PST migration process using Policy Manager

settings that apply to all PST files and you can override the default settings for individual PST files. It is possible for you to make Enterprise Vault clients save details of the owner's default archive in each PST file (PST marking). Policy Manager can then use this information to determine the correct archive and mailbox to use for each PST file. If you prefer to not to use this mechanism, or to override it for some PST files, then for individual PST files you can override these values. When you migrate PSTs using Policy Manager you can use report mode to check all the PST files listed in your initialization file. This mode generates a new copy of the initialization file, with lines that identify any problems. Entries for PST files that cannot be processed are marked so that PST migrator ignores these files. You can then do either of the following:

Fix any problems and run the Policy Manager in report mode again to see whether there are any more problems. When the file is error free, you can run it in process mode to process all the files. You can run in report mode as many times as needed. Each time, Policy Manager creates a new initialization file that you can then run normally or use to fix problems. Run in process mode immediately. Files that could cause problems have been marked so that Policy Manager ignores them. You can then decide later what to do with these problem files.

Note the following:

Policy Manager uses only message class and shortcut content settings from the Exchange PST Migration policy. The rest of the settings in the policy are ignored. Policy Manager can use the information written into the PST file by PST marking to identify the mailbox and archive associated with the PST file. Symantec recommend that you do not use Policy Manager to perform other tasks at the same time as performing PST migrations. If you have only a few PST files to migrate, you may find it easier to use the wizard-assisted PST migration tool instead. See About the PST Migrator wizard on page 233.

Undertaking the PST migration process using Policy Manager

In outline, you perform scripted migrations with Policy Manager as follows.

PST migration: scripted Undertaking the PST migration process using Policy Manager

225

To undertake the migration process using Policy Manager

Decide whether to use markers within PST files to determine their ownership. By default, PST files are marked. You can turn off PST file marking in Exchange Desktop policies using the setting, Mark PST files, in the list of advanced Outlook settings. See PST files and marking on page 218.

Write the Policy Manager initialization file to specify which PST files you want to migrate to Enterprise Vault. In the file, specify that Policy Manager is to run in report mode. Remember to save the initialization file in Unicode format. Run Policy Manager in report mode with the initialization file. Policy Manager does the following:

Checks all the PST files listed are accessible. Creates a new initialization file that shows any problems with the listed PST files, such as files that could not be accessed or are password protected. The new initialization file has the same name as the original, with a number added to make it unique. For example, if the original script was called PSTMigration.ini then the new script would be called PSTMigration_1.ini. Creates a log file with the same name as the original initialization file and a file type of .log. For example, if the original script was called PSTMigration.ini then the log would be called PSTMigration.log.

4 5

You can fix problems that are listed in the new initialization file, or you can leave them for later. Run Policy Manager with the new initialization file. Policy Manager migrates the file contents and writes a log file with the same name as the initialization file and a file type of .log If any PST files fail the migration process, Policy Manager automatically writes a new script that you can run to process just those failed files. If necessary, fix any problems and then run the new script to migrate the contents of just those PST files that were not processed before.

226

PST migration: scripted Preparation for PST scripted migration

Preparation for PST scripted migration

Policy Manager only uses a limited number of settings in Exchange PST Migration policies. Enterprise Vault archives items from the PST files according to the following settings in your Enterprise Vault installation:

Enterprise Vault archives only the classes of items defined as eligible for archiving on the Message Classes tab in Exchange PST Migration properties. The migration obeys registry settings that are set for the Storage service. If you have configured customized shortcuts on the Shortcut Content tab of the Exchange PST Migration policy, then the PST Migrator uses these settings. Otherwise the shortcut content settings configured in the Exchange Mailbox policy are used.

Items can be assigned a specific retention category during PST migration. You may want such items to retain this retention category if they are moved later to a folder with a different retention category. To prevent Enterprise Vault from changing the retention category, ensure that the policy option, Include items with Retention Category selected by the user, set by a custom filter, or set by PST migration is not selected. This option is on the Moved items tab of the Exchange mailbox policy properties. The PST files must not be in use at the time of migration, so make sure that users do not have them open. You may find that it is better to move the PST files. The best procedure may be to gather all the PST files into the same place and then to migrate them from there. This will make it easier to generate the initialization file, assign permissions, and to manage files. Note though, that you will have some filename conflicts if there are PST files with the same name. Also, if any PST files are likely to be unmarked you must be sure you know the owners because there will be no identifying information in the PST. The Vault Service account must have Full Control access to the PST file. The Storage service for the destination vault store must be running. PST files that are password protected cannot be processed. You must remove such protection before migrating their contents. If you intend to use the automatic PST compaction feature at the end of migrations, you may need some spare disk capacity to provide room for the compaction to take place. You could need as much as the size of the largest PST file, plus approximately 5% of its size. There is no point in compacting the PST files if you are going to delete them.

PST migration: scripted Output from PST migration

227

Policy Manager migration checks the mailbox storage limit when a mailbox has either Prohibit Send or Prohibit Send & Receive mailbox limits set. If both these limits are set, Policy Manager does not move any item to the mailbox that would exceed the lower limit. If only one of the limits is set, then Policy Manager obeys that limit. Note that, even if the storage limit prevents items from being moved to the mailbox, the items are still archived in the appropriate archive. In this case you could increase the mailbox quota and then migrate the PST file again to move the items to the mailbox.

Output from PST migration

When you run Policy Manager with an initialization file containing a [PSTdefaults] section, Policy Manager automatically writes a new initialization file that contains details of any problems that it found. The new initialization file has the following features:

There is a [PSTcheckpoint] section at the top of the file, summarizing the results of the run. If you had been using process mode then the following apply:

All [PST] sections for files that were processed successfully are commented out. There is a JobStatus entry in each [PST] section, indicating for that file, either success or the type of error that occurred.

[PSTcheckpoint] section PST scripted migration

The contents of the [PSTcheckpoint] section vary according to whether you run the initialization file in report mode or process mode.

Report mode [PSTcheckpoint] section

The following [PSTcheckpoint] section results from running an initialization file in report mode. The Generation count of 1 shows that these results are from the first run of the file:
[PSTCHECKPOINT] GENERATION = 1 CREATED = 02Oct2008 10:58:02 AM SOURCE = E:\EV\pstmigration\pstlist.ini PSTPROCESSEDCOUNT = 118

228

PST migration: scripted Output from PST migration

PSTNOTREADYCOUNT = 3 PSTWARNINGCOUNT = 2

The following entries are of interest:

PSTPROCESSEDCOUNT = 118 shows that the file contains references to 118 PST

files.

PSTNOTREADYCOUNT = 3 shows that there are three files with problems. The Report_Error entries in the individual [PST] sections give you more

information. Policy Manager automatically adds DONOTPROCESS = TRUE to each of these [PST] sections.

PSTWARNINGCOUNT = 2 shows that there are two files with warnings. In this

case, these are both marked PST files whose markings are intentionally being overridden. The Report_Error entries in the individual [PST] sections gives more information. Because Policy Manager has added the DONOTPROCESS = TRUE entries to each of the problem PST files, you could run this new initialization file in process mode immediately, leaving the problem PSTs to be addressed later. Alternatively, you could fix the problems, remove the DONOTPROCESS = TRUE entries, and then run the file again in either report mode or process mode.

Process mode [PSTcheckpoint] section

The following [PSTcheckpoint] section results from running an initialization file in process mode. The Generation count of 2 shows that these results are from the second run of the file:
[PSTCHECKPOINT] GENERATION = 2 CREATED = 02Oct2008 10:59:36 AM SOURCE = E:\EV\pstmigration\pstlist.ini PSTPROCESSEDCOUNT = 115 PSTFAILEDCOUNT = 0 PSTUNPROCESSEDCOUNT = 3 PSTINCOMPLETECOUNT = 0 PSTPARTIALCOUNT = 0

The following entries are of interest:

PSTPROCESSEDCOUNT = 115 shows that 115 PST files were processed. This is the same initialization file as shown above in the Report mode description. The three problem files have been left with DONOTPROCESS = TRUE entries, so Policy Manager has ignored them.

PST migration: scripted Output from PST migration

229

PSTFAILEDCOUNT = 0 shows that there were no files for which processing could not be tried. PSTUNPROCESSEDCOUNT = 3 shows that three files were ignored. These are the three files with DONOTPROCESS = TRUE entries. PSTINCOMPLETECOUNT = 0 shows that no PST files were processed only partially. Policy Manager's processing was not interrupted. PSTPARTIALCOUNT = 0 shows that there were no PST files with individual items that could not be processed. If there had been such items, Policy Manager would have placed them in the Migration Failed Items folder in the PST files.

Enterprise Vault event log for PST scripted migration

When you run in process mode, the Enterprise Vault event log also contains one entry for each PST file processed. The entries appear in the Enterprise Vault event log with a source of Migrator Server. For example, the following log entry is for a PST file that contained 560 items and resulted in 560 shortcuts being placed in the mailbox:
PST Migration Report Migration status: Completed PST file: E:\Vault Test files\TestPSTs\um1.pst Vault Name: Chris Waterlander Vault Id: 14F921A913AB6D511AC9F0008C711C6F01110000server2.acme.com RetentionCategory: Business Exchange Server\Mailbox: EV\/o=ACME/ou=DEVELOPER/cn=Recipients/cn=ChrisW Number of folders processed: 43 Number of items archived to vault: 560 Total size of items archived: 137876 KB Number of items unable to be archived: 0 Number of items moved to mailbox: 560 Elapsed Migration Time: 0:0:6 (hours:minutes:seconds)

There is a summary log entry for each PST file that is migrated. The entry lists the number of items that have been archived and also the number of items that have been moved to the mailbox. Some items may not be eligible for archiving or moving to the mailbox. This is the case if they have a message class that you have specifically excluded from being archived (using the Message Classes tab of the Exchange PST Migration policy in the Administration Console), or if they were created on a computer that uses a language incompatible with that of the Storage service computer. For

230

PST migration: scripted Example initialization file for PST scripted migration

example, if a PST file contains a mixture of Japanese and English items, and the Storage Service computer uses Japanese, the English items are not eligible for archiving.

Example initialization file for PST scripted migration

The initialization file must be saved as a Unicode file. Table 13-1 shows a sample initialization file that sets up migrations for five PST files. Table 13-1 Sample initialization file Notes
The directory section is mandatory and must appear at the top of the file. This section contains the name of the Enterprise Vault directory computer and the site name.

Initialization file section

[Directory] directorycomputername = server2 sitename = server2

[PSTDefaults] ServerComputerName = server2 PSTLanguage = Western European

These default options apply to all PST migrations listed in the following [PST] sections unless overridden in those sections. PST Language is mandatory.

MailboxFolder = EVPM PST Migrations There must only one [PSTDefaults] section and it must appear before the individual [PST] MigrationMode = Report sections. ShortcutMode = NoShortcuts MigrationMode=Report specifies that this initialization file is to run in report mode. IncludeDeletedItems = false ShortcutMode=NoShortcuts means that, SetPstHidden = false by default, there will be no shortcuts to the migrated items. Items that cannot be migrated SetPstReadOnly = false will be left in the PST files, not moved to the CompactPst = true mailboxes. You can override this behavior for individual PST files. DeletePst = false CancelMbxAutoArchive = false

PST migration: scripted Example initialization file for PST scripted migration

231

Table 13-1

Sample initialization file (continued) Notes

The [PST] sections must appear after the [PSTDefaults] section As a minimum each section must specify the PST filename. If an option is unspecified then Policy Manager uses the value in the [PstDefaults] section. This marked file is missing and will produce an error when Policy Manager runs.

Initialization file section

[PST] Filename = E:\Migration\Missing.pst

[PST] Filename = \\server3\temp\marked1.pst

This file is on a remote computer. This PST file has been marked by the Enterprise Vault client so that Policy Manager can automatically determine the target archive, the Exchange Server mailbox, and the retention category.

[PST]

This PST file has been marked by the Enterprise Vault client so that Policy Manager Filename = E:\Migration\marked2.pst can automatically determine the target MailboxDN = /o=ACME/ archive, the Exchange Server mailbox, and the ou=DEVELOPER/cn=Recipients/ retention category. cn=JackH The MailboxDN setting is overriding the PST marking. This will result in a warning when ShortcutMode = MailboxShortcuts the initialization file is processed. The file will be processed correctly, using the specified enabled mailbox and that mailbox's default retention category and archive. Policy Manager will create shortcuts to archived items and place them, together with any items that remain in the PST at the end of the migration, into the mailbox.

[PST]

This PST file has been marked by the Enterprise Vault client. Filename = E:\Migration\marked3.pst The ArchiveName setting is overriding the ArchiveName = Jack Henry2 owner entry that the client made. This will result in a warning when the initialization file is processed. The PST file will be processed correctly, using the specified archive and the default retention category from the owning mailbox.

232

PST migration: scripted Example initialization file for PST scripted migration

Table 13-1

Sample initialization file (continued) Notes

This file has not been marked by an Enterprise Vault client.

Initialization file section

[PST] Filename = E:\Migration\unmarked.pst RetentionCategory = Business

Chapter

14

PST migration: wizard-assisted

This chapter includes the following topics:

About the PST Migrator wizard Outline of the wizard-assisted PST migration process Preparation for the wizard-assisted PST migration process Migration tips for the wizard-assisted PST migration process How the wizard-assisted PST migration process affects users Starting the wizard-assisted PST migration process

About the PST Migrator wizard

PST Migrator is a wizard that lets you store the contents of PST files in Enterprise Vault. The main features of the wizard are as follows:

You can migrate several PST files at the same time. You can either match PSTs to archives manually, or allow PST Migrator to do an automatic correlation based on the permissions set on the PST files. The automatic correlation can save you a lot of time, but it is important that you understand the process and make suitable preparations. PST Migrator processes PST files that are on a mapped network drive or in a shared network folder. You cannot use it to search across users' disks, migrating all the PST files that it finds.

234

PST migration: wizard-assisted Outline of the wizard-assisted PST migration process

PST Migrator archives only those types of items for which you have enabled archiving. To view or modify the types of items that are archived, start the Administration Console and go to the Message Classes tab of the Exchange PST Migration policy properties. If you have configured customized shortcuts in the Exchange PST Migration policy, then the PST Migrator uses these settings. Otherwise the shortcut content settings configured in the Exchange Mailbox policy are used. You specify the required archiving settings as you work through the wizard.

PST migrator does not use any other settings from the Exchange PST Migration policy. It is impossible to specify a migration process that suits everybody. For example, you may want to delete PST files after migrating them or you may want to continue using them. PST Migrator provides great flexibility, but you must think carefully about how you want to carry out the migration.

Outline of the wizard-assisted PST migration process

In outline, you perform wizard-assisted PST migrations as follows. To undertake the migration process

Decide whether to use markers within PST files to determine their ownership. By default, PST files are marked. You can turn off PST file marking in Exchange Desktop policies using the setting, Mark PST files, in the list of advanced Outlook settings. See PST files and marking on page 218.

2 3 4

In the Administration Console, right-click the Archives container and, on the shortcut menu, click Import PST. The PST Migration wizard starts. Select a vault store to use. You cannot select a vault store that is in backup mode. Add to the list the PST files that you want to migrate to Enterprise Vault. You can select PST files from multiple mapped drives or network drives, but note that the Enterprise Vault Storage service must be able to access them. Select how to match PST files with destination archives. You can choose either automatic correlation, or manual. Specify the default retention category to use for items from PST files that do not have marking information, or if you have chosen not to use marking information.

5 6

PST migration: wizard-assisted Outline of the wizard-assisted PST migration process

235

Each PST file is listed together with the associated mailbox and destination archive, if known. It is important that you check the list of matches before beginning the migration. You can select or change the destination archive for a PST file, or remove PST files from the list, if necessary. Each PST file is listed together with the retention category that will be applied to the items when they are archived. If required, you can change the retention category for individual PST files. You can choose an existing retention category or create a new one. Specify whether PST Migrator is to create shortcuts for the items it archives. You can configure PST Migrator to do either of the following:

Archive the items and delete the original items from the PST without creating shortcuts. Create shortcuts in the PST files and delete the original items after they have been archived. You might select this if users will still have access to the PST files at the end of the migration. The users must move the shortcuts to their mailboxes before they will work. Create shortcuts in the associated mailboxes and delete the original items from the PST files after they have been archived.

10 Specify the required folder structure that the PST Migrator is to create in the
mailbox for shortcuts to migrated items. You can specify a mailbox folder that is to correspond with the root folder in the PST file. Where there are several PST files to migrate, you can choose to merge the folder structures or keep them separate.

11 Select the language of the PST files to be migrated. 12 Specify whether PST Migrator is to migrate the Deleted Items folder in the
PST files, or leave it in the PST file. If calendar items are to be archived, specify whether PST Migrator is to migrate unexpired calendar items.

13 Specify what to do with each PST file after it has been processed. You can
select the following:

Leave the file as it is. Delete the file. Compact the file to free up disk space. Set permission on the file to read-only to prevent users adding items to the file.

236

PST migration: wizard-assisted Preparation for the wizard-assisted PST migration process

Hide the file. If you are not migrating all the PST files at the same time, this can help you to see how many PST files are left to migrate. The next time you run PST Migrator the hidden PST files will not be visible, provided that you have set your desktop so that it does not show hidden files.

14 Specify whether PST Migrator is to create a report file for the migration.
Report files are created in the Reports subfolder of the Enterprise Vault installation folder.

15 Start the migration.

During the migration, the PST Migrator writes two events to the Enterprise Vault event log for each PST file, one when it starts processing the file, and another when it has finished. If an item cannot be migrated, it is moved to a folder called PST Migration Failed Items in the PST file.

Preparation for the wizard-assisted PST migration process

The PST files must not be in use at the time of migration, so make sure that users do not have them open. You may find that it is better to copy PST files so that users can continue using the original files while you migrate the contents of the copies. The Vault Service account must have Full Control access to the PST file. If you are performing PST migration using a different account, then both the account and the Vault Service account must have Full Control access to the PST file. The Storage service for the destination vault store must be running. PST Migrator's automatic correlation rejects any PST file that has more than one user account with write permission, leaving you to do the correlation manually. You may find it easier to set the permissions appropriately before running PST Migrator. PST Migrator does not migrate PST files that are password protected. You must remove such protection before running PST Migrator. Items can be assigned a specific retention category during PST migration. You may want such items to retain this retention category if they are moved later to a folder with a different retention category. To prevent Enterprise Vault from changing the retention category, ensure that the policy option, Include items with Retention Category selected by the user, set by a custom filter, or set by PST migration is not selected. This option is on the Moved items tab of the Exchange mailbox policy properties.

PST migration: wizard-assisted Migration tips for the wizard-assisted PST migration process

237

If PST files are scattered in different locations on users' disks, you may find it easier to move them all to a central location before you run PST Migrator. If you have PST files that must be migrated to different vault stores, the quickest way to sort them is probably to use the automatic correlation within PST Migrator and remove those that do not correlate. See Migration tips for the wizard-assisted PST migration process on page 237. If you intend to use the automatic PST compaction feature at the end of migrations, you may need some spare disk capacity to provide room for the compaction to take place. You could need as much as the size of the largest PST file, plus approximately 5% of its size. PST Migrator checks the mailbox storage limit when a mailbox has either Prohibit Send or Prohibit Send & Receive mailbox limits set. If both these limits are set, PST Migrator does not migrate items that would exceed the lower limit. If only one of the limits is set, then PST Migrator obeys that limit. If a PST file fails migration because the mailbox is full, you can modify the appropriate mailbox storage limit and then migrate the PST file again.

Migration tips for the wizard-assisted PST migration process

Migrate a few PST files and then, when you are familiar with the process, increase the numbers. Migration is much easier if you have PST files in just a few locations, rather than in many. Sort out the permissions on the PST files before running PST Migrator, otherwise they will just fail. There is a Windows server command-line utility, CACLS, which you can use to grant the Vault Service account Full Control access to the PST files. You can run more than one instance of PST Migrator. There is no point in running more instances than you have processors. For example, if you have two processors, then do not run more than two instances of PST Migrator. If the computer is also archiving at the same time, then reduce the number of PST Migrator instances. When Enterprise Vault archives items, it also converts the contents to HTML and indexes them. There is a default conversion timeout of 30 minutes for this process. Enterprise Vault makes three attempts to convert an item, so can take up to 90 minutes before failing an item and moving on to the next one.

238

PST migration: wizard-assisted Migration tips for the wizard-assisted PST migration process

If there are very large, or very complex, items in a PST file, it can take a long time to migrate them all. If you do not need the content of the items to be indexed, then you can improve performance by lowering the conversion timeout to just a few minutes. This change to the conversion timeout also affects normal archiving, so remember to return it to the original value when you have migrated the PST files. To change the conversion timeout, perform the following steps in the order listed:

On the Storage service computer, set the following string registry value to the timeout, in minutes, that you want to use:
HKEY_LOCAL_MACHINE \Software \KVS \Enterprise Vault \ConversionTimeout

Restart the Storage service.

If you have PST files in the same location that you want to go to different vault stores, the quickest way to do this is as follows:

Run PST Migrator and select the first archive store that you want to use. Select all the PST files, including those that should go to other vault stores. Select automatic correlation. PST Migrator will open the vault store and match PST files to archives within that vault store. All other PST files will not be matched. Click the Archive heading on the screen to sort by destination archive. This puts at the top of the list all the PSTs that could not be matched to archives. Drag-select all the PSTs that could not be matched to archives and then click Remove. On the PST Migrator screen that asks What do you want to do with PSTs after all items are successfully migrated from each?, select Hide them. At the end of the migration, PST Migrator hides the PST files that were migrated. The next time you run PST Migrator, these PST files will not appear in the list of PST files available for migration. The files appear hidden only if you have set your desktop so that it does not show hidden files.

PST migration: wizard-assisted How the wizard-assisted PST migration process affects users

239

Repeat the process, running PST Migrator again, this time choosing a different vault store. When you have worked through all the vault stores, you may have some PST files left that failed to migrate. Run PST Migrator again and manually select the correct archive for each PST

If you run PST Migrator on a computer that is not running the Storage service for the vault store, then you cannot choose PSTs on a local disk. You can, however, choose PSTs from a mapped network drive or a shared network folder, so you could, for example, map a network drive to your local disk.

How the wizard-assisted PST migration process affects users

You can migrate the contents of PST files, choosing to create shortcuts to migrated items, as follows:

If you create shortcuts in mailboxes, then PST Migrator duplicates the folder structure of the PST files under a new, top-level folder in the mailboxes. If you create shortcuts in PST files to which users still have access, then the users must move the shortcuts to their mailboxes before the shortcuts will work.

If users store new items in a PST file that has been migrated, you can run the migration again at any time, again creating shortcuts to migrated items. PST Migrator will migrate the new items. You can delete PST files at the end of the migration. If you do this then, obviously, the files are no longer available to users. If a user has configured Outlook to deliver new mail to a PST file rather than to the mailbox, there will be errors when Outlook next starts, as follows:

If the PST file no longer exists, there is an error as soon as Outlook starts and the user is then given the option to create a new PST file.

If the PST file still exists but is read-only, then there will be an error as soon as the user tries to access the PST or tries to create a mail message. The best solution is for users to make sure, before you perform the migration, that mail is not being delivered to PST files.

240

PST migration: wizard-assisted Starting the wizard-assisted PST migration process

Starting the wizard-assisted PST migration process

When you have completed the preparatory steps, you are ready to start the PST migration. To start the migration

1 2 3

In the left-hand pane of the Administration Console, expand the view until Archives is visible. Right-click Archives and, on the shortcut menu, click Import PST. The PST Migration wizard starts. Work through the wizard.

Chapter

15

PST Migration: Locate and Migrate

This chapter includes the following topics:

Preparations for setting up PST Locate and Migrate How to edit the Exchange PST Migration policy Configuring the PST holding folder for Locate and Migrate Creating and configuring the PST Locator, PST Collector, and PST Migrator tasks Accounts that manage PST migration Locate and Migrate Migrating PST files using PST Locate and Migrate Running the PST Locator task to find domains and computers Selecting computers for PST searching Excluding network shares from PST migration Running the PST Locator task to find PST files Editing PST file properties Running the PST Collector task Running the PST Migrator task Troubleshooting PST migration

242

PST Migration: Locate and Migrate Preparations for setting up PST Locate and Migrate

Preparations for setting up PST Locate and Migrate

You need to set up the PST Locator, PST Collector, and PST Migrator tasks, Exchange PST Migration policies and the PST holding folder before you can start to migrate PST files. To set up PST Locate and Migrate you need to make the following preparations:

Decide whether to use PST marking. PST marking is enabled by default, and provides automatic association of a default archive and retention category with a mailbox. The archive and retention category can be overridden manually during the PST migration process, if required. You can turn off PST file marking in Exchange Desktop policies using the setting, Mark PST files, in the list of advanced Outlook settings. See PST files and marking on page 218. Create or edit Exchange PST Migration policies. These policies are listed under Policies > Exchange in the Administration Console. Both PST Locate and Migrate and Client-driven PST migration use the configuration settings in Exchange PST Migration policies. The settings control characteristics of the PST migration, such as whether to create shortcuts, which retention category to use, and how to process the PST files after the contents have been migrated. See How to edit the Exchange PST Migration policy on page 243. The policy is applied to users by means of provisioning groups. A provisioning group enables you to apply an Exchange PST Migration policy to individual users or to a group of Exchange Server users. How to set up Exchange provisioning groups is described in Setting up Exchange Server Archiving. Configure the network share that is to be used as the central PST holding folder. This folder is configured in Enterprise Vault site settings. The PST Collector task copies PST files to the PST holding folder. The PST files are held in this folder until the PST Migrator task stores the contents of each PST file in its associated archive. See Configuring the PST holding folder for Locate and Migrate on page 244. Create and configure PST Locator, PST Collector, and PST Migrator tasks. Typically, the PST Locator, PST Collector, and PST Migrator tasks run according to the schedule that you define in the task properties. A Run now option for each task lets you run the task immediately if required. See Creating and configuring the PST Locator, PST Collector, and PST Migrator tasks on page 245. You may want to use accounts other than the Vault Service account to manage PST migration objects in the Administration Console. In particular, you may want the PST Locator task to run under a domain administrator account to ensure access to computers in the domain.

PST Migration: Locate and Migrate How to edit the Exchange PST Migration policy

243

See Accounts that manage PST migration Locate and Migrate on page 250.

Items can be assigned a specific retention category during PST migration. You may want such items to retain this retention category if they are moved later to a folder with a different retention category. To prevent Enterprise Vault from changing the retention category, ensure that the policy option, Include items with Retention Category selected by the user, set by a custom filter, or set by PST migration is not selected. This option is on the Moved items tab of the Exchange mailbox policy properties.

How to edit the Exchange PST Migration policy

To customize the way PSTs are migrated for a group of users, you can edit the settings in the Exchange PST Migration policy that is associated with the provisioning group to which the users' mailboxes belong. Exchange PST Migration policies are listed under Policies > Exchange in the Administration Console. The Exchange PST Migration policy properties include settings to define the following:

Whether to create shortcuts for migrated items, and where to create them. Custom shortcuts. Whether to adjust Exchange Server quotas to accommodate the additional shortcuts in mailboxes. The default retention category . The classes of items to migrate. Whether to migrate the Deleted Items folder, and unexpired calendar items. The folder structure to create for shortcuts in the mailbox and Archive Explorer. The Windows code page to use if the PST Migrator creates folders in the user's mailbox. How to process PST files after successful migration.

When items have been migrated, the original items in the PST files are not deleted. If you want to delete the users PST file after successful migration, choose to do so on the Post Migration tab of the PST Migration policy.

244

PST Migration: Locate and Migrate Configuring the PST holding folder for Locate and Migrate

Configuring the PST holding folder for Locate and Migrate

You configure the PST holding folder in Enterprise Vault site properties. The folder that you select must be a network share. The accounts that are used to configure the folder, or run the PST Locator, PST Collector and PST Migrator tasks on all Enterprise Vault servers in the site must have access to the PST holding folder. The access permission that is required is shown in Table 15-1. Table 15-1 Account Access required to the PST holding folder Access required

Account used to configure the PST holding Read. Access can be removed after folder configuration, if required. Log on account used by PST Locator task Log on account used by PST Collector task Log on account used by PST Migrator task Delete. Delete. Delete.

To configure the PST holding folder

1 2

In the left pane of the Administration Console, display the Enterprise Vault Site Properties. On the General tab, next to PST Holding Folder, click Change. A prompt asks whether you want to browse Regular or Hidden shares.

3 4

Select the type of share that you intend to specify for the PST holding folder, and then click OK. In the Browse for Folder dialog, expand Entire Network > Microsoft Windows Network. Expand the required domain and then the server on which the share is located. The list of shares that are displayed contain shared folders to which the account has access. Select the folder you want to use for the PST holding folder and then click OK. Click OK to close Site Properties.

5 6

Determining the size of the PST holding folder for Locate and Migrate
In Enterprise Vault site properties you can specify a maximum size, in gigabytes, for the PST holding folder. The size that is specified applies to each PST Collector task. For example, if you specify the maximum folder size as 5 GB, and there are

PST Migration: Locate and Migrate Creating and configuring the PST Locator, PST Collector, and PST Migrator tasks

245

two PST Collector tasks configured, then the total maximum size of the PST holding folder is 10 GB. The PST Migrator task should empty the PST holding folder during its scheduled daily run. If PST files remain in the PST holding folder, they are not migrated until the next scheduled run starts. As PST files are set to read-only during migration, users cannot access to these PST files for an extended period. You can use one of the following techniques to ensure that the PST Migrator task empties the PST holding folder:

Set a suitable maximum size for the PST holding folder that ensures the PST Migrator task is able to empty the folder during its scheduled daily run. Set a small maximum size for the PST holding folder, and then schedule the PST Collector task so that it keeps the folder full. Set the schedule for the PST Collector task so that it ends before the end of the PST Migrator task schedule. This approach ensures that the PST Migrator task has time to empty the folder during its scheduled run. When the PST Migrator task runs it generates a report file. You can use the information in this report to determine the average number of PST files that the task can migrate during its scheduled run. In the properties of the PST Collector task you can then specify a maximum number of PST files that can be stored in the PST holding folder.

Creating and configuring the PST Locator, PST Collector, and PST Migrator tasks
To use the PST Locate and Migrate tool, you create and configure the following tasks:

PST Locator task. This task searches your network for domains, computers, and PST files. There can be only one PST Locator task in each Enterprise Vault site. (The PST Locator task is not required for Client-driven PST migration). PST Collector task. This task copies the PST files to a central PST holding folder. There can be many PST Collector tasks in each Enterprise Vault site, but only one PST Collector task per Enterprise Vault server. You need to configure a PST Collector task on each Enterprise Vault server that hosts archives to which you intend to migrate PST files. (The PST Collector task is not required for Client-driven PST migration). PST Migrator task. This task migrates the contents of the PST files to Enterprise Vault archives. There can be many PST Migrator tasks in each Enterprise Vault site, but only one per Enterprise Vault server. You need to configure a PST

246

PST Migration: Locate and Migrate Creating and configuring the PST Locator, PST Collector, and PST Migrator tasks

Migrator task on each Enterprise Vault server that hosts archives to which you intend to migrate PST files. To create a PST Locator task

1 2 3

In the Administration Console, expand your site until the Enterprise Vault Servers container is visible. Expand Enterprise Vault Servers and then expand the server on which you want to add the PST Locator task. Right-click Tasks and then, on the shortcut menu, click New > PST Locator task. The New PST Locator task wizard starts.

Work through the wizard to create the task.

To create a PST Collector task

1 2 3

In the Administration Console, expand your site until the Enterprise Vault Servers container is visible. Expand Enterprise Vault Servers and then expand the server on which you want to add the PST Collector task. Right-click Tasks and then, on the shortcut menu, click New > PST Collector task. The New PST Collector task wizard starts.

Work through the wizard.

To create a PST Migrator task

1 2

In the Administration Console, expand your site until the Enterprise Vault Servers container is visible. Expand Enterprise Vault Servers and then expand the server on which you want to add the PST Migrator task.

PST Migration: Locate and Migrate Creating and configuring the PST Locator, PST Collector, and PST Migrator tasks

247

Right-click Tasks and then, on the shortcut menu, click New > PST Migrator task. The New PST Migrator task wizard starts.

Work through the wizard. In this wizard you need to supply the location of a folder that the task can use to hold temporary copies of the PST files during migration. This folder must be on a local drive. The account under which the PST Migrator task runs must have full access to the folder. Note: Do not change the location of this folder while the PST Migrator task is running, or while Locate and Migrate is processing PST files.

After you have created a PST Locator, PST Collector, or PST Migrator task, you can configure each task using the task properties. Double-click the task to display the task properties.

How to configure the PST Locator task

The PST Locator task properties include the following pages:

General. Properties on this page let you configure how often the task should retry a failed operation, and the number of report files to keep. Settings. On this page you configure how the task is to search for domains, computers and PST files.

Select whether the task is to use NetBIOS or Active Directory to find the domains and computers on which PST files reside. You can configure the task to search computers for PST files using a registry or hard disk search. A registry search uses remote registry calls to search the Outlook profile for PST files. If a PST file is found in a profile, the Exchange mailbox in the profile is noted. If an Exchange mailbox is found, the task tries to determine the archive and the site associated with the primary mailbox referenced in the profile. A hard disk search scans all the local hard disks on the designated computer for files with an extension of .pst. It does not search the PST holding folder or the temporary migration folder on any computer running a PST Migrator task. On all computers, the recycle bin is not searched. As there can be very large numbers of PST files on computer hard disks, it is advisable to perform registry searches initially.

248

PST Migration: Locate and Migrate Creating and configuring the PST Locator, PST Collector, and PST Migrator tasks

With the default settings, the task does not automatically search any computers for PST files you need to select the computers to search. If you select the setting By default search for PSTs on each computer, the task automatically starts searching every computer it finds. As this process can take a very long time on a large network, use this setting with caution.

Domains. Domains that are found by the task are listed on this page. Only domains that are selected on this page are searched for computers and PST files. Schedule. It is advisable to schedule the PST Locator task to run during normal office hours, so that it finds the maximum possible number of computers and PST files (when users computers are switched on and connected to the internal network). As the site schedule is typically set to run tasks during non-office hours, you probably do not want to run this task according to the site schedule. Log On. The account under which the PST Locator task runs must have appropriate access to the computers that it is to search for PST files. Depending on the type of search that is configured for the task, the account must either be able to scan remotely the registry on each computer, or have access to the drives on each computer. To ensure that the task has adequate access to all the computers in the domain you can run the task under an account that is a member of the domain administrators ' group. Use the settings on the Log On page of the task properties to specify the account. See Accounts that manage PST migration Locate and Migrate on page 250.

How to configure the PST Collector task

The PST Collector task properties include the following pages:

General. Properties on this page let you configure how often the task should retry a failed operation, and the number of report files to keep. Settings. On this page you can configure what happens to the PST files after the task has copied them to the PST holding folder.

You can set the maximum number of PST files that this task is allowed to copy to the PST holding folder. This approach is one way of ensuring that the PST Migrator task empties the PST holding folder during its daily scheduled run. See Determining the size of the PST holding folder for Locate and Migrate on page 244. If you intend to back up the PST files before migrating them, select Wait for PSTs to be backed up before migrating them and then select the appropriate option, as follows:

PST Migration: Locate and Migrate Creating and configuring the PST Locator, PST Collector, and PST Migrator tasks

249

The migration status has changed to 'Ready to migrate'. Select this option to make the PST Migrator task wait until PST files have a migration status of Ready to migrate. If you choose this option, you must set this status manually on each PST file. The file attribute 'Ready for archiving' has been reset. Select this option to make the PST Migrator task wait until PST files have the Ready For Archiving attribute reset. Backup applications typically perform this action.

Schedule. As with the PST Locator task, it is advisable to schedule the PST Collector task to run during normal office hours, so that it can access as many computers and PST files as possible (when users computers are switched on and connected to the internal network). As the site schedule is typically set to run tasks during non-office hours, you probably do not want to run this task according to the site schedule. Log On. The account under which the PST Collector task runs must have appropriate access to the computers and PST files to be migrated. To ensure that the task has adequate access to all the computers in the domain you can run the task under an account that is a member of the domain administrators ' group. Use the settings on the Log On page of the task properties to specify the account. See Accounts that manage PST migration Locate and Migrate on page 250.

How to configuring the PST Migrator task

The PST Migrator task properties include the following pages:

General. Properties on this page let you configure how often the task should retry a failed operation, and the number of report files to keep. Settings. This page contains the following configuration settings:

The location on a local drive of the temporary files folder that the PST Migrator task uses during the migration process. You specify the location of this folder when you create the PST Migrator task. If you have configured building blocks, you must create a temporary files folder with the same folder path on all the Enterprise Vault servers in your building blocks environment. If the PST Migrator task fails over to a different server, it continues to use the same local path for the temporary files folder. The maximum number of PST files to migrate concurrently. Depending on your system configuration and workload, you may find that changing this number improves performance.

250

PST Migration: Locate and Migrate Accounts that manage PST migration Locate and Migrate

Schedule. It is advisable to schedule the PST Migrator task to run during normal office hours, so that it can access as many computers and PST files as possible (when users computers are switched on and connected to the internal network). Access to the computers and original PST files is required for post migration operations, such as unlocking the PST files, creating shortcuts or deleting the PST files. As the site schedule is typically set to run tasks during non-office hours, you probably do not want to run this task according to the site schedule. Log On. The account under which the PST Migrator task runs must have appropriate access to the PST holding folder, temporary files folder, and computers and PST files to be migrated. Access to the computers and original PST files is required for post migration operations. To ensure that the task has adequate access to all the computers in the domain you can run the task under an account that is a member of the domain administrators ' group. Use the settings on the Log On page of the task properties to specify the account. See Accounts that manage PST migration Locate and Migrate on page 250.

Accounts that manage PST migration Locate and Migrate

If you want an account other than the Vault Service account to manage PST migration objects in the Administration Console, the account must have either the PST Administrator role or the Power Administrator role. The Vault Service account has access to all objects and functions in the Administration Console. The accounts under which the PST Locator, PST Collector and PST Migrator tasks run must have appropriate access to the computers to be searched, and the PST files to be processed. The PST Migrator task requires access to the computers and original PST files for post migration operations. All the tasks also need appropriate access to the PST holding folder. See Configuring the PST holding folder for Locate and Migrate on page 244. The PST Migrator task account must have full access to its temporary files folder. See How to configuring the PST Migrator task on page 249. Depending on the type of search that has been configured for the PST Locator task, the account must either be able to scan remotely the registry on each computer, or have access to the drives on each computer. To ensure that the tasks have adequate access to all the computers in the domain you can run the tasks under the accounts that are members of the domain

PST Migration: Locate and Migrate Migrating PST files using PST Locate and Migrate

251

administrators ' group. Use the settings on the Log On page of the task properties to specify the account. For details of the permissions that the account needs, see the online Help for the Log On page. In addition, the account must have either the PST Administrator role or the Power Administrator role. Note: It is not advisable to add the Vault Service account to the domain administrators ' group.

Migrating PST files using PST Locate and Migrate

This section outlines how to use PST Locate and Migrate to search for PST files on users computers and migrate the files to Enterprise Vault archives. The following sections describe the steps in more detail. You can schedule and run the tasks in different ways depending on your workload, the time available, the number of PST files, and so on. This section assumes that you are interested in testing PST Locate and Migrate with relatively small numbers of PST files, possibly before starting a large-scale migration. Each time a task runs, it creates a report and places it in the Reports folder, which is a subfolder of the Enterprise Vault program folder (for example C:\Program Files (x86)\Enterprise Vault\Reports). To migrate PST files using PST Locate and Migrate

Use Run now or schedule a run of the PST Locator task to find available domains. On the Domains page in the task properties you then select the domains in which the computers you want to search for PST files are located. See Running the PST Locator task to find domains and computers on page 252.

Use Run now or schedule another run of the PST Locator task to find the computers in the selected domains. All the computers that the task finds are listed in the Administration Console, under Personal Store Management > Computers. You can configure the PST Locator task so that it automatically searches for PST files on each computer that it finds. Alternatively, in the Administration Console, under Personal Store Management > Computers, you can select the computers that you want the task to search for PST files. See Selecting computers for PST searching on page 255.

252

PST Migration: Locate and Migrate Running the PST Locator task to find domains and computers

Use Run now or schedule another run of the PST Locator task, this time to search for PST files on the selected computers. All the PST files that the task finds are listed in the Administration Console, under Personal Store Management > Files. See Running the PST Locator task to find PST files on page 258.

In the Administration Console you can edit the properties of a PST file, provide passwords for password-protected PST files, and change the migration status of a PST file, if required. The PST Collector task copies PST files with a status of Ready to copy to the PST holding folder. Depending on the configuration options selected, some manual intervention may be required to approve PST files for migration. For example, migration may only be started once the PST files have been backed up, or the ownership of particular PST files may need to be verified. Additionally, you may need to provide passwords for password-protected PST files, or you may want to prevent the migration of particular PST files. See Editing PST file properties on page 258.

Use Run now or schedule a run of the PST Collector task to copy the selected PST files to the central PST holding folder. See Running the PST Collector task on page 259.

Use Run now or schedule a run of the PST Migrator task to archive items from the PST files to the associated destination archive. See Running the PST Migrator task on page 260.

Running the PST Locator task to find domains and computers

When you first run the PST Locator task, it searches for available domains. You then select the domains to search and rerun the task to find the computers that you want to search for PST files. When the PST Locator task finds a computer, it attempts to determine if the computer is a NetApp device. Performing this check can slow down the search for computers. You can switch off this check, and later identify the NetApp devices manually in the list of computers. See Switching off NetApp device identification checks by the PST Locator task on page 254. Before searching for PST files, you can edit the properties of the computers that have been found to include or exclude specific computers when searching for PST

PST Migration: Locate and Migrate Running the PST Locator task to find domains and computers

253

files. If required, you can also exclude specific network shares from the PST file searches. You can then run the task again to search for PST files on the selected computers. To run the PST Locator task to find domains

1 2

In the Tasks listing of the Administration Console, right-click the PST Locator task and then, on the shortcut menu, click Start. Do either of the following:

Right-click the task and, on the shortcut menu, click Run Now. Wait for the scheduled run time for the PST Locator task.

The domains that have been found are then listed on the Domains page in the PST Locator task properties. Open the PST Locator task properties and select the domains in which the computers that you want to search for PST files are located.

Click OK to close the task properties, and then restart the task to apply the changes.

To run the PST Locator task to find computers

Do either of the following:

Right-click the PST Locator task and, on the shortcut menu, click Run Now. In the dialog that is displayed, ensure that Search for new computers is selected. Wait for the scheduled run time for the PST Locator task.

The task searches for computers in the domains that you selected in the task properties. Computers that have been found on the network are listed under Personal Store Management > Computers in the Administration Console. You can run the task several times to build up a list of computers before beginning the search for PST files. In the list of computers select the computers that you want the task to search for PST files. See Selecting computers for PST searching on page 255. On a small network, if you want the task to automatically search every computer that it finds, select By default search for PSTs on each computer on the Settings page of the PST Locator task properties. You can also exclude specific network shares from the PST file searches. See Excluding network shares from PST migration on page 257.

254

PST Migration: Locate and Migrate Running the PST Locator task to find domains and computers

Switching off NetApp device identification checks by the PST Locator task
This section describes how to switch off the automatic identification of NetApp devices by the PST Locator task during the search for computers. Later you can identify NetApp devices manually by editing the computer properties in the Administration Console. See Selecting computers for PST searching on page 255. To switch off the automatic identification of NetApp devices you configure a setting in the file, PSTlocatorTask.exe.config. The file, PSTlocatorTask.exe.config, and an example version of the file, Example PstLocatorTask.exe.config, are located in the Enterprise Vault program folder (for example C:\Program Files (x86)\Enterprise Vault). The example file contains examples of the settings that can be configured in PstLocatorTask.exe.config. In releases before Enterprise Vault 8.0 SP3, PstLocatorTask.exe.config did not exist on a default system; if required, you created the file using the example file, Example PstLocatorTask.exe.config. From Enterprise Vault 8.0 SP3, a stub version of PSTlocatorTask.exe.config is created in the following situations:

During a new installation of Enterprise Vault. During an upgrade of Enterprise Vault, if the file did not exist on the previous release.

The stub file contains only the following lines.

<configuration> <runtime> <generatePublisherEvidence enabled="false"/> </runtime> </configuration>

The upgrade process does not replace or modify any existing version of PstLocatorTask.exe.config. New settings are only added to the example file, Example PstLocatorTask.exe.config. To switch off the automatic identification of NetApp devices

On the Enterprise Vault server that runs the PST Locator task, start Windows Explorer and navigate to the Enterprise Vault program folder (for example C:\Program Files (x86)\Enterprise Vault). Copy the file, PstLocatorTask.exe.config, to a safe location.

PST Migration: Locate and Migrate Selecting computers for PST searching

255

If PSTlocatorTask.exe.config is the stub version of the file, then replace this file by copying and renaming the example file, Example PstLocatorTask.exe.config. Open the PstLocatorTask.exe.config file in a text editor such as Windows Notepad. Search for the following text:
<PSTSettings>

4 5

Do one of the following:

If you have created the file by copying and renaming the example version, then the following lines exist in the entries under <PSTSettings>:

<!--Determine whether computer is a NetApp Filer: Default: true--> <add key="LocateNetAppFilers" value = "true"/>

Change the setting value to "false".

If you created the file on a previous release, then add the following lines under <PSTSettings>:

<!--Determine whether computer is a NetApp Filer: Default: true--> <add key="LocateNetAppFilers" value = "false"/>

7 8

Save and close the file. In the Administration Console, restart the PST Locator task.

Selecting computers for PST searching

Computers that have been found on the network are listed under Personal Store Management > Computers in the Administration Console. You can select the computers that you want to search for PST files in one of the following ways:

Select multiple computers at once. Edit the properties of individual computers.

256

PST Migration: Locate and Migrate Selecting computers for PST searching

Note: The PST Locator task is unable to perform a hard disk search on a NetApp MultiStore (also known as "vFiler"). A NetApp Filer must be configured with a minimum ONTAPI Management API version of 1.4. The ONTAPI interface is the foundational API for NetApp products. Version 1.4 is provided with the Data ONTAP 7G software release, or later. For the latest information on supported devices and versions of software, see the Enterprise Vault Compatibility Charts at http://www.symantec.com/docs/TECH38537. To exclude a computer from PST searching, edit the properties of the computer. You can also exclude specific network shares from PST searching. See Excluding network shares from PST migration on page 257. To select multiple computers to search

In the Administration Console, expand Personal Store Management > Computers to display a list of the computers that have been found on the network. Hold down Ctrl or Shift and highlight the computers that you want to search. Right-click and select Properties on the menu. A dialog asks if you want the PST Locator task to search the selected computers. If the highlighted computers are the ones that you want to search then click Yes. In the Search column, Yes is displayed for each computer that you selected.

2 3 4

To edit the properties of individual computers

In the Administration Console expand Personal Store Management > Computers to display a list of the computers that have been found on the network. Double-click the name of the computer that you want to include when searching for PST files. The computer properties page is displayed. To include the computer in PST searching, select Search this computer when PST Locator task runs. To exclude the computer from PST searching, clear the option checkbox.

2 3

PST Migration: Locate and Migrate Excluding network shares from PST migration

257

If the computer is a NetApp Filer, click the Settings tab and check that This computer is a NetApp Filer is selected. This setting is selected automatically when the PST Locator task adds a NetApp Filer. However, if the computer was unavailable when found by the PST Locator task, or was added by the task before Enterprise Vault 7.0 was installed, it is not selected automatically.

Click OK to close the properties.

Excluding network shares from PST migration

You can exclude specific network shares when searching for PST files by listing them in the configuration file PstLocatorTask.exe.config. To exclude network shares from PST migration

On the Enterprise Vault server that runs the PST Locator task, start Windows Explorer and navigate to the Enterprise Vault program folder (for example C:\Program Files (x86)\Enterprise Vault). Do one of the following:

If the PstLocatorTask.exe.config file exists in the folder, copy it to a safe location. If there is no PstLocatorTask.exe.config file, create it by copying and renaming the file Example PstLocatorTask.exe.config.

3 4

Open the PstLocatorTask.exe.config file in a text editor such as Windows Notepad. Search for the following text:
<PSTSettings>

Immediately below this heading, add a line to list the network shares that you do not want to search. The syntax is as follows:
<add key="SharesToAvoid" value="share_1;share_2;share_3..."/>

where share_1, share_2, and so on, comprise a semicolon-separated list of the UNC paths of the network shares. For example, to exclude the shares \\myComputer\C$ and \\yourComputer\G$, you would type the following:
<add key="SharesToAvoid" value="\\myComputer\C$;\\yourComputer\G$"/>

6 7

Save and close the file. In the Administration Console, restart the PST Locator task.

258

PST Migration: Locate and Migrate Running the PST Locator task to find PST files

Running the PST Locator task to find PST files

When you run the PST Locator task this time, it searches for PST files on the computers you selected to search. You can configure the task to search for PST files in the Outlook profiles on a computer (Registry search), or on the computer's hard disks. (Hard disk search). During a hard disk search, the task does not search the PST holding folder, or the temporary PST migration file folders on any computer running a PST Migrator task. On all computers, the recycle bin folder is not searched. To run the PST Locator task to find PST files

Do either of the following:

Right-click the PST Locator task and, on the shortcut menu, click Run Now. In the dialog that is displayed, select Registry search or Hard disk search as required. Wait for the scheduled run time for the PST Locator task.

The task searches for PST files on the computers that you selected. The PST files that have been found are listed under Personal Store Management > Files in the Administration Console. You can filter the PST files with a particular migration status, or for a certain user. Before the PST Collector task runs to copy the PST files to the PST holding folder, you must edit the properties of the PST files to provide any missing information and change the status to "Ready to copy". See Editing PST file properties on page 258.

Editing PST file properties

The normal status of a PST file that has been found is "Do not migrate". When you are ready for the PST Collector task to copy the file to the PST holding folder, you need to edit the PST file properties in the Administration Console and change the status to "Ready to copy". If the PST Locator task cannot determine the ownership of the PST file, the associated mailbox, and its corresponding archive, then the PST file status is displayed as Not ready. You need to edit the properties of the PST file to provide the required information, and change the status to Ready to copy. If required, you can use the Settings tab in the PST file properties to specify the password for a password-protected file.

PST Migration: Locate and Migrate Running the PST Collector task

259

To edit the properties of a PST file

1 2

In the Administration Console listing, double-click the PST file name to display the PST file properties. On the General page, do one of the following:

Next to Mailbox, click Browse, and then select the mailbox of the user who owns the PST file. The corresponding archive is automatically chosen. Next to Destination archive, click Browse, and then select the mailbox archive of the user who owns the PST file. The corresponding mailbox is automatically chosen.

On the Settings page you can configure the following, if required:

Specify a retention category to be used for this PST file. Select the Windows code page to be used when creating folders for this PST file. Specify a password for PST file if it is password-protected.

When you have completed the required details, change the migration status on the General page to Ready to copy.

Running the PST Collector task

The PST Collector task copies PST files from users computers to the PST holding folder. It copies only the PST files that have a status of "Ready to copy". The account under which the task runs must have Delete access to the original location of the PST file. The easiest way to ensure the correct access is to run the task using an account in the domain administrators group. See Accounts that manage PST migration Locate and Migrate on page 250. To run the PST Collector task

1 2

In the Tasks listing of the Administration Console, right-click the PST Collector task and then, on the shortcut menu, click Start. Do one of the following:

Right-click the task and then, on the shortcut menu, click Run Now. Wait for the scheduled run time for the PST Collector task.

260

PST Migration: Locate and Migrate Running the PST Migrator task

Running the PST Migrator task

The PST Migrator task archives the contents of PST files that are in the PST holding folder to Enterprise Vault archives. There can be many PST Migrator tasks in your Enterprise Vault site. The task archives the contents of PST files that have a status of "Ready to migrate". If you configured the PST migration to wait for the PST files to be backed up before the PST Migrator task archives the contents (in PST Collector task properties), then the PST file status may be displayed as "Ready to back up". The status changes automatically after the files have been backed up. To run the PST Migrator task

1 2

In the Tasks listing of the Administration Console, right-click the PST Migrator task and, on the shortcut menu, click Start. Do one of the following:

Right-click the task and then, on the shortcut menu, click Run Now. Wait for the scheduled run time for the PST Migrator task.

When the file contents have been archived, the PST file status is displayed as "Ready for post-processing". When the PST Migrator task has successfully finished processing the PST file, the file status is displayed a "Complete". If a problem prevents the task from completing an operation, details are displayed in the Failure text box of the PST file properties in the Administration Console. You can also check the report file that is generated during the run.

Troubleshooting PST migration

You can use the task report files to assist in troubleshooting PST migration failures. Each time a task runs, it creates a report and places it in the Reports folder, which is a subfolder of the Enterprise Vault program folder (for example C:\Program Files (x86)\Enterprise Vault\Reports). The report file name takes the following form:

PSTLocTask_server_datetime.txt PSTColTask_server_datetime.txt PSTMigTask_server_datetime.txt

PST Migration: Locate and Migrate Troubleshooting PST migration

261

If file sharing is not enabled on a users computer, the PST Locator task is unable to search the registry or files on that computer. Note that Windows does not automatically enable file sharing. If the PST Locator task cannot search the registry or files, this results in errors such as the following in the report file:
** 18/07/2005 14:34:21 Hard disk search failure on DEMO : Failed to read registry to get list of drives : The network path was not found. ** ** 18/07/2005 14:34:21 Registry search failure on DEMO : The network path was not found. **

These errors are also reported if the Windows firewall is on. If the firewall is on, then you need to create an exception in Windows firewall for "File and Printer sharing", TCP port 139 and 445.

262

PST Migration: Locate and Migrate Troubleshooting PST migration

Chapter

16

PST migration: client-driven migration

This chapter includes the following topics:

About client-driven PST migration Configuring the PST holding folder for PST client-driven migration Editing the PST migration messages for PST client-driven migration Creating a PST Migrator task for PST client-driven migration Enabling mailboxes for PST client-driven migration

About client-driven PST migration

This section describes how to configure client-driven PST migration. Enterprise Vault provides other tools for migrating PST files to archives. See Tools for migrating PST files on page 215. Client-driven PST migration does not work if the registry value PSTDisableGrow is enabled on users' computers. For information about how to override PSTDisableGrow, see the Setting up Exchange Server Archiving manual. To set up client-driven PST migration

1 2 3 4

Configure PST holding folder. Set up the PST migration messages. Create a PST Migrator task, and configure temporary files folder. Enable mailboxes for client-driven PST migration.

264

PST migration: client-driven migration Configuring the PST holding folder for PST client-driven migration

PST files on network drives for PST client-driven migration

You can configure this facility to migrate PST files stored on Windows-based shares, and on NetApp Filers. To migrate PST files from a Windows share, the account that runs the Directory service must be a member of one of the following security groups on the file server:

Administrators Server Operators Power Users

To migrate PST files from a NetApp Filer, the account that runs the Directory service must be a member of the Administrators group on the NetApp Filer. If you are using the NetApp Filer autohome feature, see the following technical note: http://www.symantec.com/docs/TECH130826 You cannot migrate files that are hosted on:

Non-Windows file servers, other than NetApp Filers NetApp vFiler devices running a version of Data ONTAP earlier than Data ONTAP 7.3 Distributed File System (DFS) shares

Configuring the PST holding folder for PST client-driven migration

The PST holding folder is used as a collecting area for PST files that will be processed by the PST Migrator task. The folder must be a network share, to which the log on account used by the PST Migrator task has Delete access. The account that you use to configure the PST holding area must have sufficient access to the folder to list it in a selection dialog. Typically, the Vault Service account is used as the log on account by the tasks and when configuring the PST holding folder, but it is possible to specify different accounts. To configure the PST holding folder

1 2

In the left pane of the Administration Console, display the Enterprise Vault Site Properties. On the General tab, next to PST Holding Folder, click Change. A prompt asks whether you want to browse Regular or Hidden shares.

PST migration: client-driven migration Editing the PST migration messages for PST client-driven migration

265

3 4

Select the type of share that you intend to specify for the PST holding folder, and then click OK. In the Browse for Folder dialog, expand Entire Network > Microsoft Windows Network. Expand the required domain and then the server on which the share is located. The list of shares that are displayed contain shared folders to which the account has access. Select the folder you want to use for the PST holding folder and then click OK. Click OK to close Site Properties.

5 6

Editing the PST migration messages for PST client-driven migration

When you enable a mailbox for client-driven PST migration, Enterprise Vault automatically delivers a welcome message to that mailbox, explaining that PST files are about to be archived. A second message is delivered each time a PST file has been successfully migrated. During the installation, the messages are placed in the following folder beneath the Enterprise Vault Program folder:
Enterprise Vault\Languages\Mailbox Messages\lang

where lang indicates the language used. The welcome message is in a file called EnablePSTMigrationMessage.msg. The successful migration message is in a file called PSTMigratedMessage.msg. To set up the PST welcome message

1 2 3 4 5

Decide which language version of EnablePSTMigrationMessage.msg you want to use and locate the file. Using a computer that has Microsoft Outlook installed, double-click the file EnablePSTMigrationMessage.msg in Windows Explorer to edit the message. Review the text and make any changes that you require. Save the message. Copy EnablePSTMigrationMessage.msg to the Enterprise Vault program folder (for example C:\Program Files (x86)\Enterprise Vault) on every Enterprise Vault server in the site.

266

PST migration: client-driven migration Creating a PST Migrator task for PST client-driven migration

To set up the successful PST migration message

1 2 3 4 5

Decide which language version of PSTMigratedMessage.msg you want to use and locate the file. Using a computer that has Microsoft Outlook installed, double-click the file PSTMigratedMessage.msg in Windows Explorer to edit the message. Review the text and make any changes that you require. Save the message. Copy PSTMigratedMessage.msg to the Enterprise Vault program folder (for example C:\Program Files (x86)\Enterprise Vault) on every Enterprise Vault server in the site.

Creating a PST Migrator task for PST client-driven migration

If you have configured Locate and Migrate, then you already have a PST Migrator task and can ignore this section. If you have not configured Locate and Migrate then you need to work through this section. Note: You need to configure a PST Migrator task on every Enterprise Vault server that hosts a Storage service and manages the archives to which you intend to migrate PST files. When migrating a PST file, the migration process runs on the Enterprise Vault server that manages the destination archive. To create a PST Migrator task

1 2

In the Administration Console, expand your site until the Enterprise Vault Servers container is visible. Expand Enterprise Vault Servers and then expand the server on which you want to add the PST Migrator task.

PST migration: client-driven migration Enabling mailboxes for PST client-driven migration

267

Right-click Tasks and then, on the shortcut menu, click New > PST Migrator task. The New PST Migrator task wizard starts.

Work through the wizard. In this wizard you need to supply the location of a folder that the task can use to hold temporary copies of the PST files during migration. This folder must be on a local drive. The account under which the PST Migrator task runs must have full access to the folder. Note: Do not change the location of this folder while the PST Migrator task is running, or while client-driven migration is processing PST files.

Enabling mailboxes for PST client-driven migration

Enterprise Vault provides a wizard that lets you enable mailboxes for client-driven migration. You can enable a small number of mailboxes at a time so that at any one time there is a manageable number of PST files to process. After you have enabled a mailbox for client-driven PST migration, the Enterprise Vault Outlook Add-In starts scanning for PST files when the corresponding user next starts Outlook. The list of PST files that have been found by all client computers appear in the Administration Console, in the Files container under Personal Store Management. The PST files are migrated immediately; you do not need to approve them. To enable mailboxes for client-driven PST migration

In the left pane of the Administration Console, right-click Personal Store Management and click Enable Client-Driven Migrations. The Enable Mailbox for Client-Driven Migration wizard starts.

Work through the wizard.

268

PST migration: client-driven migration Enabling mailboxes for PST client-driven migration

Chapter

17

NSF migration: scripted

This chapter includes the following topics:

About scripted NSF migration

About scripted NSF migration

Enterprise Vault Policy Manager provides the functionality that is required to run scripted migrations of content from NSF files to Enterprise Vault. For detailed information on Policy Manager, see the Utilities manual. Policy Manager lets you control how each NSF file is processed. For each NSF file you can:

Specify the destination archive. Choose to create shortcuts to migrated items. Control whether shortcuts are left in the NSF file or placed in a specific folder in the users mail file. Specify the retention category to apply to the migrated items. Control what happens to the NSF file after the items have been migrated.

Policy Manager uses an initialization file, in which you make default migration settings and list the NSF files. You can also override the default migration settings for individual NSF files. You can run Policy Manager in report mode or in process mode. In report mode, Policy Manager checks each NSF file listed in the initialization file, to determine whether it can migrate the files contents. Policy Manager creates a new initialization file, which contains a count of all the files that are not ready for migration. In the new initialization file, any NSF file which cannot be migrated is marked to exclude it when Policy Manager runs in process mode.

270

NSF migration: scripted About scripted NSF migration

In process mode, Policy Manager migrates items from the NSF files listed in the initialization file. Policy Manager also writes a new initialization file when you run it in process mode, and marks the files it has processed successfully. You can use the new file to migrate any failed files when you have corrected the problems that prevented their migration. If you want to migrate only a small number of NSF files, consider using NSF migrator instead. See About NSF migrator on page 271.

Chapter

18

NSF migration: wizard assisted

This chapter includes the following topics:

About NSF migrator Outline of the NSF migration process About planning for NSF migration How NSF migration affects users Running NSF migrator NSF migration audits

About NSF migrator

NSF migrator is a wizard, which you can use to migrate the contents of Lotus Domino and Notes NSF files to Enterprise Vault. The main features of NSF migrator are as follows:

Selection of vault store. Each time you run NSF migrator, you can choose one vault store into which NSF file content is migrated. Matching NSF files to archives. You can configure NSF migrator to match NSF files to archives automatically. This automatic matching is useful when you migrate many NSF files. However, you can still manually match NSF files to archives. Selection of retention categories. NSF migrator asks you to choose a default retention category to use during the migration of NSF file content. However, you can still manually select a retention category for each NSF file.

272

NSF migration: wizard assisted Outline of the NSF migration process

Creation of shortcuts. NSF migrator can create shortcuts to migrated content. You can choose whether to create these shortcuts in the original NSF files or in user mail files. You can also configure the folder structure that is used to contain the shortcuts. Post-migration actions. You can configure what NSF migrator does with the NSF files it has migrated. For example, NSF migrator can automatically delete the NSF files.

Outline of the NSF migration process

This section describes the choices you must make on each page of the NSF migrator wizard.
Specify the directory computer When you run NSF migrator from the Start menu, you must enter the name of the Enterprise Vault directory computer that manages the archives to which you want to migrate NSF file content. You do not have to specify the directory computer when you run NSF migrator from within the administration console. You can specify only one vault store each time you run NSF migrator. If you want to migrate NSF files to archives in more than one vault store, you must run NSF migrator again. If appropriate, you can run more than one instance of NSF migrator. Select the NSF files that you want to migrate. You must use only UNC paths to access the locations that hold the NSF files you plan to migrate. Choose which method NSF migrator should use to match NSF files to archives. You can match NSF files to archives individually. Alternatively, NSF migrator can match NSF files to archives automatically, which it does by matching the mail file names in its archives with the owner property stored in each NSF file. This is the quicker option if you are migrating many NSF files. Even if you select this option, you can still manually match any NSF files that fail automatic matching, or change those that are matched.

Select a vault store

Select NSF files

Match NSF files to archives

NSF migration: wizard assisted About planning for NSF migration

273

Select a default retention category

Choose the default retention category that will be used when archiving items from the NSF files. Later in the wizard you can review and change the retention category for each NSF file if necessary. If there is no suitable retention category, you can create one at this point in NSF migrator. Even if you have chosen to match NSF files to archives automatically, NSF migrator may be unable to match all the files. At this point in NSF migrator, you can manually match NSF files to archives. If necessary, you can also change any that have been matched, or remove them completely if appropriate. By default, all content from the NSF files is migrated using the default retention category you selected earlier in the wizard. However, at this point you can choose different retention categories for individual NSF files. NSF migrator can create shortcuts to migrated content, and you can choose whether to create these shortcuts in the original NSF files or in user mail files. You can configure the folder structure that is used to contain the shortcuts in user mail files. For example, for users who have more that one NSF file, NSF migrator can either merge their contents in one folder structure, or create a separate structure for each.

Select archives

Select retention categories

Configure shortcuts

Select a folder structure

Configure deleted items and calendar Choose whether or not NSF migrator should items migrate items from the Trash folder in each NSF file. If appropriate, you can also select the Archive calendar items that have not yet expired option. Post-migration NSF file settings Finally, you can configure what NSF migrator should do with the NSF files it has migrated. For example, NSF migrator can automatically delete the NSF files.

About planning for NSF migration

The following sections provide information to help you plan the migration of NSF files, including some tips to help you make the migration more efficient:

274

NSF migration: wizard assisted About planning for NSF migration

How to edit the welcome message for NSF migration NSF file locations for NSF migration How to match NSF files to archives for NSF migration Standard mail templates for NSF migration NSF migration failed and ineligible items Item age limit for NSF migration Mail file limits and NSF file access control Users execution control lists for NSF migration Multiple instances of NSF migrator

How to edit the welcome message for NSF migration

When NSF migrator completes the migration of each users items, it automatically sends one of three messages to tell the user that the migration has finished. Table 18-1 lists the three messages, and describes the circumstances under which each is sent. Table 18-1 Message
NSFMigratedMessage

NSF migration messages Subject and description

Your NSF file ({0}) has been archived. NSF migrator sends this message to users whose items have been archived, when you have chosen not to create shortcuts to the migrated items.

NSFMigratedMessageMailFile

Your NSF file ({0}) has been archived. Shortcuts to the items are in {1}. {1} represents the name of the folder that contains the shortcuts. NSF migrator sends this message to users whose items have been archived, when you have chosen to place shortcuts in their mail files.

NSFMigratedMessageNSF

Your NSF file ({0}) has been archived. Shortcuts to the items are in the NSF file. This message is sent to users whose items have been archived, when you have chosen to place shortcuts in the NSF file.

NSF migration: wizard assisted About planning for NSF migration

275

In all three messages, {0} represents the name of the NSF file. These three messages are in a file called EVMessages.nsf. This file is in the \Languages\Mailbox Messages\lang\ folder in the Enterprise Vault program folder, for example C:\Program Files (x86)\Enterprise Vault\Languages\Mailbox Messages\lang\, where lang represents your language. The three messages contain placeholder text and you can edit this text if necessary. You should edit the messages in EVMessages.nsf using an account that has the Access to current database permission, to avoid execution security alerts. Once you have edited the messages, save EVMessages.nsf and copy it to the Enterprise Vault program folder, for example C:\Program Files (x86)\Enterprise Vault, on all the Enterprise Vault servers.

NSF file locations for NSF migration

It can be time-consuming to migrate NSF files that are in many locations, due to the overhead of locating them before you can add them to the list for migration. Consider moving all the NSF files to a central location before you run NSF migrator, so they can all be added to the list in one operation. Note: You must use UNC paths to access the locations that hold the NSF files you plan to migrate. This is because the background server process that migrates the content of NSF files is not necessarily on the same computer as the one on which you run the NSF migration wizard.

How to match NSF files to archives for NSF migration

The following procedure describes how to use NSF migrator efficiently when you need to match large numbers of NSF files to archives that are spread across multiple vault stores:

Run NSF migrator and select the first vault store. Add all the NSF files that you plan to migrate, including those that may not have matching archives in the vault store you chose. Select the Automatically assign archives to NSF files option. Later in the wizard, NSF migrator displays all the NSF files that have not been matched in red. In this list, click the Destination archive column heading to group all the NSF files with no matching archive. Select all these NSF files and click Remove.

276

NSF migration: wizard assisted About planning for NSF migration

When NSF migrator asks what you want to do with the NSF files that it migrates successfully, select either the Delete it option, or the Hide it option.

NSF migrator then hides or deletes the NSF files it has migrated successfully. If your operating system is configured to hide hidden files, they are not visible when you next run NSF migrator. Once you have repeated this process for all your other vault stores, any NSF files that are left are only those for which automatic matching did not work. You can investigate these files individually and select appropriate archives when you run NSF migrator again.

Standard mail templates for NSF migration

All NSF files are based on Domino templates. You can use NSF migrator to migrate any NSF files that are based on a list of Domino templates defined in a registry value. NSF migrator treats the templates in this registry value as standard mail templates. For any NSF file that is based on any other Domino template, NSF migrator warns that unexpected results can occur if you continue to migrate the file. However, you can continue and migrate the file if you are sure that it is a mail based file. The list of standard templates is determined by a registry string value called DominoMailTemplates under the following registry key on all the storage servers:
HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault \Agents

Table 18-2 contains the default list of the Domino mail templates that NSF migrator treats as standard. If you regularly migrate NSF files that are based on templates that are not in this list, and you do not want to be warned that the files are not based on standard templates, you can add the template names to the comma separated list in DominoMailTemplates. You must do this on all the storage servers. Table 18-2 Standard mail templates Description
Domino Web Access (7) Domino Web Access (7) w/ Enterprise Vault

Template name File name

dwa7 EVdwa7 EViNotes6 EVR6Mail dwa7.ntf ev_dwa7.ntf

ev_iNotes6.ntf Domino Web Access (6) w/ Enterprise Vault ev_mail6.ntf Mail (R6) w/ Enterprise Vault

NSF migration: wizard assisted About planning for NSF migration

277

Table 18-2

Standard mail templates (continued) Description

Mail (R7) w/ Enterprise Vault Mail (R8) w/ Enterprise Vault Mail (R85) w/ Enterprise Vault Extended Mail (R5.0) Extended Mail (6) Extended Mail (R7) iNotes Web Access (R5) Domino Web Access (6) iNotes Web Access (R6.0) Mail (R5.0) Mail (R6) Mail (R7) Mail (R8) Mail (R8.5)

Template name File name

EVR7Mail EVR8Mail EVR85Mail ExtR50Mail ExtR6Mail ExtR7Mail iNotes5 iNotes6 iNotes60 StdR50Mail StdR6Mail StdR7Mail StdR8Mail StdR85Mail ev_Mail7.ntf ev_mail8.ntf ev_mail85.ntf mail50ex.ntf mail6ex.ntf mail7ex.ntf inotes5.ntf inotes6.ntf inotes60.ntf mail50.ntf mail6.ntf mail7.ntf mail8.ntf mail85.ntf

NSF migration failed and ineligible items

By default, NSF migrator leaves failed and ineligible items, and shortcuts in the NSF files, rather than move them to users mail files. You can control this behavior with the following registry DWORD values:

MoveFailedArchivalNotes MoveNotEligibleForArchiveNotes MoveShortcutsToMailFile

All these values are under this key:

HKEY_LOCAL_MACHINE \Software \KVS

278

NSF migration: wizard assisted About planning for NSF migration

\Enterprise Vault \Agents

All these values are set to 0 by default. When MoveFailedArchivalNotes is set to 1, NSF migrator moves failed items to users mail files. When MoveNotEligibleForArchiveNotes is set to 1, NSF migrator moves ineligible items to users mail files. When MoveShortcutsToMailFile is set to 1, NSF migrator moves shortcuts to users mail files.

Item age limit for NSF migration

By default, NSF migrator processes all items in NSF files irrespective of their age. This applies both to items converted to shortcuts, and to other items that are moved to mail files, such as items that are not eligible for migration. You can control this behavior by specifying an age threshold, as a number of days, in two registry DWORD values, ShortcutMoveRestrictDays and NotesMoveRestrictDays. Both values are under this key:
HKEY_LOCAL_MACHINE \Software \KVS \Enterprise Vault \Agents

Both values are set to 0 by default, which means no threshold is set. To set thresholds, change the DWORD values to a number of days. When ShortcutMoveRestrictDays is set to a non-zero value, NSF migrator migrates all eligible items and creates shortcuts. Initially, all the shortcuts are in the NSF file. NSF migrator does not move the shortcuts to items older than the specified number of days, from the NSF file to the mail file. When NotesMoveRestrictDays is set to a non-zero value, other items, such as those ineligible for migration, are moved to mail files only if they are within the number of days specified. Otherwise, they remain in the NSF files.

Mail file limits and NSF file access control

Each users maximum mail file size must be sufficient for the mail file to contain the shortcuts and other items that NSF migrator places in it. If it is not, the migration fails for this file. You should ensure that mail file limits are set appropriately before migration. However, if any NSF files fail migration for this

NSF migration: wizard assisted How NSF migration affects users

279

reason, you can note the affected mail files, adjust their limits and process the files again. The Domino archiving user must have sufficient access rights on the NSF files you migrate, otherwise the affected NSF files fail migration. For more information on configuring the Domino archiving user, see the Symantec Enterprise Vault Installing and Configuring guide.

Users execution control lists for NSF migration

During migration, NSF migrator potentially creates new folders in users mail files and, as a result, certain actions on these folders are signed by the Domino archiving user. To prevent users seeing execution security alerts when they open the new folders, you must configure affected users execution control lists to allow Access to current database rights to the Domino archiving user. For more information, see the IBM article at Load Convert -u Changes User Created Folders' Signature to the Mail Server's Name.

Multiple instances of NSF migrator

You can run more than one instance of NSF migrator.

How NSF migration affects users

This section contains a summary of the changes users see once their NSF files have been migrated Immediately following successful migration of each NSF file, its owner receives an automatic message saying that the files content has been migrated to Enterprise Vault. If you chose to create shortcuts to migrated items, it is these shortcuts the users now see rather than the original items. According to the choices you made, the shortcuts are either in their original NSF files, or beneath the Folders view in their mail files. In the case of shortcuts that are created in user mail files, each user sees one of two folder structures beneath the Folders view:

One combined folder structure that contains the content from all the users NSF files. A set of folders, named after each of the NSF files. Each folder contains the content from just one NSF file.

If you chose to delete NSF files after successful migration, these files are no longer available to users.

280

NSF migration: wizard assisted Running NSF migrator

Running NSF migrator

Before you run NSF migrator for the first time, consider migrating just a small number of files until you are familiar with the process. Once you are comfortable with the process, migrate more files. Before you run NSF migrator, ensure that:

The NSF files you are migrating are not in use. The vault service account has full access to the NSF files.

To run NSF migrator:

1 2

In the left pane of the Administration Console, right click Archives and click Import NSF. Work through the wizard pages and select appropriate options.

You can also run NSF migrator from Start > All Programs > Enterprise Vault > NSF Mail Migrator (Import).

NSF migration audits

If you have configured Enterprise Vault auditing and selected one or both of the NSF Migration auditing options, successful NSF migration actions are audited. See About auditing on page 315.

Chapter

19

Enterprise Vault message queues

This chapter includes the following topics:

Accessing Enterprise Vault message queues MSMQ queue summary Exchange Mailbox task queues Exchange Journaling task queues Exchange Public Folder task queues Retrieval queues Storage service queues

Accessing Enterprise Vault message queues

Enterprise Vault uses Microsoft Message Queue (MSMQ) Server to transfer information between Enterprise Vault components. You must clear all Enterprise Vault queues before you carry out any Microsoft Exchange maintenance. If you check or repair the Microsoft Exchange database when an Exchange Mailbox task still has work outstanding, that work cannot be done. Normally you should allow the Enterprise Vault tasks and services to clear message queues. If there is a significant build-up of messages on particular queues, it is important to investigate the cause of the problem. In certain circumstances support may advise you to clear specific message queues manually. Detailed instructions on how to do this are given in the following article on the support Web site:

282

Enterprise Vault message queues MSMQ queue summary

http://www.symantec.com/docs/TECH38085 To access the message queues

If you have yet to install Message Queuing, see the Windows documentation for instructions on how do so with the Add or Remove Programs applet in Control Panel. In Control Panel, first click Administrative Tools and then click Computer Management. In the left pane of the Computer Management console, first expand Services and Applications and then expand Private Queues.

2 3

MSMQ queue summary

Table 19-1 gives a brief description of what goes on to each of the Enterprise Vault queues. Here, server is the name of the server that the Exchange Mailbox task is processing, and queue is a number that uniquely identifies the queue. Table 19-1 Queue name Summary of MSMQ queues Contains information about

Enterprise Vault Exchange Mailbox Pending items to update. Also failed operations. task for server queue A1 Enterprise Vault Exchange Mailbox Individual items to process. Used for manual archive task for server queue A2 requests and whenever Enterprise Vault cannot directly communicate with the Storage Archive queue of the Storage service. Enterprise Vault Exchange Mailbox Mailboxes to process. Used if you start archiving using task for server queue A3 the Run Now option in the Administration Console. Enterprise Vault Exchange Mailbox Individual items to process. Only used for retries when task for server queue A4 Enterprise Vault cannot directly communicate with the Storage Archive queue of the Storage service. Enterprise Vault Exchange Mailbox Mailboxes to process. Used during scheduled archive task for server queue A5 runs. This queue is not processed outside the scheduled archiving times, so you cannot use Run Now to clear a backlog on this queue.

Enterprise Vault message queues MSMQ queue summary

283

Table 19-1 Queue name

Summary of MSMQ queues (continued) Contains information about

Enterprise Vault Exchange Mailbox Requests to update folders with items that have been task for server queue A6 moved inside a mailbox. Enterprise Vault compresses the moved and copied item data that is placed in requests on queue A6. It also limits message storage on this queue to 100 MB. A compressed request to update 1,000 items occupies approximately 50 KB. So, about 2,000 requests can be placed on the queue. When the queue is full, further requests are rejected. These moved and copied items have to wait for another shortcut processing run. Enterprise Vault Exchange Mailbox Synchronization requests. task for server queue A7 Enterprise Vault Journaling task for server queue J1 Enterprise Vault Journaling task for server queue J2 Enterprise Vault Journaling task for server queue J3 Pending items to update. Also failed operations.

Items to process.

Instructs the Exchange Journaling task to examine the journal mailbox for new messages. Up to 500 new messages are marked as archive pending, and a message is placed on queue J2 for each such message. Synchronization requests.

Enterprise Vault Journaling task for server queue J4

Enterprise Vault Public Folder task Pending items to update. Also failed operations. for server queue P1 Enterprise Vault Public Folder task Folders to process. Used if you start archiving using for server queue P3 the Run Now option in the Administration Console. Enterprise Vault Public Folder task Folders to process. Used during scheduled archive for server queue P5 runs. This queue is not processed outside the scheduled archiving times, so you cannot use Run Now to clear a backlog on this queue. Enterprise Vault Exchange Mailbox Notifications of item retrieval requests. task for server queue R1

284

Enterprise Vault message queues Exchange Mailbox task queues

Table 19-1 Queue name

Summary of MSMQ queues (continued) Contains information about

Enterprise Vault Exchange Mailbox Retrieval requests. task for server queue R2 Enterprise Vault restore spool admin queue Items that the Storage service has retrieved and that are now ready for the Exchange Mailbox task to process (for retrieval). Items to be stored in vault stores.

Enterprise Vault storage archive for server

Enterprise Vault storage restore for Items to be retrieved from vault stores. server

Exchange Mailbox task queues

Table 19-2 describes the queues that the Exchange Mailbox task uses. Here, server is the name of the server that the Exchange Mailbox task is managing, and queue is a number that uniquely identifies the queue. Table 19-2 Queue name Exchange Mailbox task queues Messages placed on the queue

Enterprise Vault Exchange Mailbox Update Shortcut, Operation Failed. task for server queue A1 Enterprise Vault Exchange Mailbox Process Item (Explicit Archives). task for server queue A2 Enterprise Vault Exchange Mailbox Process Mailbox, Process System (Run Now), Check task for server queue A3 System, Check Mailbox. Enterprise Vault Exchange Mailbox Only used for retries where Enterprise Vault cannot task for server queue A4 communicate directly with the Storage Archive queue. Enterprise Vault Exchange Mailbox Process Mailbox, Process System (Schedule only). task for server queue A5 Enterprise Vault Exchange Mailbox Process Moved Items in Folder. task for server queue A6 Enterprise Vault Exchange Mailbox Synchronization requests. task for server queue A7

Enterprise Vault message queues Exchange Mailbox task queues

285

Table 19-3 provides more information on the messages that the Exchange Mailbox task may place in queues A1 through A7. Table 19-3 Message
Operation Failed

Messages in the Exchange Mailbox task queues Notes

Informs the Exchange Mailbox task that an error has occurred and that it should change the message from archive pending back into a message. The message is reprocessed later. This message is sent if an error occurs during archiving and storage. Asks the Exchange Mailbox task to archive a specific message from the Exchange server to the Storage service. The item in Exchange is turned into a shortcut when the storage returns an Update Shortcut message. Process Item messages are produced by a user explicitly archiving an item (placed on A2) or by retry requests for items that failed during normal processing. Retry requests from Run Now are placed on the A2 queue, whereas those from scheduled archiving are placed on the A4 queue.

Process Item

Process Mailbox

Asks the Exchange Mailbox task to examine a mailbox and find any messages that match the archiving criteria. The items are placed on the Storage Archive queue for storage processing. Asks the Exchange Mailbox task to update the items that have been moved or copied to the specified folder. Process Moved Items in Folder messages are only placed on queue A6.

Process Moved Items in Folder

Process System

Asks the Exchange Mailbox task to determine which mailboxes on the Exchange server are eligible for archiving. The Exchange Mailbox task reads the list of all provisioned mailboxes and sends a Process Mailbox message (on the same queue) for each mailbox. A Process System message is placed immediately on queue A3 if the administrator selects Run Now from the task properties, or it is placed on queue A5 at the start of a scheduled archive period (provided that there are no other Process System messages that are already waiting to be done).

286

Enterprise Vault message queues Exchange Mailbox task queues

Table 19-3 Message

Messages in the Exchange Mailbox task queues (continued) Notes

Synchronization requests for an Exchange Mailbox task are placed on the A7 queue. When synchronization is run, a Synchronize System request is placed on this queue. This generates a Synchronize Mailbox request for each mailbox that needs to be synchronized. Having multiple Synchronize Mailbox requests means that multiple threads can service the requests. The A7 queue is processed at all times but is always the lowest priority task. This means that scheduled background archives always take precedence over synchronization requests.

Synchronize System

Update Shortcut

Informs the Exchange Mailbox task that it can turn an archive pending item into a shortcut. It occurs after a message has been stored by the Storage service, and backed up.

Notes on the Exchange Mailbox task queues

Each queue has a suffix of Apriority number, where A1 is the highest priority. The message queues are treated as FIFO (First In, First Out), and new messages are always added to the end of the queue. The Exchange Mailbox task processes the queues in order of priority. The task scans through each queue, starting with the highest priority. If it finds a message on a queue, it processes the message and then starts the scan again from the highest priority queue. Therefore, queues A2 through A7 are not processed until queue A1 is empty. When A1 is empty, A2 requests are processed before A3 requests. However, queues A4 and A5 are special queues that are used by the archiving schedule only. The Exchange Mailbox task processes messages on the A5 queue only during a scheduled archive period. Outside the scheduled periods, messages on these queues are ignored until the next schedule period. Using performance monitor, you can monitor the changes in the queues to assess the progress of the task. For example, at the start of a scheduled period, the number of messages on queue A5 rises (to the number of enabled mailboxes on the Exchange server). These are Process Mailbox messages. The Exchange Mailbox task takes the first message off queue A5, finds all the eligible messages in the mailbox, and changes them to archive pending. A Process Item message is then placed on

Enterprise Vault message queues Exchange Journaling task queues

287

the Storage Archive queue of the Storage service for each message to be archived.

After the vault store has been backed up, Update Shortcut messages are placed on queue A1. The messages are processed immediately because the queue has a higher priority. Queue A3 performs the same function as queue A5, but for an immediate process system. This queue also performs shortcut expiry and deletion. Explicit user archives from the Outlook client extension are placed on queue A2. Queue A5 is only processed during a scheduled period, but queues A1 through A3, A6, and A7 are always processed. If a queue has not been processed for more than 10 minutes, and there are no messages in a higher priority queue, there may be a problem with the task. Check the Enterprise Vault event log on the Exchange Mailbox task computer for any additional information. Monitoring queue A1 indicates that a backup has correctly updated shortcuts. However, if A1 is being used during normal use (before a backup), this may indicate a problem with tasks. Check the Enterprise Vault event log for errors.

Exchange Journaling task queues

Table 19-4 describes the queues that the Exchange Journaling task uses. Here, server is the name of the server that the Exchange Journaling task is managing, whereas queue is a number that uniquely identifies the queue. Table 19-4 Queue name
Enterprise Vault Journaling task for server queue J1 Enterprise Vault Journaling task for server queue J2 Enterprise Vault Journaling task for server queue J3 Enterprise Vault Journaling task for server queue J4

Exchange Journaling task queues Messages placed on the queue

Post Process Archived Item, Operation Failed.

Process Item.

Process Mailbox.

Synchronize System.

Table 19-5 provides more information on the messages that the Exchange Journaling task may place in queues J1 through J4.

288

Enterprise Vault message queues Exchange Journaling task queues

Table 19-5 Message

Operation Failed

Messages in the Exchange Journaling task queues Notes

Informs the Exchange Journaling task that an error has occurred and that it should do the following: Change the message from archive pending back into a message. The message is reprocessed later. Move the message to the Failed to Store folder.

This message is sent if an error occurs during archiving and storage. Post Process Archived Item Informs the Exchange Journaling task to delete an archive pending item from the journal mailbox. It occurs after a message has been stored by the Storage service, and backed-up. Asks the Exchange Journaling task to examine the journal mailbox, finding any messages that have arrived. Up to 500 new messages are turned into archive pending, and a message is placed on the Storage Archive queue of the Storage service for each message to be archived. The process mailbox message is issued every minute onto queue J3. This allows for continuous scanning of the journal mailbox while the Journaling task is running. Synchronize System Synchronization requests for an Exchange Journaling task are placed on the J4 queue. When synchronization is run, a Synchronize System request is placed on this queue. This generates a Synchronize Mailbox request for each mailbox that needs to be synchronized. Having multiple Synchronize Mailbox requests means that multiple threads can service the requests. The J4 queue is processed at all times but is always the lowest priority task. This means that scheduled background archives always take precedence over synchronization requests.

Process Mailbox

Enterprise Vault message queues Exchange Public Folder task queues

289

Notes on the Exchange Journaling task queues

Each queue has a suffix of Jpriority number, where J1 is the highest priority. The message queues are treated as FIFO (First In, First Out), and new messages are always added to the end of the queue. An Exchange Journaling task processes the queues in order of priority. The task scans through each queue, starting with the highest priority. If it finds a message on a queue, it processes the message and then starts the scan again from the highest priority queue. Therefore, if there are messages on queue J1, queue J2 and J3 are not processed until queue J1 is empty. Monitoring queue J1 will indicate that a vault store backup is correctly deleting the messages. However, if J1 is being used during normal use (before a backup), this may indicate a problem with tasks. Check the Enterprise Vault event log for errors. Monitoring queue J3 will indicate that at least every minute a process mailbox message is on the queue (a new message will only be added if the queue is empty). There should never be more than one message on this queue. The message should appear on the queue and then disappear as soon as queue J1 is clear. Any new messages in the journal mailbox will be processed. If a queue has not been processed for more than 10 minutes, and there are no messages in a higher priority queue, there may be a problem with the tasks. Check the Enterprise Vault event log on the Exchange Journaling task computer for any additional information.

Exchange Public Folder task queues

Table 19-6 describes the queues that each Exchange Public Folder task uses. Here, server is the name of the server that the Public Folder task is managing, whereas queue is a number that uniquely identifies the queue. Table 19-6 Queue name Exchange Public Folder task queues Messages placed on the queue

Enterprise Vault Public Folder task Update Shortcut, Operation Failed. for server queue P1 Enterprise Vault Public Folder task Process Folder, Process Folders (Run Now), Check for server queue P3 Folders, Check Folder. Enterprise Vault Public Folder task Process Folder, Process Folders (Schedule only). for server queue P5

290

Enterprise Vault message queues Exchange Public Folder task queues

Note that Enterprise Vault has not used queues P2 and P4 since version 3.6. Table 19-7 provides more information on the messages that the Exchange Public Folder task may place in queues P1, P3, and P5. Table 19-7 Message
Operation Failed

Messages in the Exchange Public Folder task queues Notes

Informs the Exchange Public Folder task that an error has occurred and that it should change the message from archive pending back into a message. The message is reprocessed later. This message is sent if an error occurs during archiving and storage. Asks the Exchange Public Folder task to examine a specific folder and find any messages that match the archiving criteria. These messages are then turned into archive pending, and a message is placed on the process item queue for each message to be archived. Asks the Exchange Public Folder task to determine which folders on the Exchange Server are eligible for archiving. The Exchange Public Folder task reads the list of all the public folders that are hosted on the Exchange server and sends a Process Folder message (on the same queue) for each top-level folder that is eligible. Process Folders messages are placed immediately on queue P3 if the administrator selects Run Now from the task properties, or it is placed on queue P5 at the start of a scheduled archive period (provided that there are no other process folders messages already waiting to be done).

Process Folder

Process Folders

Update Shortcut

Instructs the Exchange Public Folder task to turn an archive pending item into a shortcut. It occurs after a message has been stored by the Storage service, and backed up.

Notes on the Exchange Public Folder task queues

Each queue has a suffix of Ppriority number, where P1 is the highest priority. The message queues are treated as FIFO (First In, First Out), and new messages are always added to the end of the queue. The Exchange Public Folder task processes the queues in order of priority. The task scans through each queue, starting with the highest priority. If it finds a

Enterprise Vault message queues Retrieval queues

291

message on a queue, it processes the message and then starts the scan again from the highest priority queue. Therefore, if there are messages on queue P1, the other queues are not processed until queue P1 is empty. However, the P5 queue is a special queue only used during the public folder archiving schedule. The Exchange Public Folder task processes only messages on queue P5 during a scheduled archive period. Outside of the schedule, any messages on these queues are ignored.

Queue P3 performs the same function as queue P5, but for an administrator Run Now. This queue also performs shortcut expiry and deletion. Queue P5 is only processed during a scheduled period, but queues P1 and P3 are always processed. If a queue has not been processed for more than 10 minutes, and there are no messages in a higher priority queue, there may be a problem with the task. Check the Enterprise Vault event log on the Exchange Public Folder task computer for any additional information. Monitoring queue P1 will indicate that a backup has correctly updated shortcuts. However, if P1 is being used during normal use (before a backup), it may indicate a problem with tasks. Check the Enterprise Vault event log for errors.

Retrieval queues
Table 19-8 describes the queues with which the Exchange Mailbox task carries out retrieval. Here, server is the name of the server that the Exchange Mailbox task is processing, whereas queue is a number that uniquely identifies the queue. Table 19-8 Queue name Retrieval queues Messages placed on the queue

Enterprise Vault Exchange Mailbox Item Ready, Operation Failed. task for server queue R1 Enterprise Vault Exchange Mailbox Restore Item, Update Basket. task for server queue R2 Enterprise Vault Storage Spool Message content. The messages on this queue are items restored from the Storage service. The Exchange Mailbox task reads the messages as it processes the queue R1.

Table 19-9 provides more information on the messages that the Exchange Mailbox task may place in queues R1 and R2 when it carries out retrieval.

292

Enterprise Vault message queues Retrieval queues

Table 19-9 Message

Item Ready

Messages in the Retrieval queues Notes

This message informs the Exchange Mailbox task that a previously requested message is now available on the storage spool queue. The Exchange Mailbox task collects the message from the storage spool queue and places it into the mailbox. The Storage service generates these messages as required. This message informs the Exchange Mailbox task there was a problem restoring the message. If the retrieval was started from the Web application, the Exchange Mailbox task updates the basket to indicate the item was not restored. This message is a request to restore an item from the Storage service back into Exchange Server. The Exchange Mailbox task prompts for the message from the Storage service and places it into the mailbox. Messages are placed on this queue from both the user extension and the Web page restore functions. When a restore succeeds or fails, the retrieval task tries to update the shopping basket directly. If this fails, the retrieval task posts an Update Basket request so that it is tried again. This message instructs the Exchange Mailbox task to update a Web basket with the successful restoration of an item.

Operation Failed

Restore Item

Update Basket

Notes on the retrieval queues

Each queue has a suffix of Rpriority_number, where R1 is the higher priority. The message queues are treated as FIFO (First In, First Out), and new messages are always added to the end of the queue. The Exchange Mailbox task processes the queues in order of priority. The task scans through each queue, starting with the highest priority. If it finds a message on a queue, it processes the message and then starts the scan again from the highest priority queue. Therefore, if there are messages on queue R1, queue R2 is not processed until queue R1 is empty. If a queue has not been processed for more than 10 minutes, and there are no messages in a higher priority queue, there may be a problem with the task.

Enterprise Vault message queues Storage service queues

293

Check the Enterprise Vault event log on the Exchange Mailbox task computer for any additional information.

Storage service queues

Table 19-10 describes the queues that the Storage service uses. Table 19-10 Queue name
Enterprise Vault storage archive Enterprise Vault storage restore

Storage service queues Messages placed on the queue

Store Item. Restore an Item.

Table 19-11 provides more information on the messages that the Storage service may place in the queues. Table 19-11 Message
Restore an Item

Messages in the Storage service queues Notes

The Exchange Mailbox task places a message in the Storage Restore queue, requesting an item to be restored from an archive. When the Storage service has located the item, it places it in the Storage Spool queue and notifies the Exchange Mailbox task on queue R1. The Exchange Mailbox task places a compressed email message on the Storage Archive queue, to be stored in an archive. If the compressed message is larger than 4 MB, it is divided into 4-MB chunks (each labeled with a part number, such as "Part 1 of 5"). The message is reconstructed by the Storage service before storing. The Exchange Mailbox task places all emails to be stored onto the appropriate Storage service archive queue. Multiple Storage services may be configured, so the Exchange Mailbox task must select the correct Storage service for the vault store in which the archive resides.

Store Item

294

Enterprise Vault message queues Storage service queues

Notes on the Storage service queues

Monitoring the storage archive queue will indicate the Storage service is processing items. If the number of items in this queue does not change for at least 30 minutes, there is likely to be a problem. Check the Enterprise Vault event log on the storage computer for any errors and, if necessary, restart the Storage service. When all the vault stores on an Enterprise Vault server are in backup mode, the Storage Archive queue is not processed. Monitoring the restore queue will indicate the number of restores required by the users. Again, if the number of items on the queue does not change, there is likely to be a problem.

Chapter

20

Customizations and best practice

This chapter includes the following topics:

Mailbox archiving strategies Public folder archiving best practice About performance tuning

Mailbox archiving strategies

This section covers the following:

About mailbox archiving strategies Notes on archiving based on age Notes on archiving based on quota or age and quota Notes on archiving items from Exchange managed folders Archiving items only if they have attachments How to customize the Enterprise Vault settings for a journal mailbox Disabling archiving for mailboxes

About mailbox archiving strategies

You define an archiving strategy for a mailbox policy on the Archiving Rules tab. You can base the archiving strategy for an Exchange Mailbox Policy on one of the following:

296

Customizations and best practice Mailbox archiving strategies

Age: items are archived when they have not been modified for the time that you specify. The age of a mail message is taken from the date when it was received or sent. The age of a document is taken from the date when it was last modified. Quota: archiving keeps a percentage of each user's Exchange mailbox storage limit free. Age and quota: Enterprise Vault performs age-based archiving first. If age-based archiving does not make the required percentage of mailbox storage limit free, quota-based archiving continues until the required percentage is reached.

Archiving based on age and archiving based on quota or age and quota are the main strategies for selection of items to archive. You can also configure the policy so that Enterprise Vault archives large items first. Archiving large items first operates in addition to the main archiving strategy. Archiving large items first has the following advantages:

Initial archiving performance is improved. Mailbox space is recovered by archiving relatively few items.

You can also select the following options:

Items younger than an age that you specify are never archived. Only messages with attachments are archived.

Notes on archiving based on age

Archiving based on age is the default archiving strategy. When you configure archiving based on age, the following recommendations apply:

Consider a policy that uses the setting "Start with items larger than" so that archiving has the greatest benefits early on. Larger, less frequent runs make backups easier. For example, it is easier to do one large run on Friday and then a full backup of the Enterprise Vault system than daily archives and backups.

Notes on archiving based on quota or age and quota

You can choose archiving based on quota on its own, or as part of the archiving by age and quota option. The same configuration and best practice considerations apply.

Customizations and best practice Mailbox archiving strategies

297

You need to decide first whether you need to base archiving on quota. The default strategy of archiving based on age is more efficient, and avoids the possibility of archiving too many items. Consider archiving based on age and quota when archiving by age only or quota only do not give the results you want. When archiving is based only on age, it may not archive enough items to keep some mailboxes within their quota. When archiving is based only on quota, some mailboxes may not come close to the Exchange mailbox storage limit. In this case, Enterprise Vault does not even archive older items. Enterprise Vault calculates the amount of data it needs to archive to achieve the quota percentage target. It bases the calculation on estimates of the size of shortcuts. The estimates take account of any items that already have a status of pending archive. For information about how the estimates are calculated, see the following TechNote on the Enterprise Vault Support Web site: http://www.symantec.com/docs/TECH64654 You can use the following registry values to override the values that Enterprise Vault uses in the shortcut size estimates:

ShortcutCalcAverageBodySize ShortcutCalcBannerSize ShortcutCalcBaseItemSize ShortcutCalcBodySizeMultiplier ShortcutCalcOverride ShortcutCalcRecipientSize

See Enterprise Vault Registry Values. See Recommendations for quota-based archiving on page 297.

Recommendations for quota-based archiving

When you configure archiving based on quota, or on age and quota, consider the recommendations given here. These recommendations help you to avoid setting the quota percentage too high for your Enterprise Vault configuration. If the quota percentage is too high, Enterprise Vault may archive too many items as it tries to achieve the quota target. The recommendations are as follows:

Review your shortcut settings and consider using smaller shortcuts. With smaller shortcuts, Enterprise Vault saves more space in a mailbox for each

298

Customizations and best practice Mailbox archiving strategies

item that it archives. The result is that Enterprise Vault needs to archive fewer items to achieve the percentage of free space that you require. If you use large shortcuts when the average item is small, Enterprise Vault saves less space for each item that it archives. To find out the average shortcut size, run the Exchange Mailbox Archiving task in Report run mode. You specify the settings that determine what information is left in a shortcut on the mailbox policy Shortcut Content tab.

Consider making shortcuts expire earlier. When shortcuts expire earlier, you save mailbox space and avoid archiving too many items. You set the age at which Enterprise Vault deletes shortcuts on the mailbox policy Shortcut Deletion tab. Specify that Enterprise Vault starts by archiving large items. Enterprise Vault then archives items that use the most mailbox space first. Start with a low quota percentage, and increase it gradually until you get the results you require. Make sure that there is enough archiving each night so that users have sufficient space for the following day. Check the mailbox policy Advanced settings Archivedeleteditems and Archive Exchange Managed Folders. Items in the Deleted Items folder are included in the Exchange Server mailbox storage limit calculation. By default Enterprise Vault does not archive items from the Deleted Items folder. So items in the Deleted Items folder can prevent Enterprise Vault from reaching the quota percentage target. Managed folders are also included in the Exchange Server mailbox storage limit calculation. By default Enterprise Vault archives from managed folders, but you can configure it so that it does not archive from managed folders. In this case, Enterprise Vault may not be able to achieve the quota percentage target. Check the mailbox policy Advanced setting Strip attachments to non-shortcut items. By default, Enterprise Vault removes attachments from calendar, meeting, task, and contact items after it archives these items. If attachments are not removed from these items, then archiving them does not save space in the mailbox.

Further points to note are as follows:

If no Microsoft Exchange storage limit applies to a mailbox, Enterprise Vault cannot process the mailbox with quota-based archiving. In Exchange, you can specify the maximum space that a mailbox can occupy before the user is prohibited from sending or receiving messages. If you archive

Customizations and best practice Mailbox archiving strategies

299

by quota and this storage limit has been exceeded, then Enterprise Vault cannot process the mailbox with quota-based archiving. The solution is to remove or raise the limit, archive until a suitable storage level is reached, and then reimpose the limit if necessary. Enterprise Vault normally keeps users within quota, so you may decide to remove the limit.

Notes on configuring archiving based on age and quota with a script

You can use an Enterprise Vault Policy Manager script to configure your archiving strategy for a mailbox. For information about Policy Manager, see the Utilities Guide. An example script is shown here. This script applies settings for archiving based on age and quota to a mailbox. It also configures a special folder to override the mailbox-level settings. The first part of the script configures the mailbox as follows:

Archive items that are older than three months. Archive items that are larger than 4 MB immediately. If necessary, continue quota-based archiving until 30% of the mailbox storage limit is free. Quota-based archiving starts with any items that are larger than 1 MB and more than one day old. Create shortcuts, and delete the original items.

The second part of the script configures a mailbox folder that is named \Inbox\Special Project as follows:

Archive items that are older than 0 days. Do not create shortcuts, and delete the original items.

You might want to configure a special folder as shown here as an alternative to manual archiving. Users can move items into the folder, and Enterprise Vault automatically archives the items soon afterwards. The example script is as follows:
[directory] directorycomputername=evserver sitename=evsite [mailbox] distinguishedname=/o=First Organization/ou=First Administrative Group/ cn=Recipients/cn=recipient_1

300

Customizations and best practice Mailbox archiving strategies

; Using Age & Quota based archiving ; [filter] name=AGEANDQUOTA ; Quota settings ; Archive to 30% of quota is available ; Start with large items >1MB that are more than 1 day old UsePercentageQuota=true PercentageQuota=30 UseInactivityPeriod=true QMinimumAgeThresholdPeriod=1 QMinimumAgeThresholdUnits=Days QPrioritizeItemsOver=1024 QPrioritizeLargeItems=true ; Age settings ; Archive all items older than 3 months ; Archive all items >4MB immediately. UseInactivityPeriod=true InactivityPeriod=3 InactivityUnits=Months ALargeItemThresholdPeriod=0 ALargeItemThresholdUnits=Days APrioritizeItemsOver=4096 APrioritizeLargeItems=true ; Create shortcuts and delete the original item ; CreateShortcut=true DeleteOriginal=true ; Do not archive unread items Unreadmail=false ; Special case zero day folder to override Age & Quota settings ; [filter] name=ZeroDaysNoShortcut ; Archive Items after 0 days, delete the original and ; do not leave a shortcut

Customizations and best practice Mailbox archiving strategies

301

; UseInactivityPeriod=true UsePercentageQuota=false InactivityPeriod=0 InactivityUnits=Days CreateShortcut=false DeleteOriginal=true Unreadmail=true ; Set the mailbox to use Age & Quota based archiving as ; defined in the policy above ; [folder] name=MailboxRoot filtername=AGEANDQUOTA Overridearchivelocks=true ; Apply the ZeroDaysNoShortcut policy to a special project folder ; [folder] name=\Inbox\Special Project filtername=ZeroDaysNoShortcut Overridearchivelocks=true

Notes on archiving items from Exchange managed folders

Exchange Server 2010 and Exchange Server 2007 let you set up Exchange managed folders and apply managed content settings to them. The managed content settings let you control the retention of items of the specified message class. Enterprise Vault can apply special retention categories to items that it archives from managed folders. These managed folder retention categories are based on settings that are synchronized from Exchange managed content settings. Managed folder retention categories are created and updated automatically. They have a different icon and different properties from normal retention categories. You can change the name and description of a managed folder retention category, but not its retention period. Synchronization with Exchange managed content settings prevents Enterprise Vault managed folder retention category settings from conflicting with the managed content settings. For example, the managed content settings may specify that items in the managed folder are deleted after 180 days. If synchronization with managed content settings is active, Enterprise Vault automatically creates a managed folder retention category. Enterprise Vault gives the managed folder retention category the same

302

Customizations and best practice Mailbox archiving strategies

name as the managed content settings. Enterprise Vault sets the retention period so that archived items expire at the same time that they are due to expire from Exchange. In the Enterprise Vault Exchange mailbox policy, the advanced setting Archive Exchange Managed Folders controls whether Enterprise Vault archives items from managed folders. The possible values of Archive Exchange Managed Folders are as follows:
Off Enterprise Vault does not archive items from managed folders. Users cannot archive items manually from managed folders. Enterprise Vault treats managed folders in the same way as any other folder. Default value. Enterprise Vault archives items from managed folders and uses managed folder retention category settings that are synchronized from Exchange.

Normal

Managed

The Enterprise Vault Exchange Provisioning task performs the synchronization with Exchange managed content settings. Synchronization is automatic when there is an Exchange 2010 or Exchange 2007 server in the domain. So the Exchange Provisioning task performs synchronization and creates managed folder retention categories even if you have not set Archive Exchange Managed Folders to Managed. If synchronization fails, it causes the entire Provisioning task to fail. To prevent synchronization, you can place a configuration file in the Enterprise Vault server installation folder. See Preventing synchronization with Exchange managed folders on page 305. When archiving from managed folders is active, users of the Enterprise Vault Outlook Add-In see the following:

They cannot specify a retention category or an archive when they archive items manually from managed folders. The Enterprise Vault tab on the folder properties dialog box does not include the Change option. Enterprise Vault always creates shortcuts and deletes the original items.

Enterprise Vault auditing records details of creation, modification, and deletion of Exchange managed content settings. See Requirements for synchronized archiving from Exchange managed folders on page 303.

Customizations and best practice Mailbox archiving strategies

303

See Configuring auditing on page 316.

Requirements for synchronized archiving from Exchange managed folders

To archive items from an Exchange managed folder and synchronize managed content settings with a managed folder retention category, all the following conditions must apply:

In the Enterprise Vault Exchange mailbox policy, the advanced setting Archive Exchange Managed Folders must be set to Managed. The item's message class must match the Message type setting in one set of managed content settings that are defined for the managed folder. (In Exchange, you can define multiple sets of managed content settings for a single managed folder. Each set of managed content settings can specify a different message type.) The managed content settings must define the action to take at the end of the retention period as Delete and Allow Recovery or Permanently Delete. The Enterprise Vault filter that applies to the managed folder must be the system default. See Setting the system default filter on Exchange managed folders on page 303. The Vault Service account must have the Exchange View-Only Administrator role assigned to it. For details of how to assign this role, see Installing and Configuring Enterprise Vault.

See Notes on archiving items from Exchange managed folders on page 301. See Preventing synchronization with Exchange managed folders on page 305.

Setting the system default filter on Exchange managed folders

One requirement for synchronizing managed content settings is that the Enterprise Vault filter applied to the managed folder must be set to Use the system default. If the filter on a managed folder is set to Use custom settings, Enterprise Vault does not apply managed content settings. Custom settings on a managed folder may be inherited, or set with Enterprise Vault Policy Manager. If necessary, you can use the PowerShell cmdlet Remove-EVExchangeFolderPolicy to remove all existing custom settings from managed folders. You can then use Policy Manager to set managed folders to use the system default filter. For information about Policy Manager, see the Utilities Guide.

304

Customizations and best practice Mailbox archiving strategies

To remove Policy Manager policies from managed folders

1 2

Click Start > Programs > Enterprise Vault > Enterprise Vault Management Shell. In the Enterprise Vault Management Shell window, enter the following command if you want to see detailed help for Remove-EVExchangeFolderPolicy:
Get-Help Remove-EVExchangeFolderPolicy -detailed

Enter the Remove-EVExchangeFolderPolicy command with the required parameters. For example:

To remove any Enterprise Vault filter settings from managed folders in a mailbox, enter the following command:
Remove-EVExchangeFolderPolicy -PrimarySMTPAddress user_name@domain -ManagedFolders

where user_name@domain is the name of the mailbox.

If the managed folders are on Exchange Server 2010, you can run the following script to remove any Enterprise Vault filter settings from managed folders in all mailboxes on a specified Exchange Server 2010. On the Enterprise Vault server, the installed version of Windows PowerShell must be at least Windows PowerShell 2.0. Run the script in the Enterprise Vault Management Shell window.
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://Exchange_server/PowerShell/ -Authentication Kerberos -Credential Exchange_administrator Import-PSSession $Session -CommandName Get-Mailbox $UserList = Get-Mailbox | where-object{$_.ServerName -like "Exchange_server"} foreach($Entry in $UserList) {$Address = $Entry.PrimarySMTPAddress; Remove-EVExchangeFolderPolicy -PrimarySMTPAddress $Address}

where Exchange_server is the name of the Exchange Server 2010, and Exchange_administrator the name of the Exchange administrator account.

Customizations and best practice Mailbox archiving strategies

305

To set a managed folder to use the system default filter

Create a Policy Manager initialization file that contains the following [Folder] section:
[Folder] NAME=\Managed Folders\managed_folder filtername = systemdefault overridearchivelocks=true

where managed_folder is the name of the managed folder that you want to use the system default filter.

Run Policy Manager with the initialization file.

See Requirements for synchronized archiving from Exchange managed folders on page 303.

Preventing synchronization with Exchange managed folders

The Enterprise Vault Exchange Provisioning task performs synchronization with managed folders. The task checks for Exchange 2010 and Exchange 2007 servers in the domain. The task also checks for new managed folders, and for new or changed managed content settings in existing managed folders. You can prevent the Exchange Provisioning task from synchronizing with managed folders by using a configuration file in the Enterprise Vault server installation folder. The configuration file setting that is described in this section only prevents synchronization with managed folders and their managed content settings. Enterprise Vault does not create new managed folder retention categories, or update existing managed folder retention categories. Archiving from managed folders continues if the necessary conditions apply. You may want to prevent or temporarily suspend synchronization in the following circumstances:

You have problems with synchronization, possibly because permissions on the Exchange server are not set correctly. You do not require Enterprise Vault to synchronize managed content settings with managed folder retention categories.

306

Customizations and best practice Mailbox archiving strategies

To prevent synchronization with managed folders

In the Enterprise Vault installation folder, take a backup copy of the file, EvExchangePolicySyncTask.exe.config. The installation folder is typically C:\Program Files (x86)\Enterprise Vault. Open the file with a text editor. Add the following lines to the <configuration> section in the file:
<appSettings> <add key="SkipManagedFolderSynch" value="true" /> </appSettings>

2 3

4 5

Save and close the file. The change will take effect the next time the Exchange Provisioning task runs.

Archiving items only if they have attachments

Enterprise Vault can be configured so that a mailbox or public folder item is archived only if the item has an attachment, assuming all other archiving criteria are met. This is not the same as archive attachments only. The advantages of archiving only items with attachments are as follows:

A significant performance improvement, since many fewer items are being archived. Fewer problems generally, because fewer items are being archived. For example, users open fewer archived items, there are fewer problems archiving items, and so on. Normally, using the "leave cover note text" option means Exchange store growth for messages without attachments. However, if you set this and also configure Enterprise Vault to archive items only if they have attachments, then Enterprise Vault leaves cover note text only for items that do have attachments. This means that there is always a space gain.

The disadvantages of archiving only items with attachments are as follows:

You cannot use this method if you are archiving for legal reasons because you cannot be sure of what will be archived. Users will not be sure of where to find older items. Should they search in the mailbox or in Enterprise Vault? Such a policy may be harder for users to understand than a simple age-based one.

Customizations and best practice Mailbox archiving strategies

307

Note: If you decide to archive only items with attachments, consider having occasional archiving runs with it turned off and with an age-based policy of, say, two years. This ensures that any really old items are eventually archived, even though they have no attachments. This frees space in the Exchange database. You could do this using, for example, a simple, scheduled SQL script running once each month. To enable archiving only items with attachments

1 2 3 4 5 6 7 8

Start the Administration Console. In the left pane, expand the vault site. Expand Policies and then Exchange. Click the Mailbox container. In the right pane, double-click the Exchange Mailbox Policy you want to modify. Click the Archiving Rules tab. Select Archive messages with attachments only. Click OK.

How to customize the Enterprise Vault settings for a journal mailbox

You can customize the journal mailbox so that items are archived to different archives and with different retention categories. By default, Enterprise Vault uses the same archive and retention category for every item that is archived from a journal mailbox. If this is not what you want, you can customize the journal mailbox and send items to different archives with different retention categories. You can override the parent folder settings by changing the Enterprise Vault properties for a folder. If a folder contains other folders then, by default, those folders inherit the properties of the parent folder. However, you can change the settings for individual folders. By default, all folders in the journal mailbox have the Enterprise Vault property Use Parent Folder Settings selected. This means that all folders inherit the same settings, retention category, and archive that are set up for the journal mailbox. Until you change the values for a particular folder, Enterprise Vault archives all items with the same retention category and stores them in the same archive. To modify the settings, use Microsoft Outlook or Microsoft Exchange Client to do the following:

308

Customizations and best practice Mailbox archiving strategies

Define rules to redirect mail to the appropriate folders within the journal mailbox. The Exchange Journaling task will then archive items from those folders. Set the mailbox and folder properties in the journal mailbox.

The journal mailbox is enabled with the following settings:

Vault: from the Journal Mailbox Target properties Retention Category: from the Journal Mailbox Target properties

The following tables list the Enterprise Vault settings that you can change to modify the behavior of the Exchange Journaling task, together with those that the Exchange Journaling task ignores. Table 20-1 Setting
Vault Retention Category Do not archive this folder Archive items older than

Journal mailbox settings Comment

Can be changed from the default. Can be changed from the default. Ignored. Ignored (always 0 days).

Table 20-2 Setting

Vault

Journal mailbox folder settings Comment

Overrides parent folder Overrides parent folder Ignored (uses mailbox settings)

Retention Category All other settings

Table 20-3 Setting

Journal mailbox message settings Comment

Ignored Ignored (uses folder setting)

Do not archive this item Retention Category

Disabling archiving for mailboxes

There may be occasions when you want to disable archiving for a mailbox. If you disable archiving for a mailbox, you can later enable it again at any time.

Customizations and best practice Public folder archiving best practice

309

To disable archiving for one or more mailboxes

1 2 3 4 5 6

In the left pane of the Administration Console, expand Enterprise Vault Servers. Expand the name of the computer that runs the Exchange Mailbox task. Click Tasks. In the right pane, click the Mailbox Archiving task. On the Tools menu, click Disable Mailboxes. When the Disable Mailbox wizard starts, follow the on-screen instructions to select the mailboxes that you want to disable.

Public folder archiving best practice

When setting up Public Folder archiving, consider the following:

When you specify a public folder root path then, by default, all folders underneath that path are archived. If you want a setting to be applied to a whole section of a public folder tree, use Enterprise Vault Policy Manager. An Exchange Public Folder task takes its settings from the site that the Exchange Public Folder task is in and applies those settings to every folder under its root path. If you change any archiving policy using Outlook, the change applies only to that folder, even if the folder is the root path. So, for example, you could have three root paths archived under one site and you want to change the policy for one of those paths. You could use the Enterprise Vault folder properties in Outlook. However only that folder and not its subfolders will have the new archive policy. If you want to have folder policy inheritance you must use Policy Manager to set up the policy. Policy Manager will set the new policy on all subfolders. Any new public folder is archived using the site settings until you change the settings for that folder. The new folder does not inherit any settings from its parent. For example, if you set a particular part of the public folder tree as Do Not Archive, any new folder created in there will archived until you change its settings. The same is true for a folder move. To correct this you would run Policy Manager every day to ensure that the correct folder policies are being applied. If you use Policy Manager to apply settings to a folder and its subfolders, Policy Manager applies those settings to all folders underneath the folder you specify.

310

Customizations and best practice About performance tuning

So, for example, if there is a lower-level folder that has a different policy, you need to run Policy Manager to reapply the correct policy to the lower-level folder. For a complicated folder hierarchy you can may have a Policy Manager entry for each folder. To be safe youd have a policy setting that archives only very old items, perhaps as old as 10 years. By doing this you turn off archiving for new folders that have not yet had a Policy Manager policy applied to them.

"Default" access permissions are not applied to vaults. Thus, anyone accessing a shortcut in a Public Folder using the default permission cannot access archived items. However, using a registry entry you can configure View online so that there is no permission check for public folders. This means that anyone with access to the shortcut has access to the archived item. It is best to make Enterprise Vault archive the home server for the public folder because this reduces complications of replication and bandwidth. However, this might mean that you need extra Enterprise Vault servers. If there is public folder replication then, when a user opens a shortcut, View Online goes to the vault server where the item is located. To view items, a users mailbox must be enabled for Enterprise Vault archiving. Consider where users may be when viewing these archived items in Public Folders. Will those users have Enterprise Vault? Will their mailboxes be enabled?

About performance tuning

Knowing how well Enterprise Vault is performing helps you decide whether it is necessary to change the configuration by adding or moving components, or by modifying existing components. Hierarchical Storage Management (HSM) software, if available, may provide the following information to help you improve the performance of Enterprise Vault:

The time newly-archived items wait to be backed-up. If this is too long, the Archiving Agent and the Storage service will have many uncompleted archive requests. The time newly-archived items wait to be moved to offline storage. If this is too short, and items are being moved offline quickly, then more recalls from offline storage may be generated. The number of times an archived item is restored from online storage. If too many items are being restored too many times, they may be being archived too soon. If the same items are being continually transferred between the Microsoft Exchange Server store and Enterprise Vault, you may need to increase

Customizations and best practice About performance tuning

311

the size of the Microsoft Exchange Server message store relative to the size of the Enterprise Vault online store.

The number of times an archived item is recalled from offline storage. If too many items are being recalled too many times, the online storage area may be too small. The time taken to recall items from offline storage. This time is dependent on the HSM but can be used to give Enterprise Vault users expected recall times.

Moving the Windows Temp folder

Enterprise Vault services write temporary files to the Windows Temp folder. If the Temp folder is on the system disk, this can cause the following problems:

There may not be much space on the system disk. This means that Enterprise Vault services may stop because they have run out of temporary storage space. Performance may be affected because of the access needed to both system files and temporary files.

We recommend that, on every computer that is running an Enterprise Vault service, you move the Windows Temp folder to a disk other than the system disk. To move the Windows Temp folder

1 2 3 4 5 6 7 8 9

Log on as the Vault Service account. Create the new Temp folder that you are going to use. On the Windows desktop, right-click My Computer and then click Properties. Click the Advanced tab and then click Environmental Variables. In the User variables section, click the TEMP variable. Modify the value so that it points to the new folder that you created. In the User variables section, click the TMP variable. Modify the value so that it points to the new folder that you created. Click OK.

10 Restart the computer.

Improving performance on Storage service computers

This section includes the following topics:

How to control content conversion How to deal with items that stay a long time on the Archive Queue

312

Customizations and best practice About performance tuning

How to exclude items from content conversion

How to control content conversion

Enterprise Vault converts Microsoft Excel and Microsoft Word documents to HTML. If Enterprise Vault performs many such conversions, or if the documents are complex, you may suffer performance problems. In such cases, you can significantly improve performance by making Enterprise Vault convert the documents to text instead of HTML. Enterprise Vault provides the following registry values with which you can use control whether Enterprise Vault converts documents to text instead of HTML:

To convert Excel documents to text instead of HTML, set the following registry key to 1:
HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault \ConvertExcelToText

To convert Word documents to text instead of HTML, set the following registry key to 1:
HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault \ConvertWordToText

To list a number of file types that must be converted to text, edit the following registry key:
HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault \TextConversionFileTypes

This registry key contains a list of file types, separated by periods, of the file types that are converted to text. The list must end in a period. For example, if the list is currently .PPT.POT.PPS.ZIP. and you want to add file type XYZ, you would change the list to the following:
.PPT.POT.PPS.ZIP.XYZ.

Customizations and best practice About performance tuning

313

How to deal with items that stay a long time on the Archive Queue
One reason for items to stay on the Microsoft Message Queue Enterprise Vault Storage Archive queue for a long time is that they really are taking a long time to be converted. When the maximum time for the conversion is reached, the item is archived but no HTML version is created. The item is archived and a message is written to the Windows Application Event Log. If many items are taking longer than the default 10 minutes allowed, you can change the timeout value. To change the timeout, edit the following registry key:
HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault \ConversionTimeout

The units for this key are minutes.

How to exclude items from content conversion

If you decide that some types of items are causing problems when they are being converted, you can exclude them from being converted. The item attributes are indexed in the usual way and the item is archived in its native format but not converted to HTML. The user will not be able to preview an item that has not had its content converted to HTML. To exclude items from conversion, add the item's file extension to the following registry key:
HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault \ExcludedFileTypesFromConversion

The format for the key is as follows:

.filetype[.filetype].

For example, to exclude *.JPG and *.CAD files from conversion, set the key to the following:
.JPG.CAD.

The registry key lists all the file types that are not currently converted.

314

Customizations and best practice About performance tuning

Chapter

21

Auditing
This chapter includes the following topics:

About auditing Creating the auditing database Configuring auditing Viewing the audit log Tuning auditing

About auditing
Enterprise Vault auditing records activity in a number of different categories. All auditing is disabled by default, but you can enable it and specify the categories that you want to audit. The auditing database can optionally be on a computer that is running Enterprise Vault services. However, it must be hosted by the same SQL Server as the Enterprise Vault Directory database. The process of setting up auditing is as follows:

Create the auditing database. Configure auditing on each Enterprise Vault server.

The following sections describe these activities in detail.

Creating the auditing database

This section describes how to use the Administration Console to create the auditing database. If, having created the database, you ever want to roll over to a new

316

Auditing Configuring auditing

database, you cannot use the Administration Console to do so; see the support article How to rollover an auditing database for instructions. To create the auditing database

1 2 3 4 5 6 7 8 9

In the left pane of the Administration Console, right-click the Enterprise Vault Directory and then, on the context menu, click Enable Auditing. Under Audit Database location, click Browse to display the available locations for the auditing database. If you want to create a new folder for the auditing database, click New Folder. Click the location to use for the auditing database, and then click OK. Under Transaction log location, click Browse to display the available locations for the auditing database transaction log. If you want to create a new folder for the transaction log, click New Folder. Click the location to use for the log, and then click OK. Click OK to close the Configure Auditing dialog box. Wait a few moments for Enterprise Vault to create the database. auditing database, click OK to dismiss the message.

10 When Enterprise Vault displays a message confirming that it has created the

Configuring auditing
Enterprise Vault auditing records data in a number of different categories. You can specify whether auditing is enabled or disabled for each category. All categories can record summary audit data, but some can also record detailed data. To configure auditing

1 2 3 4

In the Administration Console, expand the tree in the left pane until the Enterprise Vault Servers container is visible. Click the Enterprise Vault Servers container. Right-click the computer whose auditing you want to enable or disable and then, on the context menu, click Properties. Click the Auditing tab.

Auditing Configuring auditing

317

If you want to enable or disable all auditing, check or uncheck Audit entries based on the following categories. Otherwise, check or uncheck the required audit categories.
View Records details of viewing archived items, either as HTML or in their original formats. Records details of archived items being manually deleted. Enterprise Vault does not audit deletions that result from expiry. Records details of archived items being restored. Records details of items being archived, either manually or on a scheduled run. Records details of items being migrated from PST files. Records details of items being migrated from NSF files. Records details of configuration changes made in the Administration Console, such as adding a new service, creating archives, or enabling mailboxes. Records details of searches performed using Outlook or the Web Access application, including the terms used and the number of items found. Records details of document retrieval into SharePoint Portal Server. (For support use only.) Records whether a saveset file is available. Ignored in this version of Enterprise Vault. Records details of your own auditing entries, which you can add by calling a COM object that is served from the Admin Service. See below for VBS and ASP examples of how to do this. Records details of viewing archived items from within SharePoint Portal Server. Records details of storage events from File System Archiving. Any Domino archiving activity. Any Domino restore activity.

Delete

Restore Archive

PST Migration NSF Migration Admin Activity

Advanced Search

Get Online XML

Saveset Status

SPS Archive User

View Attachments

FS Archive Domino Archive Domino Restore

318

Auditing Configuring auditing

Exchange Synchronization

Records details of creation, modification, and deletion of Exchange managed content settings. Enterprise Vault records relevant details when it is configured to archive from Exchange managed folders and to synchronize with their managed content settings. Records the saveset ID and source and destination folders of archived items being moved to a different mailbox folder. Records details of changes to the retention category of archived items. Records the creation and modification of subtasks, such as the subtasks that control Move Archive operations. Records details of individual Move Archive operations. Records when deleted items are recovered using the option Recover items on the Deleted Items tab of archive properties. Shortcuts recovered using FSAUndelete utility are also recorded.

Archive Folder Updates Retention Category Updates Subtask Control

Move Archive Undelete

6 7

Click OK to save the changes you have made. Restart the services on the computer.

How to record details of your own auditing entries

You can record details of your own auditing entries by calling a COM object that is served from the Admin Service. The following examples show how to do this.

VBS example (auditing entries)

' ' Script to add data to the audit log via the use of WScript - the ' root object of the Windows Script Host object model hierarchy. ' The Admin Service must be started on the current computer. ' ' Run this script by typing the following: ' WScript.exe Audit.vbs ' CScript.exe Audit.vbs ' Dim AuditIt ' Echo a line to the console stating that we are about to add an ' entry to the audit log. WScript.Echo "About to add an entry to the audit log"

Auditing Configuring auditing

319

' Create an instance of the Audit COM object that is served by the ' Admin Service. The id of the object is AdminService.EVAdminAudit. Set AuditIt = WScript.CreateObject("AdminService.EVAdminAudit") ' Audit the following values to the audit log. ' Parameter one is the category of the operation. ' Parameter two is the sub category ' Parameter three is the identifier of the object being audited. ' Parameter four is the status of the operation. ' Parameter five is the field to add any information required. ' AuditIt.Audit "Test Category", "Test Sub Category", "ObjectId", "SUCCESS", "Info" WScript.Echo "Finished the audit."

ASP example (auditing entries)

<%@ LANGUAGE = VBScript %> <% Option Explicit %> <!-Run this script by placing it in a virtual directory called, for example, Test, and then using a URL http://localhost/test/Audit.asp --> <% Dim AuditIt Response.Write "Starting " ' Echo a line to the console stating that we are about to add an ' entry to the audit log. Set AuditIt = Server.CreateObject("AdminService.EVAdminAudit") ' Audit the following values to the audit log. ' Parameter one is the category of the operation. ' Parameter two is the sub category. ' Parameter three is the identifier of the object being audited. ' Parameter four is the status of the operation. ' Parameter five is the field to add any information required. ' AuditIt.Audit "Test Category", "Test Sub Category", "ObjectId", "SUCCESS", "Info" Response.Write "Completed" %>

320

Auditing Viewing the audit log

Viewing the audit log

Enterprise Vault comes with the Audit Viewer utility, which lets you view and filter the data that is logged in the auditing database. For more information on Audit Viewer, see the Utilities Guide. You can also view the audit log by following the instructions below. To view the audit log

1 2 3

On the Windows Start menu, click All Programs > Microsoft SQL Server > Query Analyzer. At the top of the SQL Query Analyzer window, select the EnterpriseVaultAudit database. Type the following command in the Query window:
SELECT * FROM EVAuditView ORDER BY AuditDate DESC

Press F5 to run the command.

Tuning auditing
Each computer on which you enable auditing has a limited number of connections that it can make to the auditing database. These connections are reused as needed. Auditing uses a pool of connections to the auditing database. You can make Enterprise Vault log the level of usage of these connections and then, if necessary, you can modify the number of connections as required. To turn connection information logging on or off

1 2 3 4 5 6 7 8

In the Administration Console, expand the tree in the left pane until the Enterprise Vault Servers container is visible. Click the Enterprise Vault Servers container. Right-click the computer whose logging you want to enable or disable and then, on the context menu, click Properties. Click the Auditing tab. Click Advanced. Check or uncheck Log database information to turn logging on or off. Click OK. Restart the Enterprise Vault services on the computer.

Auditing Tuning auditing

321

Modifying the number of connections when auditing

When an Enterprise Vault service that has auditing turned on stops, it logs an event that shows the number of connections it used and the maximum number of connections available to it. You can use this information to decide whether to change the connection pool sizes. To change the connection pool sizes

1 2 3 4 5 6 7 8

In the Administration Console, expand the tree in the left pane until the Enterprise Vault Servers container is visible. Click the Enterprise Vault Servers container. Right-click the computer whose logging you want to enable or disable and then, on the context menu, click Properties. Click the Auditing tab. Click Advanced. Set the number of connections for each Enterprise Vault service. Click OK. Restart the Enterprise Vault services on the computer.

322

Auditing Tuning auditing

Chapter

22

Backing up Enterprise Vault

This chapter includes the following topics:

About Enterprise Vault backups About Enterprise Vault backup mode Backup of Enterprise Vault data About backup mode cmdlets Generating PowerShell backup commands for your environment Using PowerShell cmdlets in backup scripts

About Enterprise Vault backups

Enterprise Vault requires an effective backup strategy to prevent data loss, and to provide a means for recovery in the event of a system failure. When you plan this strategy, remember that Enterprise Vault components can be distributed across multiple systems. The resources on which Enterprise Vault depends may be remote from Enterprise Vault services and tasks. This section describes:

Enterprise Vaults backup mode which lets you place vault stores and index locations in backup mode while you take backups. The databases you must back up. The data locations and index locations you must back up. The use of Enterprise Vaults backup mode PowerShell cmdlets in your backup scripts.

For additional information about Enterprise Vault backups, see the following technical note on the Enterprise Vault Support Web site:

324

Backing up Enterprise Vault About Enterprise Vault backup mode

http://www.symantec.com/docs/TECH172279

About Enterprise Vault backup mode

Enterprise Vault lets you place vault stores and index locations in backup mode for the duration of a data backup. Enterprise Vault does not write any data into vault store partitions or index locations while they are in backup mode. However, services to users are maintained while vault stores and index locations are in backup mode. Users can continue to search, and retrieve items from their archives. You can set backup mode on vault stores and index locations in the Enterprise Vault administration console. When your backup is complete, you can use the administration console to clear backup mode. You can also use PowerShell cmdlets in the Enterprise Vault Management Shell to set, clear, and report on vault store and index location backup mode. When you use the PowerShell cmdlets to set and clear backup mode, Enterprise Vault maintains a count of the number of requests for each vault store and index location to support the use of concurrent backup scripts. See About backup mode cmdlets on page 328. To manage backup mode on vault stores, your user account must be assigned the storage administrator role. To manage backup mode on index locations, your user account must be assigned the power administrator role. See Roles-based administration on page 24. In the administration console, you can set and clear vault store backup mode in the following places:

The context menu on the Enterprise Vault site The context menu on any vault store group The context menu on any vault store

You can set and clear index location backup mode in the following places:

The context menu on the Enterprise Vault site The context menu on any Enterprise Vault server The index service properties page

When you set and clear backup mode on index locations and vault stores, events are written to the Enterprise Vault event log. The indexing service also writes an event when it starts, if any index locations are in backup mode. This event lists all the index locations that are in backup mode.

Backing up Enterprise Vault Backup of Enterprise Vault data

325

The following examples show how to use backup mode in the administration console. The first example is a procedure to set backup mode on all the vault stores in a vault store group. The second example is a procedure to find the current backup mode settings for index locations on a server called EVServer.domain1.local. To set backup mode on all the vault stores in a vault store group

1 2

In the left pane of the administration console, expand the Vault Store Group container. Right-click the vault store group whose vault stores you want to place in backup mode, and click Set State > Set Backup Mode on all Vault Stores.

The Backup Mode column in the right pane now shows that backup mode is set on all the vault stores in the vault store group. To see the current backup mode settings for index locations, and to change these settings

1 2 3 4

In the left pane of the administration console, browse to Enterprise Vault Servers > EVServer.domain1.local > Services. In the right pane, right-click Enterprise Vault Indexing Service and click Properties. Click the Index Locations tab. The Backup Mode column shows the current backup mode settings for all the index locations on the server. You can change the setting for any of these locations.

Backup of Enterprise Vault data

You must back up the following Enterprise Vault data and databases:

Enterprise Vault system databases backup Fingerprint databases backup Vault store partitions and vault store databases backup Backing up index locations

Enterprise Vault system databases backup

To make a complete Enterprise Vault system backup, you must back up the following system databases:

326

Backing up Enterprise Vault Backup of Enterprise Vault data

EnterpriseVaultDirectory. You must back up this database immediately

after you back up one or more vault store databases. See Vault store partitions and vault store databases backup on page 326.

EnterpriseVaultMonitoring EnterpriseVaultAudit, if you have enabled Enterprise Vault auditing.

Each FSA Reporting database you have set up, if you use FSA Reporting.

The following document on the Symantec support web site describes procedures which you can use to back up your Enterprise Vault SQL databases if you do not use a third party SQL backup tool: http://www.symantec.com/docs/TECH74666 Note: Every Enterprise Vault server must also have a complete system and file backup. This backup must include the registry because all Enterprise Vault services store information in the registry. You should consider taking this system and file backup at the same time you back up the Enterprise Vault system databases.

Fingerprint databases backup

Each vault store group usually has a fingerprint database which holds the data that enables Enterprise Vault single instance storage. Each fingerprint database is called EVVSG_vaultstoregroup_n_m, where vaultstoregroup is the name of the vault store group with its spaces removed. n and m are internally generated integers. You should also set backup mode on the corresponding vault store group, and back up all its vault stores at the same time you back up the fingerprint database. See About Enterprise Vault backup mode on page 324. The following document on the Symantec support web site describes procedures which you can use to back up your Enterprise Vault SQL databases if you do not use a third party SQL backup tool: http://www.symantec.com/docs/TECH74666

Vault store partitions and vault store databases backup

Each vault store has a database which is called EVvaultstore_n, where vaultstore is the name of the vault store with its spaces removed, and n is an internally generated integer. Back up the vault store databases at the same you back up the vault store partitions.

Backing up Enterprise Vault Backup of Enterprise Vault data

327

Note: After you back up a vault store database or back up a group of vault store databases, immediately back up the directory database (EnterpriseVaultDirectory). Before you back up the vault store databases and vault store partitions, place the vault stores in backup mode. See About Enterprise Vault backup mode on page 324.

Removal of Enterprise Vault safety copies after backup

When Enterprise Vault detects that a vault store partition has been backed up, it is free to remove the safety copies of the items it archived previously. Enterprise Vault can detect that partitions have been backed up by inspecting the archive attribute on individual files if your backup software clears the archive attribute after backup. Alternatively, can use a trigger file mechanism. For more information about the relationship between backup software and the detection of partition backups, see About Enterprise Vault safety copies in Installing and Configuring.

Backing up index locations

Each Enterprise Vault indexing service can store its indexes in multiple locations, and you must back up all these locations. On each Enterprise Vault server, the index locations are listed on the Index Locations tab of the Enterprise Vault Indexing Service properties page. The following procedure shows how to find the index locations you need to back up on a server called EVServer.domain1.local. Note: To find a complete list of all the index locations to back up, you must complete this procedure on all the Enterprise Vault servers that run an indexing service. To find a complete list of the index locations you must back up

1 2 3

In the left pane of the administration console, browse to Enterprise Vault Servers > EVServer.domain1.local > Services. In the right pane, right-click Enterprise Vault Indexing Service and click Properties. Click the Index Locations tab and note the index locations that you must back up.

328

Backing up Enterprise Vault About backup mode cmdlets

Before you back up index locations, you must place them in backup mode. See About Enterprise Vault backup mode on page 324. While index locations are in backup mode, users can continue to search their archives. In environments where it is not necessary to maintain this functionality during the backup window, you can stop all the indexing services while you take backups. If you do this, you do not have to set backup mode on index locations.

About backup mode cmdlets

Enterprise Vault provides a set of PowerShell cmdlets which you can use to set and clear backup mode on the following:

Vault stores Vault store groups Index locations

You can run these cmdlets directly in the Enterprise Vault Management Shell, and use them in your backup scripts. For example, use the cmdlets in a pre-backup script to set backup mode on index locations and vault stores before the backup is taken. After the backup has completed, use the cmdlets in a post-backup script to clear backup mode. For each index location and vault store, Enterprise Vault maintains a count of the number of set requests and clear requests, to support the use of concurrent backup scripts. Enterprise Vault increments the count by 1 on each request to set backup mode, and decrements the count by 1 on each request to clear backup mode. When you use concurrent backup scripts, Enterprise Vault does not clear backup mode from a vault store or an index location until all the scripts that have set backup mode, have also cleared backup mode. Note: When you use the administration console to clear backup mode from an index location or vault store, Enterprise Vault ignores the backup mode count and forcibly clears backup mode. To run PowerShell cmdlets directly, first run the Enterprise Vault Management Shell

Click Start > Programs > Enterprise Vault > Enterprise Vault Management Shell.

PowerShell opens and loads the Enterprise Vault snap-in which makes the backup mode cmdlets available in the shell.

Backing up Enterprise Vault About backup mode cmdlets

329

The Enterprise Vault Management Shell provides the following backup mode cmdlets: Cmdlet
Get-IndexLocationBackupMode

Description
Reports the current backup mode settings on index locations. Increments the backup mode count on index locations. Decrements the backup mode count on index locations. Reports the current backup mode settings on vault stores. Increments the backup mode count on vault stores. Decrements the backup mode count on vault stores.

Set-IndexLocationBackupMode

Clear-IndexLocationBackUpMode

Get-VaultStoreBackupMode

Set-VaultStoreBackupMode

Clear-VaultStoreBackupMode

Help is available for all the cmdlets. For example, the following command shows the detailed help for Clear-VaultStoreBackupMode:
Get-Help Clear-VaultStoreBackupMode -detailed

You can also generate PowerShell backup mode commands that are based on the configuration of your environment and ready for use in your backup scripts. See Generating PowerShell backup commands for your environment on page 332.

Index location backup mode cmdlet syntax

The syntax is the same for all three index location backup mode cmdlets. For example:
Set-IndexLocationBackupMode [-EVServerName] <String> [[-IndexRootPath] <String>] [-EVSiteName <String>] [<CommonParameters>]

The following examples show how Set-IndexLocationBackupMode is used to increment the backup mode count on index locations:

Set-IndexLocationBackupMode EVServer

This command increments the backup mode count on all the index locations that are associated with server EVServer.

330

Backing up Enterprise Vault About backup mode cmdlets

Set-IndexLocationBackupMode EVServer -IndexRootPath f:\indexing\index0

This command increments the backup mode count on index location f:\indexing\index0.

Set-IndexLocationBackupMode EVServer -EVSiteName Site1

This command increments the backup mode count on all the index locations in Site1. In all cases, you must specify the name of the server that owns the index location or site so the cmdlet can find its ID. If you know the ID of the index location, site or server, you can use the following syntax to increment the backup mode count:
Set-IndexLocationBackupMode [-EntryId <String>] [<CommonParameters>]

For example:
Set-IndexLocationBackupMode -EntryId 1F3C7910CD579234AB8EB207F0ECEBCE91210000EVServer.Domain1.local

This command increments the backup mode count on the object that has the specified ID. Specify the ID of an index location to increment the backup mode count on that index location. Specify the ID of a server or a site to increment the backup mode count on all its associated index locations.
Clear-IndexLocationBackupMode uses the same syntax to decrement the backup

mode count on index locations. It also has an additional parameter which you can use to forcibly clear backup mode from index locations. For example:
Clear-IndexLocationBackupMode Server-Win2k3 -ForceClearBackupMode 1

This command forcibly clears backup mode from all the index locations associated with server Server-Win2k3. Clear-IndexLocationBackupMode ignores the existing backup mode count and sets it to 0.
Get-IndexLocationBackupMode also uses the same syntax to report current backup

mode settings.

Vault store backup mode cmdlet syntax

The syntax is the same for all three vault store backup mode cmdlets. For example:
Clear-VaultStoreBackupMode [-Name] <String> [-EVServerName] <String> [-EvObjectType] <EVObjectType> [<CommonParameters>]

The following examples show how Clear-VaultStoreBackupMode is used to decrement the backup mode count on vault stores and vault store groups:

Backing up Enterprise Vault About backup mode cmdlets

331

Clear-VaultStoreBackupMode VS1 EVServer VaultStore

This command decrements the backup mode count on vault store VS1.

Clear-VaultStoreBackupMode VSG1 EVServer VaultStoreGroup

This command decrements the backup mode count on all the vault stores in vault store group VSG1.

Clear-VaultStoreBackupMode Site1 EVServer Site

This command decrements the backup mode count on all the vault stores in Site1. In all cases you must provide the name of the server that owns the vault stores or site, and specify the object type. These parameters allow the cmdlet to find the correct ID. You must provide the parameters in the order that is shown if you omit the parameter names. However, if you provide parameter names, you can use them in any order. For example:
Clear-VaultStoreBackupMode -EVServerName EVServer -EVObjectType VaultStore -Name VS1

If you know the ID of the vault store, vault store group or site, you can use the following syntax to decrement the backup mode count:
Clear-VaultStoreBackupMode -EntryId <String> [<CommonParameters>]

For example:
Clear-VaultStoreBackupMode -EntryId 1F3C7910CD579234AB8EB207F0ECEBCE91210000EVServer.Domain1.local

This command decrements the backup mode count on the object that has the specified ID. Specify the ID of a vault store to decrement the backup mode count on that vault store. Specify the ID of a vault store group or a site to decrement the backup mode count on all its associated vault stores.
Clear-VaultStoreBackupMode uses the same syntax to decrement the backup

mode count on vault stores. It also has an additional parameter which you can use to forcibly clear backup mode from vault stores. For example:
Clear-VaultStoreBackupMode Server-Win2k3 -ForceClearBackupMode 1

This command forcibly clears backup mode from all the vault stores associated with server Server-Win2k3. Clear-VaultStoreBackupMode ignores the existing backup mode count and sets it to 0.
Get-VaultStoreBackupMode also uses the same syntax to report current backup

mode settings.

332

Backing up Enterprise Vault Generating PowerShell backup commands for your environment

Generating PowerShell backup commands for your environment

Enterprise Vault includes a PowerShell script called Transform-Backup.ps1, which you can use to generate PowerShell backup mode commands for your environment.
Transform-Backup.ps1 generates an HTML file that contains a set backup mode

command, and a clear backup mode command for each of the following entities in your environment:

Enterprise Vault site (all vault stores) Vault store group Vault store Enterprise Vault site (all index locations)

You can use any of the commands from the HTML file that are appropriate to your backup regime. For example, if you back up all the data associated with an entire Enterprise Vault site in one operation, your pre-backup script should include the command to set backup mode on the sites vault stores, and the command to set backup mode on the sites index locations. When the backup operation is complete, your post-backup script should include the command to clear backup mode from the sites vault stores, and the command to clear backup mode from the sites index locations.
Transform-Backup.ps1 is in the Templates folder beneath the Enterprise Vault

installation folder (for example C:\Program Files (x86)\Enterprise Vault\Reports\Templates). Before you run the script, you must set the PowerShell script execution policy, to allow only signed scripts to run. You only have to do this once. To set the PowerShell script execution policy

1 2

Click Start > Programs > Enterprise Vault > Enterprise Vault Management Shell to run the Enterprise Vault Management Shell. Run the following command:
Set-ExecutionPolicy -executionPolicy AllSigned

When you have set the PowerShell script execution policy, you can run Transform-Backup.ps1 to generate the backup mode commands for your environment.

Backing up Enterprise Vault Using PowerShell cmdlets in backup scripts

333

To run the script

1 2 3

If you closed the Enterprise Vault Management Shell, click Start > Programs > Enterprise Vault > Enterprise Vault Management Shell. Change directory to the Reports\Templates folder beneath the Enterprise Vault installation folder. Enter the following command to run the script:
.\Transform-Backup.ps1

At the following prompt:

Do you want to run software from this untrusted publisher?

Choose R to run the script once. At the end of the script, the HTML file generated by Transform-Backup.ps1 opens automatically in your default web browser.

Using PowerShell cmdlets in backup scripts

Enterprise Vaults backup mode PowerShell cmdlets are designed to be used in your backup scripts to control backup mode. For example, you can set backup mode on vault stores and index locations before you take a backup, and clear backup mode again after the backup is complete. This section describes how to use Enterprise Vaults backup mode PowerShell cmdlets in your backup scripts. Note: Enterprise Vault and Microsoft Windows PowerShell 1.0 must be installed on your server to run these cmdlets. In your backup scripts, you can use a single command to:

Run a new instance of Windows PowerShell Load the Enterprise Vault PowerShell snap-in Run the appropriate cmdlet to control backup mode

For example, you can use the following command at the start of your backup script, or in a pre-backup script, to set backup mode before you take a backup. This command runs PowerShell and loads the Enterprise Vault PowerShell snap-in, then runs the set-vaultstorebackupmode cmdlet, to set backup mode on the vault store group called Express Vault Store Group:

334

Backing up Enterprise Vault Using PowerShell cmdlets in backup scripts

powershell -psconsolefile "C:\Program Files\Enterprise Vault\EVShell.psc1" -command "& {set-vaultstorebackupmode -name 'Express Vault Store Group' -evservername EVserver -evobjecttype vaultstoregroup}"

After your backup is complete, you should run a similar command in your script to clear backup mode. For example:
powershell -psconsolefile "C:\Program Files\Enterprise Vault\EVShell.psc1" -command "& {clear-vaultstorebackupmode -name 'Express Vault Store Group' -evservername EVserver -evobjecttype vaultstoregroup}"

On 64-bit Windows operating systems, you must run the Enterprise Vault PowerShell snap-in under the 32-bit version of PowerShell. The 32-bit version of PowerShell is installed in %SystemRoot%\SysWow64\WindowsPowerShell\v1.0. For example, in your scripts you can call 32-bit PowerShell directly from this path:
%SystemRoot%\SysWow64\WindowsPowerShell\v1.0\powershell -psconsolefile "C:\Program Files (x86)\Enterprise Vault\EVShell.psc1" -command "& {set-vaultstorebackupmode -name 'Express Vault Store Group' -evservername EVserver -evobjecttype vaultstoregroup}"

Alternatively, you can set an environment variable that contains the path of the 32-bit version of PowerShell. For example, set an environment variable called ps32 and use it in your scripts:
%ps32%\powershell -psconsolefile "C:\Program Files (x86)\Enterprise Vault\EVShell.psc1" -command "& {set-vaultstorebackupmode -name 'Express Vault Store Group' -evservername EVserver -evobjecttype vaultstoregroup}"

Chapter

23

Failover in a building blocks configuration

This chapter includes the following topics:

Updating service locations after failover

Updating service locations after failover

This section describes the procedure to follow when an Enterprise Vault server that is part of a building blocks solution has failed or been replaced. Before you use this procedure it is essential that you have configured a working building blocks solution. The failover will not work unless you have already run Update Service Locations on the correctly-configured Enterprise Vault site. To update service locations after failover

Change the DNS alias of the failed Enterprise Vault server so that it maps to a working server. You must make this change on all the remaining servers in the Enterprise Vault site. The method you use to do this depends on the procedures within your organization, as follows:

Using a host file. Update the host files on all the remaining server computers in the Enterprise Vault site. Using DNS zones. Update the DNS zones to reflect the new alias, and clear the DNS cache using the command line ipconfig /flushdns.

Start the Administration Console on any of the servers in the Enterprise Vault site.

336

Failover in a building blocks configuration Updating service locations after failover

3 4

In the left pane, expand the tree until the Enterprise Vault Servers container is visible. Right-click the Enterprise Vault Servers container and, on the shortcut menu, click Update Service Locations. You are prompted for the password for the Vault Service account.

Enter the password for the Vault Service account and click OK. Enterprise Vault updates the service locations and creates new services as necessary. At the end of the update a summary screen appears, listing the services on each computer in the site.

If the Update Service Locations has created any services, start them.

Chapter

24

Recovery
This chapter includes the following topics:

About using EVSVR as part of the recovery procedure Recovering Enterprise Vault using full system backups Recovering Enterprise Vault using data-only backups Recovery of an Enterprise Vault component Recovery of Enterprise Vault in a VCS cluster Recovery of Enterprise Vault in a Windows Server failover cluster

About using EVSVR as part of the recovery procedure

Enterprise Vault comes with a command-line utility, EVSVR, with which you can verify the consistency of the information in your vault store partitions and databases, and repair any errors. As part of any recovery procedure, we strongly recommend that you run EVSVR on multiple occasions to identify and resolve any issues:

Before you undertake the recovery procedure, run EVSVR to identify the issues. When either of the following situations arises, run EVSVR again to verify that you have resolved the issues:

You have completed the recovery procedure. The recovery procedure requires you to put your environment into normal operation (for example, in order to archive or rearchive items).

You may need to use EVSVR to make your environment consistent before you can resume normal operations. For guidelines on how to run EVSVR, see the Utilities manual.

338

Recovery Recovering Enterprise Vault using full system backups

Recovering Enterprise Vault using full system backups

If you have chosen to make an application backup of your complete Enterprise Vault environment (systems, services, and tasks), you can restore it by following the steps below. See About Enterprise Vault backups on page 323. See About using EVSVR as part of the recovery procedure on page 337. To recover Enterprise Vault using full system backups

1 2

Restore your full system backups. If services are missing from the service control panel, use one of the following procedures to run the Enterprise Vault Configuration wizard to reconstruct the service information.

If you are recovering all the Enterprise Vault servers that run a Directory service and you are restoring the first one of these servers, use Recovery procedure 6. See Recovery procedure 6: Recreating services and tasks on the first Directory service computer on page 344. When you recover subsequent servers including other servers that run a Directory service, use Recovery procedure 7. See Recovery procedure 7: Recreating services and tasks on Enterprise Vault servers on page 346.

Carrying out an environment recovery procedure

If a disaster occurs, follow these steps to recover an Enterprise Vault environment. Note: Unless otherwise stated, do not start any Enterprise Vault service until all the steps of this recovery procedure have been completed. To recover an Enterprise Vault environment

1 2

Restore file system backups. Restore the following Enterprise Vault SQL databases:

EnterpriseVaultDirectory EnterpriseVaultMonitoring EnterpriseVaultAudit

Each FSA Reporting database you have set up, if you use FSA Reporting.

Recovery Recovering Enterprise Vault using data-only backups

339

Each fingerprint database Each vault store database

3 4 5 6

Restore vault store partitions to their original locations. Restore index volumes to their original locations. Repeat archiving operations that took place after your last backup completed. Cancel all pending items from mailboxes.

Recovering Enterprise Vault using data-only backups

Use the following recovery procedures when you have backed up only Enterprise Vault data, including the registry, and have not backed up the system disks on your Enterprise Vault servers. The procedures described in this section require backups of the following Enterprise Vault SQL databases:

EnterpriseVaultDirectory EnterpriseVaultMonitoring EnterpriseVaultAudit

Each FSA Reporting database you have set up, if you use FSA Reporting. Fingerprint databases Vault store databases

You must also have backups of the following Enterprise Vault data:

Vault store partitions Index locations

You can use these procedures when you need to recover only one Enterprise Vault server, or to recover multiple servers. To recover each server, you need to know which Enterprise Vault services it was running before the disaster occurred. If you are unsure which Enterprise Vault services were running on each server, run the SQL script ServiceLocations.sql, which is installed in the Enterprise Vault installation folder, for example C:\Program Files (x86)\Enterprise Vault. Note: Before you can run the script you must first restore your Enterprise Vault Directory database.

340

Recovery Recovering Enterprise Vault using data-only backups

Recovery procedure 1: Installing software on the servers

All the data relating to your previous Enterprise Vault installation needs to be recovered onto new servers. For each server that has failed you need to set up a new computer. Ideally, set up each computer with the same name as the original computer that it is replacing. Note: If this is not possible the recovery steps tell you what to do to accommodate a change in computer name. Build each new system, starting with the installation of Windows and then all the prerequisites for Enterprise Vault. Refer to the Enterprise Vault documentation if you are not sure which prerequisite software you must install on each computer. When you have set up the correct prerequisite software on each server, install Enterprise Vault on the server. Note the following:

Install Enterprise Vault on each new server, into the same folder as on the original server. Install the same version of Enterprise Vault as is being used in your current environment.

Do not run the Enterprise Vault Configuration wizard at the end of completing the installation of the Enterprise Vault software.

Recovery procedure 2: Restoring Enterprise Vault databases

Restore the following Enterprise Vault SQL databases:

EnterpriseVaultDirectory EnterpriseVaultMonitoring EnterpriseVaultAudit

Each FSA Reporting database you have set up, if you use FSA Reporting. Fingerprint databases Vault store databases

If you have restored EnterpriseVaultMonitoring or the FSA Reporting databases to a SQL server other than the one that previously hosted them, you must update the Directory database.

Recovery Recovering Enterprise Vault using data-only backups

341

To update the monitoring settings in the Directory database

On the SQL server that hosts the Directory database, run the following SQL script:
USE EnterpriseVaultDirectory UPDATE MonitoringSettings SET SQLServer = 'SQL_server_name'

where SQL_server_name is the name of the new SQL server. To update the FSA reporting settings in the Directory database

On the SQL server that hosts the Directory database, run the following SQL script to determine which SQL server hosted each FSA Reporting database:
USE EnterpriseVaultDirectory Select SQLServer,DatabaseName From FSAReportingDatabase

Run the following SQL script:

USE EnterpriseVaultDirectory UPDATE FSAReportingDatabase SET SQLServer = 'SQL_server_name' WHERE DatabaseName = 'FSA_reporting_database_name'

where:

SQL_server_name is the name of the new SQL server. FSA_reporting_database_name is the name of the FSA Reporting database that you restored.

Recovery procedure 3: Renaming servers

Ideally, you should set up each server with the same name as the original server that it is replacing. However, if this is not the case, you must perform the following extra procedure. Warning: If you are running Enterprise Vault in a clustered environment, do not perform this operation unless Symantec Support advises you to do so. To set up a server with a different name than the old server

Repeat the following steps for each server that you are recovering:

Run SQL Query Analyzer and connect to the server that is running the Enterprise Vault Directory service.

342

Recovery Recovering Enterprise Vault using data-only backups

Enter and run the following SQL command:

USE EnterpriseVaultDirectory UPDATE ComputerEntry SET ComputerNameAlternate = 'Name of new server' WHERE ComputerNameAlternate = 'Name of old server'

Check that the DNS alias you set up for the old server points to the name of the new server. If you are unsure what the DNS alias is, run the following SQL query against the EnterpriseVaultDirectory database.
USE EnterpriseVaultDirectory SELECT ComputerName FROM ComputerEntry

If you are recovering the system that provided the vault site alias (usually the first server that was added to the site), then you need to update the vault site alias to point to the new server. To do this, perform the following steps in the order listed:

Run SQL Query Analyzer and connect to the server running the Enterprise Vault Directory service. Enter and run the following SQL command:
USE EnterpriseVaultDirectory SELECT SiteEntryId FROM SiteEntry

The value returned contain the vault site alias at the end of a long string of numbers. For example, if the command returns the following then the vault site alias is sitealias:
10354B15D38FE5B41BAAC212490EBA5351d10000sitealias

In DNS, change the DNS alias entry so that it points at the new server.

Recovery procedure 4: Copy or move the Enterprise Vault data files

You now need to restore the backups of the Enterprise Vault data files to their locations on the Enterprise Vault servers. Depending on the original Enterprise Vault components that existed on the servers you are recovering you must restore only the following data files:

If you are restoring a server that used to run a Storage service, or a server that is configured in a cluster, you need to restore onto this server the saveset files for any vault stores managed by the original Storage service.

Recovery Recovering Enterprise Vault using data-only backups

343

If you are restoring a server that used to run an Indexing service, or a server that is configured in a cluster, you need to restore onto this server the indexing data files managed by the original Indexing service. If you are restoring a server that used to run a Shopping service, or a server that is configured in a cluster, you need to restore onto this server the shopping files managed by the original Shopping service.

The Enterprise Vault data should be restored to the locations where they existed on the original servers. For example, if you are recovering the server running the Indexing service and the indexing data was originally stored in the following location:
I:\Indexing

then this indexing data should be restored to the same location on the new server. To reorganize and move any SQL database devices on the disks, you can perform the procedures as listed in the following Microsoft Knowledge Base article: http://support.microsoft.com/?kbid=181602 This must be correct before you start any of the Enterprise Vault services, otherwise some cleanup operations may occur, resulting in information loss.

Recovery procedure 5: Clearing the directory database entries

You can clear the directory database entries for all of the Enterprise Vault servers in your environment, or for selected servers. The SQL query that is provided in this section clears the entries in the database for all the Enterprise Vault servers. If you have multiple Enterprise Vault servers in your environment, you may want to recover only some of the servers. The following technical note provides alternative SQL scripts that let you specify the servers for which you want to clear directory entries: http://www.symantec.com/docs/TECH127004

344

Recovery Recovering Enterprise Vault using data-only backups

To clear the directory database entries for all of the Enterprise Vault servers

1 2

Run SQL Query Analyzer and connect to the server running the Enterprise Vault Directory service. Enter and run the following SQL command:
USE EnterpriseVaultDirectory UPDATE StorageServiceEntry SET StorageArchive = '', StorageRestore = '', StorageReplayIndex = '', StorageSpool = '' UPDATE RetrievalTask SET RetrievalSpoolQueue = '' UPDATE ArchivingRetrievalTask SET MessageQueue = '' UPDATE RetrievalTask SET MessageQueue = '' UPDATE JournalTask SET MessageQueue = '' UPDATE PublicFolderTask SET MessageQueue = ''

Recovery procedure 6: Recreating services and tasks on the first Directory service computer
If you are recovering all the Enterprise Vault servers that run a Directory service, you must use this procedure when you recover the first of these servers. When you recover the subsequent servers including other servers that run a Directory service, use the procedure described in Recovery procedure 7. See Recovery procedure 7: Recreating services and tasks on Enterprise Vault servers on page 346. The Enterprise Vault Configuration wizard is able to detect missing services and tasks provided that the server name is identical to that in the original installation, or you have correctly followed Recovery procedure 3. See Recovery procedure 3: Renaming servers on page 341. To recreate services and tasks on the first Directory service computer

1 2 3

On the Windows Start menu, click All Programs > Enterprise Vault > Enterprise Vault Configuration. Select Yes to create a new Directory service, and then click Next. Enter the details of the Vault Service account, and then click Next.

Recovery Recovering Enterprise Vault using data-only backups

345

The Enterprise Vault Configuration wizard does the following:

Converts the login for the Enterprise Vault Admin service so that it runs under the Vault Service account. Adds the Vault Service account to the local Administrators group on the computer. Grants the user rights Log on as a service and Debug programs to the Vault Service account. Creates and starts the Enterprise Vault Directory service.

When prompted for the name of the SQL Server that will host the directory database, enter the name of SQL Server used to host the directory database for the original configuration of Enterprise Vault, and then click Next. The Enterprise Vault Configuration wizard checks that the SQL Server exists and can connect to it. As long as you have recovered the Directory service database, the Enterprise Vault Configuration wizard now recreates the services and tasks installed on the Directory service computer. To recreate the Enterprise Vault services on the Directory service computer, enter the password of the Vault Service account. When the repair has finished, a success message is displayed. If the Enterprise Vault Configuration wizard does not display a message, do not continue to run the wizard. Close the wizard and do the following:

6 7 8

Check that all previous steps have been successful, repeat any missed steps and then run the Enterprise Vault Configuration wizard again. Create a String registry value called UseLanManNameForSCM under the following registry key:
On a 32-bit installation of Windows: HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault \Admin On a 64-bit installation of Windows: HKEY_LOCAL_MACHINE \SOFTWARE \Wow6432Node \KVS \Enterprise Vault \Admin

Give UseLanManNameForSCM a value of 1. Run the Enterprise Vault Configuration wizard again.

346

Recovery Recovering Enterprise Vault using data-only backups

If you are sure you have followed all steps correctly and setting the registry key does also not help, contact your Enterprise Vault Support Representative for further assistance.

Recovery procedure 7: Recreating services and tasks on Enterprise Vault servers

If you are recovering all the Enterprise Vault servers that run a Directory service, for the first one you must use Recovery procedure 6. See Recovery procedure 6: Recreating services and tasks on the first Directory service computer on page 344. When you recover the subsequent servers including other servers that run a Directory service, use the procedure described in this section. The Enterprise Vault Configuration wizard is able to detect missing services and tasks provided that the server name is identical to that in the original installation, or you have correctly followed Recovery procedure 3. See Recovery procedure 3: Renaming servers on page 341. To recreate services on other Enterprise Vault servers

1 2 3 4

Make sure the server running the Directory service is available on the network and the Directory service is started. Make sure the Admin service is started on the local computer. Run the Enterprise Vault Configuration wizard on the server by clicking Start > Programs > Enterprise Vault > Enterprise Vault Configuration. When asked whether you want to create a directory or use an existing one, select No, use existing remote Vault Directory and enter the name of the server running the Directory service. Enter the password of the Vault Service account. This is necessary to recreate the Enterprise Vault services on the computer. The Enterprise Vault Configuration wizard recreates the Enterprise Vault services and tasks that used to run on the server and displays a message to indicate success. If the Enterprise Vault Configuration wizard does not display a success message, do not continue to run the wizard. Close the wizard and then do the following:

5 6

Check that all previous steps have been successful, repeat any missed steps, and then run the Enterprise Vault Configuration wizard again.

Recovery Recovering Enterprise Vault using data-only backups

347

Create a String registry value called UseLanManNameForSCM under the following registry key:
On a 32-bit installation of Windows: HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault \Admin On a 64-bit installation of Windows: HKEY_LOCAL_MACHINE \SOFTWARE \Wow6432Node \KVS \Enterprise Vault \Admin

Give UseLanManNameForSCM a value of 1. Run the Enterprise Vault Configuration wizard again If you are sure you have followed all steps correctly and setting the registry key does also not help, contact your Enterprise Vault Support Representative for further assistance.

Start all the Enterprise Vault services. The message queues should automatically be recreated on the new server. If the Storage service is configured to start multiple processes, it may stop during message queue creation. This is because of a conflict between the processes creating the queues. To fix the problem, restart the Storage service.

Recovery procedure 8: Checking the Web Access application settings

You must now ensure that the port and protocol settings for the Web Access application are correct. To check the Web Access application settings

1 2 3 4

Open the Administration Console. Expand the Enterprise Vault and Directory containers. Right-click the Site entry, and then select Properties. View the General page. Check that the port and protocol set for accessing the Web Access application virtual directory, /EnterpriseVault, match the settings on the default web site in IIS.

Recovery procedure 9: Checking registry entries

Check that the Enterprise Vault registry entries are all set correctly on the newly-recovered servers.

348

Recovery Recovery of an Enterprise Vault component

The main registry entries are under the following key:

HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault

Additionally, you may have set registry entries under HKEY_CURRENT_USER when logged in as the Vault Site account. If so, restore these entries on each server too, under the following key:
HKEY_CURRENT_USER \Software \KVS \Enterprise Vault

Recovery of an Enterprise Vault component

Table 24-1 describes how to restore individual Enterprise Vault components. See About using EVSVR as part of the recovery procedure on page 337. Caution: Only perform this operation if you are advised to do so by Symantec support. Table 24-1 How to recover Enterprise Vault components

To recover this component Do this

Directory service SQL database

Ensure that the Enterprise Vault Admin services on all computers are stopped. To do this, use Windows Manager to stop the Enterprise Vault Admin service on each computer. Restore the SQL databases. Start the Directory service. Restore the system backup, and the Directory service SQL database. Restore the backups of any other Enterprise Vault services that run on this computer.

2 3
Directory service computer

1 2

Recovery Recovery of an Enterprise Vault component

349

Table 24-1

How to recover Enterprise Vault components (continued)

To recover this component Do this

Index file locations

1 2 3

Restore the system backup of the computer running the Indexing service. Ensure that the service is stopped. Restore all the Indexing files to their original locations; ensure that all the backed-up files are restored, and that no other files remain in the indexing folders. Do not try to restore individual files because this leads to inconsistent indexes that may be unusable. Restore the backups of any other Enterprise Vault services that run on this computer. When correctly restored, the Indexing service can use the restored indexes. However, there may be indexing entries lost from archive operations carried out since the last backup. The Storage service will automatically reconstruct the affected indexes.

Shopping service files

1 2 3 4 5

Restore the system backup of the computer running the Shopping service. Ensure that the Shopping service is stopped. Restore the backup of the shopping data to its original location. Restore the backups of any other Enterprise Vault services that run on this computer. Start the Shopping service. Users should be able to use their existing shopping baskets and create new shopping baskets.

350

Recovery Recovery of Enterprise Vault in a VCS cluster

Table 24-1

How to recover Enterprise Vault components (continued)

To recover this component Do this

Vault store files

1 2 3 4

Restore each system running a Storage service. Restore the vault store files into their original locations. Restore the vault store's SQL database. Restore the backups of any other Enterprise Vault services that run on the restored Storage service computer. Run the EVSVR utility to verify the consistency of the information in your vault store partitions and databases, and repair any errors. See the Utilities manual for more information.

Vault store or fingerprint databases

1 2

Restore the computer running the Storage service and replace the vault store files. Restore the following databases: Vault store or fingerprint databases

Directory database Master and msdb databases

Restore the backups of any other Enterprise Vault services that run on the restored Storage service computer. Run the EVSVR utility to verify the consistency of the information in your vault store partitions and databases, and repair any errors. See the Utilities manual for more information.

Recovery of Enterprise Vault in a VCS cluster

This section outlines how to repair an Enterprise Vault VCS cluster in which one or all of the nodes needs rebuilding. See the Installing and Configuring manual and Veritas Storage Foundation and High Availability Solutions 4.3 Solutions Guide for more information on how to perform the following steps. The Installing and Configuring manual also describes how to implement a disaster recovery solution using Veritas Storage Foundation HA with the Veritas Volume Replicator (VVR) and Global Cluster Option (GCO). See About using EVSVR as part of the recovery procedure on page 337.

Recovery Recovery of Enterprise Vault in a VCS cluster

351

Recovery scenario 1: One of the cluster nodes needs rebuilding

If one of the Enterprise Vault nodes in the cluster needs rebuilding, the failover node should automatically take its place. Follow the steps below to rebuild the inoperable node and make it available again as the new failover node. To repair a single node in the cluster

1 2 3 4 5

Install Windows and all other prerequisite software. If necessary, install VCS and configure the node as part of the cluster. If necessary, install Enterprise Vault. Run the Enterprise Vault Cluster Setup wizard. You must modify the existing service group so that the node is a member of it. Run the Enterprise Vault Configuration wizard on the failover node. You must choose to add the node as a failover node for an existing clustered server.

Recovery scenario 2: All the cluster nodes need rebuilding

If all the cluster nodes need rebuilding, but you have backup copies of the SQL Server databases and the Indexing and saveset data for Enterprise Vault, you can follow the steps below to rectify the situation. To repair all the nodes in the cluster

Rebuild all the computers and restore the SQL databases. See Recovery procedure 2: Restoring Enterprise Vault databases on page 340.

2 3

Recreate the cluster in VCS with the same number of disks, and mount the shared disk with the same drive letters as before. Restore the Indexing and Enterprise Vault store data to disks using the same drive letters as before. See Recovery procedure 4: Copy or move the Enterprise Vault data files on page 342.

4 5

Install Enterprise Vault on all the nodes in the cluster. For each Enterprise Vault server in the cluster, perform the following steps in the order listed:

Run the Enterprise Vault Cluster Setup wizard to recreate the service groups. Use the same virtual server names as before. Run the Enterprise Vault Configuration wizard on the primary node. Choose to configure a new Enterprise Vault server with cluster group. The wizard detects the existing virtual server name and performs a repair.

352

Recovery Recovery of Enterprise Vault in a Windows Server failover cluster

When the repair is complete, a wizard page is displayed with which you can create the service resources. Do not bring the resources online when given the option to do so.

Run the Enterprise Vault Configuration wizard on the failover node. Choose to add the node as a failover node for an existing clustered server.

Clear the Directory database entries. See Recovery procedure 5: Clearing the directory database entries on page 343.

Check the Web Access application URL. See Recovery procedure 8: Checking the Web Access application settings on page 347.

Bring the cluster resources online and test that failovers work as planned.

Recovery of Enterprise Vault in a Windows Server failover cluster

This section outlines how to repair Enterprise Vault in a Windows Server failover cluster when one or all of the nodes needs rebuilding. For detailed instructions on how to perform individual steps, see the Installing and Configuring manual.

Recovery scenario 1: One of the cluster nodes needs rebuilding

If one of the Enterprise Vault nodes in the cluster fails, the failover node should automatically take its place. The steps below outline how to rebuild the inoperable node and, assuming an any-to-any configuration, make it available as the new failover node. To repair a single node in the cluster

1 2 3

Install Windows and all other prerequisite software. Install Enterprise Vault. Use Failover Cluster Manager to add the node to the cluster. Replace the old node with the new node as the following:

A possible owner of each resource in the failed-over resource group. A preferred owner of the failed-over resource group.

Run the Enterprise Vault Configuration wizard on the new node, selecting the option to add the node as a failover node for an existing clustered server.

Recovery Recovery of Enterprise Vault in a Windows Server failover cluster

353

Recovery scenario 2: All the cluster nodes need rebuilding

If all the cluster nodes need rebuilding, but you have backup copies of the SQL Server databases and the Indexing and saveset data for Enterprise Vault, you can follow the steps below to rectify the situation. To repair all the nodes in the cluster

Rebuild all the computers and restore the SQL databases. See Recovery procedure 2: Restoring Enterprise Vault databases on page 340.

2 3

Recreate the cluster using Failover Cluster Manager. Use the same number of disks, and mount the shared disks with the same drive letters as before. Restore the Indexing and Enterprise Vault store data to disks using the same drive letters as before. See Recovery procedure 4: Copy or move the Enterprise Vault data files on page 342.

4 5 6

Recreate the resource groups, including the prerequisite resources, using the original virtual server names. Install Enterprise Vault on all the nodes in the cluster. Run the Enterprise Vault Configuration wizard on each primary node. Choose to configure a new Enterprise Vault server with cluster support. The wizard detects the existing virtual server name in the Enterprise Vault Directory databases ComputerEntry table, and performs a repair. When the repair is complete, a wizard page is displayed, with which you can recreate the Enterprise Vault service resources and Server Instance resource. Do not bring the resources online when given the option to do so.

7 8

Run the Enterprise Vault Configuration wizard on each failover node. Choose to add the node as a failover node for an existing clustered server. Clear the Directory database entries. See Recovery procedure 5: Clearing the directory database entries on page 343.

Check the Web Access application URL. See Recovery procedure 8: Checking the Web Access application settings on page 347.

10 Bring the cluster resources online and test that failovers work as planned.

354

Recovery Recovery of Enterprise Vault in a Windows Server failover cluster

Appendix

Ports used by Enterprise Vault

This appendix includes the following topics:

About the ports used by Enterprise Vault Notes on configuring dynamic RPC ports

About the ports used by Enterprise Vault

On all Enterprise Vault servers you need to open the normal ports that are required for authentication within a Windows domain. For example, Kerberos (port 88), DNS (port 53 UDP), Active Directory (port 445). Enterprise Vault servers and the servers with which they communicate may require other ports to be open, depending on the functionality that you require. Table A-1 lists the ports that Enterprise Vault requires. See http://www.symantec.com/docs/TECH69642 for information on configuring Enterprise Vault for restricted DCOM access.

356

Ports used by Enterprise Vault About the ports used by Enterprise Vault

Table A-1 Server

Destination ports required by Enterprise Vault Destination ports

135 TCP 2101, 2103, 2105 TCP for MSMQ 1801 UDP and TCP for MSMQ 3527 UDP for MSMQ

Comments
RPC discovery is port 135. Used for communication between Enterprise Vault servers (DCOM). See Notes on configuring dynamic RPC ports on page 357. Ports 2101, 2103, and 2105 are incremented by 11 if the initial choice is in use when Message Queuing initializes.

Enterprise Vault server

Enterprise Vault Web Server 80 TCP for HTTP 443 TCP for HTTPS Enterprise Vault Domino Gateway 8080 TCP for HTTP 443 TCP for HTTPS 1352 TCP for Notes RPC SQL Server (default instance) 1433 TCP SQL Server (named instance) 1434 UDP for SQL browser service The TCP port for the SQL named instance

Client access and web search.

DWA, Notes.

Microsoft SQL. The SQL named instance can use a fixed port or a dynamic port. See Notes on configuring dynamic RPC ports on page 357. For RPC discovery. (DCOM). See Notes on configuring dynamic RPC ports on page 357. Used for communication with Enterprise Vaultservers. See Notes on configuring dynamic RPC ports on page 357.

Exchange Server

135 TCP 80, 443 TCP for OWA

SharePoint server

135 TCP

Domino mail server

1352 TCP for Notes RPC

Notes.

Ports used by Enterprise Vault Notes on configuring dynamic RPC ports

357

Table A-1 Server

Destination ports required by Enterprise Vault (continued) Destination ports

139 TCP, 445 TCP 3218 UDP and TCP

Comments
CIFS and Microsoft DS. Connection to Centera storage device.

Windows file server Centera

Notes on configuring dynamic RPC ports

The version of Windows that Enterprise Vaultis on determines which dynamic RPC ports you must configure, as follows:

On Windows Server 2008 the range of dynamic RPC ports is 49152 through 65535. For information on how to configure dynamic RPC ports see the following Microsoft article: http://support.microsoft.com/kb/929851/ Windows versions earlier than Windows Server 2008 used a default port range of 1025 through 5000 for dynamic RPC.

On Windows Server 2008 you can configure the Windows firewall so that it opens RPC ports dynamically. If you do this there is no need to open a port range for dynamic RPC. You cannot use this method to configure ports for SQL. The following Microsoft article discusses how to configure dynamic RPC ports: http://technet.microsoft.com/en-us/library/cc732839(WS.10).aspx

358

Ports used by Enterprise Vault Notes on configuring dynamic RPC ports

Appendix

Microsoft hotfixes
This appendix includes the following topics:

About the Microsoft hotfixes

About the Microsoft hotfixes

Table B-1 lists the Microsoft hotfixes that you may need to install. Table B-1 Microsoft hotfixes Symptom or comment Microsoft hotfix

To fix problems with

Exchange 2000

Unable to allocate required 294833 memory displayed when viewing archived item in OWA. To prevent an error message when trying to forward an archived item. 314982

Outlook 2000 SP1

Outlook 2000 SP1 or SP3

You may also need 331788 if this 318119 hotfix causes problems. A duplicate name exists on the 281308 network when setting up Enterprise Vault building blocks. DCOM rollup. 302845

Windows 2000 or Windows 2003

Windows 2000 SP2 Windows 2000 SP2 or SP3

MSMQ insufficient resources. If 811308 the system is under a reasonable load contact Microsoft for a Windows 2000 hotfix and follow recommended registry settings.

360

Microsoft hotfixes About the Microsoft hotfixes

Table B-1

Microsoft hotfixes (continued) Symptom or comment

Forms cache corruption.

To fix problems with

Windows 2000 SP2 or SP3

Microsoft hotfix
285129

Appendix

Useful SQL queries

This appendix includes the following topics:

About the SQL queries

About the SQL queries

In SQL Query Analyzer, choose a vault store database and then do the following:

Use the following SQL query to show how much has been archived in a certain period as well as time the first and last items were stored during that period. Replace the dates and times in this example with those you want to use.
Select count(*),min(archiveddate),max(archiveddate) from saveset where archiveddate >'2002-04-26 18:00' and archiveddate < '2002-04-27 5:00'

Use the following SQL Query to obtain the number of different vaults processed in a specified period.
Select distinct(vaultidentity) from saveset where archiveddate >'2002-04-26 18:00' and archiveddate < '2002-04-27 5:00'

Use the following SQL Query to obtain the number of vaults with items stored in them.
Select count(*) from vault

362

Useful SQL queries About the SQL queries

Appendix

Troubleshooting
This appendix includes the following topics:

Installation problems Microsoft SQL Server problems Server problems Client problems Problems enabling or processing mailboxes Problems with Enterprise Vault components Techniques to aid troubleshooting About moving an Indexing service

Installation problems
The problems in this category can include the following:

Enterprise Vault servers: installation problems Desktop clients: installation problems

Enterprise Vault servers: installation problems

This section includes the following topics:

Problems when running the installation procedure Configuring Outlook Web Access Extensions after installation problems

364

Troubleshooting Installation problems

Problems when running the installation procedure

If the Enterprise Vault installation fails when trying to register files, restart your system and run the installation again.

Configuring Outlook Web Access Extensions after installation problems

Only work through this section if the Setup program displayed an error message informing you that it could not configure the Enterprise Vault Outlook Web Access Extensions for Exchange 2000 Server. Setup runs the script file OWASetup.vbs to configure the Enterprise Vault Outlook Web Access Extensions. If this script fails, you must run it manually. It is possible that the script failed because you have disabled the Windows Script Host. If so, enable Windows Script Host before running the script. To run OWASetup.vbs

1 2 3

Log on to the Exchange Server computer as Exchange Administrator. Use Windows Explorer to navigate to the Enterprise Vault program folder (for example C:\Program Files (x86)\Enterprise Vault). Double-click OWASetup.vbs. A message informing you that the operation may take some time appears.

Click OK. The number of Exchange Servers and mailboxes that you have determines how long the operation takes to complete.

Desktop clients: installation problems

If you install the Enterprise Vault Outlook Add-In, and then later remove it and reinstall to a different location, the following problems occur:

When starting Outlook, the following error message appears:

The add-in \original_location\valkyrie.dll could not be installed or loaded.

Double-clicking a shortcut produces error messages about being unable to load custom forms.

The problem occurs because Outlook maintains a cache file of settings, called extend.dat, which contains a pointer to the original location of the Outlook Add-In. You can stop the problem from occurring by taking the following steps:

Troubleshooting Microsoft SQL Server problems

365

Do not change the location of the Outlook Add-In. If you do need to change the location of the Outlook Add-In, run Outlook after you remove it. This forces Outlook to rebuild the extend.dat file without the original location of the Outlook Add-In. You can then exit from Outlook and reinstall the Outlook Add-In.

If the problem already exists, the solution is to delete the extend.dat file so that it is automatically rebuilt when Outlook is next started. As the location of this file varies, you need to search for it. One copy of the file exists for each user who uses Outlook on the computer, so there can be several copies of the file to delete. You can also use the ResetEVClient command-line tool to fix problems with the Enterprise Vault add-in to Microsoft Outlook. For information on how to use ResetEVClient, see the Utilities manual. Note: ResetEVClient deletes extend.dat only for the user who runs it.

Microsoft SQL Server problems

The problems in this category can include the following:

Error: ODBC SQL Server Driver Connection is Busy Number of SQL Server licenses exceeded How to reset passwords after moving an Enterprise Vault database

Error: ODBC SQL Server Driver Connection is Busy

Read this section if you see the following MSSQLServer error and Enterprise Vault database error messages in the Windows log:
Event ID: 17060 Source: MSSQLServer Type: Error Category: ODS Error: 17832, Severity: 18, State: 0 Unable to read login packet(s) . . . Event ID: 13344 Source: Enterprise Vault Type: Error Category: Database An error was detected whilst accessing the Vault database _EnterpriseVaultDirectory_: [Microsoft][ODBC SQL Server Driver][DBNMPTW]Connection is busy_

These errors are caused by a known SQL Server problem. How you fix the problem depends on how you have set up access to SQL. The two most common methods

366

Troubleshooting Microsoft SQL Server problems

of access are TCP/IP and named pipes. For more information, see the most up-to-date articles on the Microsoft Support Web site. In particular, you may find the following article useful: http://support.microsoft.com/?kbid=109787

Number of SQL Server licenses exceeded

The following message is displayed when you have exceeded the number of SQL Server licenses that you have registered:
An error was detected whilst accessing the Vault Database 'name': [Microsoft][ODBC SQL Server Driver][SQL Server]Login failed- The maximum simultaneous user count of n licenses for this server has been exceeded. Additional licenses should be obtained and registered using the Licensing application in the NT Control Panel.

If you are running SQL Enterprise Manager remotely, you require an extra SQL Server license. Enterprise Vault creates and accesses the Vault Directory Database and the vault store databases. The number of licenses depends on your licensing type. For example, if you are using per-server licensing, and both databases are located on the same computer, you require one Client Access License. If the two databases are on different computers, you require two Client Access Licenses.

How to reset passwords after moving an Enterprise Vault database

If you are using SQL Server for Enterprise Vault only, we do not recommend that you move either the Vault Directory database or the vault store databases. Instructions in this section are for experienced SQL Server administrators who may need to know what impact moving the databases has on Enterprise Vault. When you move the databases using the SQL Transfer Database method, the encrypted passwords are not moved. You must therefore set up your Enterprise Vault passwords to these databases again, and point the DSN at the new server. Using the Administration Console, set the SQL login password for the following:

The Vault Directory database. You must use the Administration Console that is running on the same computer as the database. Each vault store database. Right-click each vault store and then, on the context menu, click Properties. On the General tab, type a new password.

Troubleshooting Server problems

367

Server problems
The following sections list errors that you may encounter while running Enterprise Vault. The problems in this category can include the following:

Fixing errors when opening MSMQ dead letter queue

Here are a few tips for making sure that you avoid some common problems:

It is very important to set up the Vault Service account correctly and to ensure that the Enterprise Vault services run under this account. The Vault Service account must have the Microsoft Exchange Server permission Service Account Admin at the Site and Configuration level. See the Installing and Configuring manual for detailed information on setting up the Vault Service account. When you change the Vault Service account password using Windows, you must update the password in the Vault Directory Database using the Administration Console. The password is encrypted in the Vault Directory Database. See the online help for the Administration Console for more information.

Fixing errors when opening MSMQ dead letter queue

If you receive the following error message:
Error opening MSMQ Dead Letter Queue - Access is Denied for queue MACHINE=98b76660-4198-11d2-bb6f-0000f8789ea8;DEADXACT

then you should grant the Local Administrator group full control of the message queues on all computers running the following:

Exchange Mailbox Task Exchange Public Folder Task Exchange Journaling Task Storage Service

To grant full control to the Local Administrator group

1 2 3 4

Run Microsoft Message Queue Explorer. Expand the required site. Select the appropriate computer. Right-click the computer and then, on the context menu, select Properties.

368

Troubleshooting Client problems

5 6 7 8

On the Security tab, click Permissions. In the Computer Permissions dialog box, select Add. In the Add Users and Groups dialog box, select the Administrators group in the List Names From box. Click Add, and then click OK until you have returned to the main Message Queue Explorer dialog box.

Client problems
The problems in this category can include the following:

Problems logging on to the Enterprise Vault Web Access application MAPISVC.INF problems (client) Problems seen by users

Problems logging on to the Enterprise Vault Web Access application

When users start the Enterprise Vault Web Access application from Microsoft Outlook or Microsoft Exchange Client, they may be prompted for both their Windows username and password. If there is no separate box for the domain name, the username must be supplied in the following format:
domain_name\username

When users start the Enterprise Vault Web Access application from Microsoft Outlook or Microsoft Exchange Client, they are prompted for both their Windows user name and password. Normally, Windows passwords have a limit of 14 characters. If a user has set a password containing more than 14 characters, IIS fails to recognize it, and the user cannot log on to use the Enterprise Vault Web Access application. The user must change the password to 14 characters or fewer. This is a known IIS restriction.

MAPISVC.INF problems (client)

If there is an invalid version of MAPISVC.INF in the %windir%\System32 folder, either of the following problems can occur:

The Enterprise Vault Outlook client cannot display the contents of shortcuts. Outlook displays an error message informing you that it is unable to resolve the conflict between a recently installed program and Microsoft Office or other email-enabled programs.

Troubleshooting Client problems

369

To fix MAPISVC problems

Run the program fixmapi.exe, which is normally in the folder %windir%\System32. Note that the program does not appear to do anything when you run it. Restart the computer. Test whether the problem has been fixed.

2 3

If you continue to have problems

1 2

Rename the existing MAPISVC.INF in the folder %windir%\System32. Copy the version of MAPISVC.INF supplied with Outlook to the System32 folder. This file is normally as follows:
c:\program files\common files\system\mapi\1033\nt\MAPISVC.INF

3 4

Restart the computer. Try the failing operation again.

Problems seen by users

The problems that users may encounter include the following:

Items can no longer be accessed from shortcuts: user problem Archive Explorer does not show old items: user problem Archived items do not show Enterprise Vault icons: user problem RPC server is unavailable, or call to the retrieval service failed: user problem Out of date vault index data: user problem Timeouts when restoring large baskets: user problem PowerPoint conversions Restored items do not appear in the Restored Items folder: user problem

Items can no longer be accessed from shortcuts: user problem

If you have changed the protocol or port used for the Web Access application, shortcuts to existing archived items will no longer work. Shortcuts in Outlook, Entourage, and Lotus Notes can be updated with the new protocol or port information using Synchronize mailboxes in the Enterprise Vault

370

Troubleshooting Client problems

Administration Console, but customized shortcuts, FSA shortcuts, and SharePoint shortcuts cannot be updated. For more information see "Customizing the port or protocol for the Web Access application" in Installing and Configuring.

Archive Explorer does not show old items: user problem

Archive Explorer uses new indexing properties to find archived items. This means that items archived with Enterprise Vault 3.7 or earlier do not appear in Archive Explorer until you rebuild the archive indexes.

Archived items do not show Enterprise Vault icons: user problem

If an Outlook 2003 user has enabled Use Cached Exchange Mode, Outlook forms are not synchronized by default. This results in archived items not showing Enterprise Vault icons. To fix the problem by making Outlook synchronize forms

1 2 3 4 5 6

Start Outlook. Click Tools > Send/Receive > Send/Receive Settings > Define Send/Receive Groups. Click All Accounts Online and Offline, and then click Edit. Check Synchronize Forms, and then click OK. Exit from Outlook, and then restart it. Open an archived item. This automatically installs the forms.

RPC server is unavailable, or call to the retrieval service failed: user problem
If users receive either message when trying to archive or restore an item, make sure that their DNS Server TCP/IP address in the TCP/IP Properties dialog box is correct.

Out of date vault index data: user problem

The index of items stored in a user's archive may become out of date if, for example, there is a power failure or an out-of-date system backup is restored. If there is a problem with the index, Enterprise Vault rebuilds it automatically the next time that an item is archived in that archive. This means that there may be a short period when the index contains out-of-date information about the items

Troubleshooting Problems enabling or processing mailboxes

371

that are in the archive. Users searching an archive using the Enterprise Vault Web Access application may not be able to find items until the index is updated. If you believe that this is the problem, the user can archive an item to force Enterprise Vault to rebuild the index.

Timeouts when restoring large baskets: user problem

There is no limit to the number of items that a user running the Enterprise Vault Web Access application can try to restore from a basket. However, if the number of items in the restoring basket is very large, IIS may time out before all of the items have been restored. If most items have been restored, the user can run the restore again, as Enterprise Vault only tries to restore the items that have not been restored yet. If many of the items were not restored, we recommend that the user creates additional baskets and ensures that there are fewer items in each basket before retrying the restore.

PowerPoint conversions
The Microsoft PowerPoint text conversion applies only to text contained within a slide. Speaker notes text is not converted.

Restored items do not appear in the Restored Items folder: user problem
If the Restored Items folder does not exist, and a user with Outlook 2003 in cached Exchange mode restores items from search results, the Restored Items folder is created and the items are restored. However, Outlook 2003 shows the newly-created Restored Items folder but does not show the items in it. The restored items are shown correctly the next time Outlook 2003 is started. This is caused by a problem with Outlook 2003.

Problems enabling or processing mailboxes

This section describes how to diagnose and fix problems with enabling archiving for mailboxes. Work through the following checks to correct the problem:

Is the Exchange Mailbox Task for the Exchange Server running? The Exchange Mailbox Task does the work of enabling mailboxes, so it must be running.

372

Troubleshooting Problems enabling or processing mailboxes

Does the Enterprise Vault mailbox still exist, or has it been created incorrectly? A problem here normally means that, when you try to enable a mailbox, the message "Failed to enable the mailbox" appears. See Checking the Enterprise Vault system mailbox on page 372. Is the Enterprise Vault mailbox hidden from the address book? Use Microsoft Exchange Server Administrator to look at the properties of the Enterprise Vault mailbox. Make sure that, on the Advanced tab, you have not selected the option to hide the mailbox from the address book. Is the Microsoft Exchange Information Store service running on the Exchange System? On Microsoft Exchange 2000, is the Mailbox Store mounted? To enable Microsoft Exchange 2000 mailboxes, the Vault Service account must have permission to modify a user's extensionData attribute. If the account does not have this permission, the message "Insufficient Active Directory Permissions" appears.

To check and modify the Vault Service account permissions

1 2 3 4 5 6 7 8 9

On the Windows Start menu, click All Programs > Administrative Tools > Active Directory Users and Computers. Right-click the domain and then, on the context menu, click Properties. Click the Security tab. Click Advanced, and then click Add. Double-click the account to which you want to add the permission. In the Permission Entry dialog box, click the Properties tab. Next to Apply onto, select User objects. In the Permissions list, next to both Read extensionData and Write extensionData, check Allow. Click OK repeatedly to close the dialog boxes.

Checking the Enterprise Vault system mailbox

If you suspect that there may be a problem with the Enterprise Vault system mailbox, work through this section. To check the Enterprise Vault mailbox on Exchange 2000

1 2

On the Windows Start menu, click Programs > Administrative Tools > Active Directory Users and Computers. Double-click the user to display the properties.

Troubleshooting Problems enabling or processing mailboxes

373

3 4

Click the Email Addresses tab, and check that an email address is present. If there is no email address, run the Recipient Update Service as follows:

Select the Recipient Update Services container, which is under the Recipients. Right-clicking the domain and then, on the context menu, click Update Now.

To create the mailbox when it does not exist

1 2 3 4 5 6 7 8 9

Right-click the Users container and then, on the context menu, click New > User. In the Full name box, type a name such as EV System mailbox for server, where server is the name of the Exchange server. Type a user logon name, and then click Next. Type a password, and then confirm it. Uncheck Account is disabled. It does not matter what the other settings are. Click Next. Make sure that the correct server is selected. Check Create an Exchange mailbox, and then click Next. Click Finish to create the user and mailbox. Note that it may take some time for the mailbox to be available.

Problem processing a new mailbox

When processing a newly-created mailbox on Microsoft Exchange 2000 Server or Microsoft Exchange Server 2003, you may receive an error message in the Windows Application Log like the following:
Event Type: Error Event Source: Enterprise Vault Event Category: Archive Service Event ID: 3277 Date: 02/02/2004 Time: 4:02:29 PM User: N/A Computer: MYSERVER Description: The MAPI error MAPI_E_FAILONEPROVIDER (0x8004011D) has occurred whilst synchronizing the properties of mailbox /o=First

374

Troubleshooting Problems with Enterprise Vault components

Organization/ou=First Administrative Group/cn=Recipients/cn=PST5. The mailbox will not be synchronized until the next scheduled run.

The cause of the problem is that the mailbox security descriptor is not read from Active Directory until the user logs on or receives mail. To fix the problem, log on to the mailbox or send a mail message to it. For more information, see the following article in the Microsoft Knowledge Base: http://support.microsoft.com/?kbid=272153

Problems with Enterprise Vault components

This section includes information on the following topics:

Troubleshooting: All services Troubleshooting: File System Archiving Troubleshooting: Directory service Troubleshooting: Archiving or Journaling services Troubleshooting: Retrieval service Troubleshooting: Indexing service Troubleshooting: Storage service Troubleshooting: Shopping service Troubleshooting: Web Access application Troubleshooting: Enterprise Vault Operations Manager and the Monitoring database Troubleshooting: Enterprise Vault Reporting and FSA Reporting Specific problems Restoring items for users

Troubleshooting: All services

This section describes problems with Enterprise Vault services and covers the following topics:

Service fails to start: all services Failed to create MAPI session: all services Error creating or opening an MSMQ message: all services

Troubleshooting Problems with Enterprise Vault components

375

User does not have access to an archive: all services Services stop because of low system resources: all services

Service fails to start: all services

If an Enterprise Vault service fails to start, check that the following are running:

Enterprise Vault Directory Service Either the MSMQ Primary Enterprise Controller or the Message Queuing service

Failed to create MAPI session: all services

Except for the Directory Service and the Admin Service, the Enterprise Vault services and tasks run under the Vault Service account. If you have set up a service or task to run under a different account, or if you have not given the Vault Service account the required Microsoft Exchange Server permissions, an Exchange Journaling Task continues to log errors until you stop it. The Exchange Journaling Task continues to try to process the Microsoft Exchange Server Journal mailbox at one-minute intervals. This problem shows up in the Windows Event Viewer as follows:
* retry count: Could not get a MAPI session from the session pool whilst processing mailbox /o=ACME/ou=Site2000/ cn=Recipients/cn=lvservice

and:
Could not scan user mailbox /o=ACME/ou=Site2000/cn=Recipients/cn=lvservice, unable to get the state of the users mailbox

Check the following:

Is the Exchange Server computer running (private message store)? Has the Enterprise Vault mailbox been deleted? Have the Vault Service account permissions been set on the Exchange tree?

Error creating or opening an MSMQ message: all services

Check that the service has permissions to access its MSMQ queues. Is the MSMQ Primary Enterprise Controller or Backup Enterprise Controller running?

376

Troubleshooting Problems with Enterprise Vault components

User does not have access to an archive: all services

Users require write access to an archive in order to archive, and read access in order to retrieve. This applies even for background archiving. A user must also be the owner of the mailbox or be a member of the local Administrators group on the system that is running the Exchange Mailbox task. On Exchange 2000, a user can also have access to an archive by using an account that has been granted full access in the mailbox rights attribute. You can set the attribute using the Active Directory Users and Computers snap-in.

Services stop because of low system resources: all services

When the Administration service detects that your system is low on resources, it stops Enterprise Vault services residing on that system. Occasionally, this may result in additional events being logged. The comment in the log states that the service could not be stopped in a timely manner. Before restarting the service, ensure that all processes associated with the stopped service have been terminated. For the Indexing service, these are the IndexBroker and IndexServer processes. To check the status of the processes, right-click the Windows taskbar and then, on the context menu, select Task Manager.

Troubleshooting: File System Archiving

File System Archiving automatically configures the Internet Explorer settings so that the Web Access application computer is in the Internet Explorer trusted sites list. File System Archiving checks this setting each time the file server is processed on an archiving run. If the computer that runs the Placeholder service has incorrect Internet Explorer security settings, users cannot open any placeholder shortcuts. Each attempt to do so produces an entry on the Windows Application log on the placeholder computer, saying that there was an error downloading a file. To configure the Internet Explorer security settings

1 2 3 4 5 6

Log on as the Vault Service account to the computer that is running the Placeholder service. On the Windows Start menu, click Settings > Control Panel. Double-click Internet Options. Click the Security tab. In the list of zones, click Local intranet. Click Sites.

Troubleshooting Problems with Enterprise Vault components

377

7 8 9

Click Advanced. Enter the name of the Web Access application computer, without the DNS domain, and then click Add. Click OK.

10 Click OK to close the local intranet settings. 11 On the Security tab of the Internet Options dialog box, click Custom Level. 12 Under User Authentication in the Security Settings dialog box, select either
Automatic logon only in Intranet zone or Automatic logon with current username and password.

13 Click OK to close the Security Settings dialog box. 14 Click OK to close the Internet Options dialog box.

Troubleshooting: Directory service

The Directory service has a client that runs on every system that runs Enterprise Vault software. The Directory service and client both log events to the Enterprise Vault event log. When you have a problem with the Directory Service, the first step is to look for events to determine where the problem lies. This section includes information on the following topics:

Client problems: Directory service Service problems: Directory service SQL problems: Directory service Security problems: Directory service Setting tracing levels: Directory service

Client problems: Directory service

Events in the log may refer to service-related problems that have been reported to the client. If so, check the computer that is running the service. The network between the client and service may be down. Run ping from a Command Prompt window to check that the Directory service computer is available. Run the test in both directions. Check that the Directory service is running. If it is not, the client cannot make a connection.

378

Troubleshooting Problems with Enterprise Vault components

Service problems: Directory service

Check that prerequisite software is available. The Directory service must have all its prerequisite software. ADO (which is installed as part of MDAC) and SQL must be installed and be operational. Check that the EnterpriseVaultDirectory ODBC DSN is set up correctly. The Directory Service depends upon an ODBC System DSN called EnterpriseVaultDirectory. This is added automatically by the Configuration Wizard, but it can be modified by anyone using ODBC from Control Panel. Check that this is configured correctly. Check that the SQL passwords match. You may see an event informing you that the SQL login has failed. This is because the Directory service depends upon a SQL login ID called EnterpriseVault and an associated password. Ensure that the passwords match. You can use the Administration Console to set the SQL password in Enterprise Manager and the Directory Service.

SQL problems: Directory service

SQL event data is included in Enterprise Vault events. SQL can report an event for several reasons, such as a database that has run out of disk space. You should become familiar with SQL Enterprise Manager. This tool lets you manage the SQL Server and the Enterprise Vault Directory database. Use SQL Profiler to see what commands have been sent to the SQL database engine. SQL may not recognize the SQL command it has been given. You can use SQL Profiler to check the commands. The event logged by the Directory Service tells you the command, but only if SQL returned control back to the Directory service. Start SQL Profiler from within SQL Enterprise Manager.

Security problems: Directory service

Create, Update, and Delete must be used by an account that belongs to the local group Administrators on the Directory service computer. Any component has permission to read from the Directory service but, to write data, you must have write permissions. The user who tries to modify the data that is maintained by the Directory service must be a member of the local group called Administrators on the Directory Computer. By default the global group Domain Admins is added to the local Administrators group. SQL database permissions must be correct. When the SQL database is created, all the correct permissions are applied to the tables. That is, the SQL login ID EnterpriseVault has access to all of the

Troubleshooting Problems with Enterprise Vault components

379

tables. If someone inadvertently modifies these permissions, access may be denied. The Application Event Log should indicate such a problem.

The password stored by the Directory must match the password set in SQL. Always use the Administration Console to change the password.

Setting tracing levels: Directory service

For problems with services, use the Vault Administration Console to change the level of tracing. When you are trying to diagnose a problem, set the tracing level higher. For problems with clients, create a new DWORD value called Trace Level under the following registry key:
HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault \Directory

where the possible values for Trace Level are as follows:

0 1 2 3 None Low Medium High

Troubleshooting: Archiving or Journaling services

This section covers problems with both Exchange Mailbox Tasks and Exchange Journaling Tasks. The Exchange Mailbox and Exchange Journaling tasks scan through Microsoft Exchange Server mailboxes and select items for archiving using the selection criteria that you have specified. If you have allowed users to override the selection criteria that you have set, individual users may have set different criteria. This section includes information on the following topics:

Archiving fails completely: Archiving or Journaling services Archiving fails partially: Archiving or Journaling services

380

Troubleshooting Problems with Enterprise Vault components

Setting permissions on an Exchange Server 2000 computer: Archiving or Journaling services Setting up cross-domain archiving: Archiving or Journaling services

Archiving fails completely: Archiving or Journaling services

Archiving can fail for any of the following reasons:

Configuration problems. Check through the Application Event Log to find out whether there are any messages there that help with solving the problem. Communication or access problems. Check through the Application Event Log to find out whether there are any messages there that help with solving the problem. There may be no archiving schedule set. If you have not set such a schedule, the Exchange Mailbox and Public Folder tasks do not run unless you use Run Now. Check the Application Event Log for entries made by the Exchange Mailbox task. Does archiving work when you use Run Now? Try running the Exchange Mailbox or Public Folder task in report mode. This generates a report indicating what would be archived if you did a full run of the Exchange Mailbox task. The archiving criteria that you have set may not match the properties of any items in the enabled mailboxes or public folders. No mailboxes have had archiving enabled. This does not apply to an Exchange Journaling task. Use tracing so that you can follow the decisions made by the Exchange Mailbox or Journaling task.

If you have just started using Enterprise Vault, it may take several archiving runs before the system reaches a normal state. This is because a new installation may have more items to archive than can be processed in a single run of the Exchange Mailbox task. Enterprise Vault takes a few items from each mailbox and then, if there is still time in its schedule, goes around again to take more. So some items may have to wait for the next run of the Exchange Mailbox task. This balancing process ensures that archiving is carried out evenly across all mailboxes. However, it can appear that Enterprise Vault is ignoring some items when, in fact, it is not. Microsoft Exchange Server can monitor processes for you; see the Microsoft Exchange Server documentation.

Troubleshooting Problems with Enterprise Vault components

381

Archiving fails partially: Archiving or Journaling services

There are several reasons why archiving fails completely for some Microsoft Exchange Server mailboxes but still works for others, or why not all the items that you expect to be archived are archived. If Enterprise Vault fails to archive anything from some Microsoft Exchange Server mailboxes then the following may apply:

The most likely cause is that those mailboxes have not been enabled for archiving. It is possible that the clock on the computer that is running the Exchange Mailbox task is wrong by a large amount, such as weeks or days. The Exchange Mailbox task uses the local clock to determine the date and time. If this clock has a very different time from that on the Microsoft Exchange Server computer, archiving is affected. On a test system you might be more aware of this problem and so notice it even if the clocks are only a few minutes different.

If Enterprise Vault is archiving some items from a mailbox and is missing others, the problem could be any of the following:

The user has overridden the archiving settings so that the items are never going to be archived, or are not yet ready to be archived. You have a new Enterprise Vault installation and the system has not yet reached its normal state. It may take several runs of the Exchange Mailbox Task before all items that are ready to be archived are actually processed. The user has no access to the archive. Check through the Application Event Log to find out if there are any messages that help with solving the problem. The user has changed the amount of time before an item is ready for archiving, and items are consequently not yet eligible for archiving. The item's message class has not been added to the list of those that Enterprise Vault archives. To add more messages classes, use the Directory Properties: Advanced property page. The Enterprise Vault mailbox has been deleted. The Vault Service Account permissions on the Exchange tree are incorrect. See Setting permissions on an Exchange Server 2000 computer: Archiving or Journaling services on page 382.

If items never turn into shortcuts, check the following:

The Exchange Mailbox task is running. The Storage service is running.

382

Troubleshooting Problems with Enterprise Vault components

The setting of Remove Safety Copies on the General tab of the Vault Store Properties dialog box. If this is set to After Backup, the messages do not turn into shortcuts until the vault stores have been backed up.

Setting permissions on an Exchange Server 2000 computer: Archiving or Journaling services

Work through this section if you suspect that there may be a problem with Exchange Server permissions. The Vault Service account must be granted all permissions on the Exchange Server object. To set the permissions on an Exchange Server 2000 computer

1 2 3 4 5 6 7 8 9

Using an account with Exchange administration permissions, click Start > All Programs > Microsoft Exchange > System Manager. Right-click the appropriate Microsoft Exchange Server computer and then, on the context menu, click Properties. Click the Security tab. Click Add. The Select Users, Computers, or Groups dialog box appears. In the Look in box, click the Windows domain in which you created the vault site. In the Name list, click the Vault Service account. Click Add. Click OK to return to the Properties dialog box, with the Vault Service account selected. In the Allow column of the permissions list, check Receive As and Send As.

10 Click OK.

Setting up cross-domain archiving: Archiving or Journaling services

If you plan to add an Exchange Mailbox or Journaling task for an Exchange Server computer that is in a different domain from that of the Enterprise Vault server, you must set the E2KAutoCreateMailboxContainerADsPath registry value before you add the task.

Troubleshooting Problems with Enterprise Vault components

383

To set the E2KAutoCreateMailboxContainerADsPath registry value

Log on to the computer on which you are going to use the Enterprise Vault Configuration Program or Administration Console to add the task for the Exchange Server computer that is in the remote domain. Start the Registry Editor. Find the following key:
On a 32-bit installation of Windows: HKEY_LOCAL_MACHINE \Software \KVS \Enterprise Vault \Admin On a 64-bit installation of Windows: HKEY_LOCAL_MACHINE \Software \Wow6432Node \KVS \Enterprise Vault \Admin

2 3

4 5

If the string value E2KAutoCreateMailboxContainerADsPath does not exist, create it. Give E2KAutoCreateMailboxContainerADsPath a value of Users. You can now add the task for the remote Exchange Server computer. After you have added the task, you can change the value of E2KAutoCreateMailboxContainerADsPath back to the default value of Default or leave it as Users.

Troubleshooting: Retrieval service

If you encounter problems when restoring items, do the following:

Check the Application Event Log for more information. Check that the Exchange Mailbox task is running. Check that the Storage service is running. If the items are offline, check that the HSM software is running properly. Check that you have the correct archive and Exchange mailbox permissions. To restore items, you must have at least Read access to the archive.

Troubleshooting: Indexing service

This section includes the following topics:

Cannot start or connect to an Indexing service: Indexing service

384

Troubleshooting Problems with Enterprise Vault components

All searches fail: Indexing service List of Indexing events: Indexing service

Cannot start or connect to an Indexing service: Indexing service

The checks in this section are important when it is impossible to start, or establish any communication with, an Indexing service on a particular computer. This may be an Indexing service which has never been used, or one that was running successfully but now will not run at all.

Is the Indexing service running? If the Indexing service appears to be running but does not respond, stop it and any remaining IndexBroker.exe and IndexServer.exe processes, and then restart the service. Are the correct Indexing service files present on both the client and Indexing service? Compare the Indexing service files with those on a known, working system, or with the kit to ensure they are the correct files and versions. The Indexing Service files are IndexBroker.exe, IndexBrokerPS.dll, IndexServer.exe, IndexServerPS.dll, and IndexClient.dll. Have all the Indexing service files been registered? There is no harm in registering the files again, even if they are already registered. Register each pair of files in the order given.
IndexBroker.exe /regserver regsvr32 IndexBrokerPS.dll IndexServer.exe /regserver regsvr32 IndexServerPS.dll regsvr32 IndexClient.dll

Are the Indexing service settings correct? Use the Administration Console to check the Indexing service settings.

All searches fail: Indexing service

Searches can fail because the account that performs the search does not have access to the archive. This could be simply because the user genuinely does not have access to a particular archive, or could suggest problems with the Directory service database.

Troubleshooting Problems with Enterprise Vault components

385

Occasional failures to connect to an Indexing service, perhaps dependent on the user or computer, can be caused by DCOM security problems. Use dcomcnfg to verify that the Indexing service access permissions allow access to Everyone. Check the security on the Index Location folders, and all files and subfolders within them. They must have an ACL giving full access to the local Administrators group. Unless your policies dictate otherwise, these files and folders should not be accessible by anyone else. Note: The Vault Service account must be a member of the local Administrators group on every computer running Enterprise Vault software.

List of Indexing events: Indexing service

Table D-1 lists the Indexing events that can appear in the Windows Event Log. Table D-1 Event Indexing events Comments

7175 Index Server is busy Indicates that work is arriving at an Indexing service faster compacting and cannot than it can be processed, so there will be a temporary drop in handle any update requests throughput. The Storage Service is temporarily held up as a result, but there are no other problems. 7177 The Index Server Indicates a failure to communicate with the Directory service. could not access data from Such errors are normally accompanied by Directory service the directory: name errors that are likely to point you to the cause of the problem. Internal Reference: 7178 The Indexing Service Indicates a problem with the contents of the Directory service specified is not known database. If so, many other events and failures of Enterprise Vault components are likely to occur. 7181 Could not contact the Indexing Service Check Indexing Service has started on Internal Reference... The Indexing service on a particular computer is not responding. This is most likely because it has been stopped (intentionally or otherwise) but may be the result of incorrect configuration.

386

Troubleshooting Problems with Enterprise Vault components

Table D-1 Event

Indexing events (continued) Comments

This is logged if an Indexing service is running but cannot be communicated with successfully. In some cases this may just be a warning from which the Indexing service can recover but, if it persists, or there seem to be IndexServer.exe processes that never disappear despite the system being idle, stop and restart the Indexing service. Before restarting the Indexing service, manually stop any IndexBroker.exe and IndexServer.exe processes that remain. Indicates a failure to communicate with the Directory service. There are normally associated Directory service errors. See the Directory service errors to find the cause of the problem.

7184 Could not invoke Index Server Internal Reference ...

7185 Could not access Directory Service

7189 Could not open Index: This error occurs if an Indexing service cannot open or create ... the index files in one of the subfolders of an Index Location folder. 7194 The Index Server cannot complete the requested operation as it is stopping Indicates that requests were still being sent to the Indexing service after it had been instructed to stop. If the requests were searches, the users initiating the searches receive errors. If the requests were updates from the Storage service, they are queued within the Storage service until the Indexing service is restarted. Indicates problems with the contents of the Directory service database. If so, many other events and failures of Enterprise Vault components are likely to occur. Indicates problems with the contents of the Directory service database. If so, many other events and failures of Enterprise Vault components are likely to occur.

7208 Invalid Vault ID

7212 The Vault Service Account details could not be retrieved from the Directory Service

7214 Failed to identify the The Indexing service was unable to determine the caller's caller of an Indexing identity. This may be caused by someone trying to break into request the system. In such a case the Indexing service refuses to perform the caller's request, and logs this event.

Troubleshooting Problems with Enterprise Vault components

387

Table D-1 Event

Indexing events (continued) Comments

Someone other than the Vault Service account has tried to add or remove data from an index. Update requests should only come from the Storage service, which runs under the Vault Service account. Interactive users should never be using this account. If an interactive user, or some other program that is not the Storage service, tries to modify the indexes, this event is logged. This event is also logged if the Storage service is not running as the Vault Service account, in which case there will probably also be many Storage service problems. In extreme cases this event could result from configuration problems, or inconsistencies in the Directory service database.

7215 The Index Server can only be accessed by the Vault Service Account: name

7216 User name has been refused access to Vault: The user does not have permission to access this archive

Indicates that a user tried to search an archive but did not have the correct permissions. Normally, users cannot do this because the Web Application only lets them choose from the archives to which they do have access. However, as communication with the Web Application uses URLs, a user could construct a URL containing a different user's archive. In such a case, this event is logged and the search request is refused. Indicates a low-level system failure. Occasional such errors should be reported but are not cause for concern if there are no other problems. Frequent occurrences should be recorded and reported for analysis.

7231 A COM error occurred. ... Internal reference: ...

7235 A low level indexing This means that an underlying Alta Vista indexing operation operation has failed Error has failed. This is most likely to be a failure of a search code: ... containing non-alphanumeric characters or one of the Alta Vista reserved words. 7237 A critical Microsoft component, oleaut32.dll, has become unregistered. Refer to the Enterprise Vault ReadMeAdmin.txt for further information on this known Microsoft problem. (Microsoft problem reference Q185599) The Microsoft problem referred to prevents Enterprise Vault components running correctly, so they test for it and log an event. The problem can be fixed by referring to the information in ReadMeAdmin.txt. This can be logged with different event numbers by several Enterprise Vault components.

388

Troubleshooting Problems with Enterprise Vault components

Table D-1 Event

Indexing events (continued) Comments

7239 The Indexing Service Indicates that requests were still being sent to the Indexing cannot service any further service after it had been instructed to stop. If the requests requests as it is stopping were searches, the users initiating the searches receive error messages. If the requests were updates from the Storage service, they are queued within the Storage service until the Indexing service is restarted. 7240 An unresponsive IndexServer process has been marked bad by the Indexing Service : ... This message normally follows 7184. This indicates that the Indexing service has discovered an unresponsive IndexServer.exe process, but that there is nothing it can do about it. Stop the Indexing service, and then manually stop any IndexBroker.exe and IndexServer.exe processes that remain. Finally, restart the Indexing service. This message normally follows 7184. This indicates that the Indexing service has discovered an unresponsive IndexServer.exe process, but that there is nothing it can do about it. Stop the Indexing service, and then manually stop any IndexBroker.exe and IndexServer.exe processes that remain. Finally, restart the Indexing service. An IndexServer.exe process was not responding and had to be terminated. No immediate action is necessary and the Indexing Service will continue to function normally after such an event, recreating the IndexServer.exe process if necessary.

7241 The Indexing Service could not terminate an IndexServer: Internal Reference: ...

7242 The Indexing service had to terminate an unresponsive IndexServer process Internal Reference

Troubleshooting: Storage service

Storage service errors are logged in the Windows Application Event Log under the Storage and Database categories. This section includes information on the following topics:

Storage Service does not start: Storage service Failing to create queues: Storage service Failure to access queues: Storage service Cannot create vault stores: Storage service Cannot perform archive, restore, replay, online operations: Storage service Cannot archive: Storage service Exchange messages stay as Archive pending: Storage service

Troubleshooting Problems with Enterprise Vault components

389

Messages are not restored: Storage service Error creating a vault store: Storage service

Storage Service does not start: Storage service

Do the following:

Check the Application Event Log for more information. Check that the Directory service is running. Check that the Indexing service is running.

Failing to create queues: Storage service

Do the following:

Check the Application Event Log for more information. Check that the MSMQ Primary Enterprise Controller or Backup Enterprise Controller is running. Using Message Queue Explorer, check that the entries for the computers running the Exchange Mailbox and Journaling tasks or Storage services have the correct permissions.

To check the permissions

1 2 3 4 5 6 7 8 9

On the Windows Start menu, click All Programs > Administrative Tools > Computer Management. In the left-hand pane, expand the Computer Management node and then expand the Services and Applications node. Right-click Message Queuing and then, on the context menu, click Properties. The appears. In the Message Queuing Properties window, click Add. In the Select Users, Computers, or Groups window, next to Look In, select Entire Directory. In the list, click Administrators and then click Add. Click OK to return to the Message Queuing Properties window. Click Administrators. Under Permissions, check Allow next to Full Control.

10 Click OK. 11 Close Computer Management.

390

Troubleshooting Problems with Enterprise Vault components

Failure to access queues: Storage service

Check queue access permissions.

Cannot create vault stores: Storage service

Do the following:

Check the Application Event log for more information. Check that SQL Server is running. Check disk space on the NTFS volumes for the vault store database files. Examine SQL logs and trace output for more information about the problem.

Cannot perform archive, restore, replay, online operations: Storage service

Do the following:

Check the Application Event Log for more information. Check that the vault store databases are accessible. Check that SQL Server is running. Examine SQL logs and trace output for more information about the problem.

Cannot archive: Storage service

Check that the Indexing service is running.

Exchange messages stay as Archive pending: Storage service

Do the following:

Check the setting of Remove Safety Copies on the General tab of the Vault Store properties dialog box. If it is set to After Backup, the messages do not turn into shortcuts until the vault stores have been backed up. Check that the vault store NTFS volumes are being backed up. Check that the Exchange Mailbox task is running.

Messages are not restored: Storage service

Do the following:

Check that the Exchange Mailbox task is running. If you are using HSM software, check that it is running.

Troubleshooting Problems with Enterprise Vault components

391

Check the Application Event Log to find out whether Enterprise Vault is reconstructing vault indexes. If Enterprise Vault is reconstructing indexes for some archives, it rejects all archive and retrieval operations for those archives until the reconstruction is complete. Other archives are unaffected, so archive and retrieval operations can continue normally for those other archives.

Error creating a vault store: Storage service

If you receive an error when creating a vault store, try restarting the Storage service. The Application Event Log entries associated with the problem are as follows:
Event ID 13360 An error was detected while accessing the Vault Database 'FasterVS': Description: [Microsoft][ODBC SQL Server Driver][SQL Server]Unable to connect. The maximum number of '30' configured user connections are already connected. System Administrator can configure to a higher value with sp_configure. Event ID 13336 Unable to create Device EVFasterVS on path D:\mssql\data Event ID 13360 An error was detected while accessing the Vault Database 'FasterVS':

Troubleshooting: Shopping service

This section includes the following topics:

Common problems: Shopping service Poor performance: Shopping service Recovering lost disk space: Shopping service Moving shopping data: Shopping service

392

Troubleshooting Problems with Enterprise Vault components

Common problems: Shopping service

If anything goes wrong with Shopping, check first that all the appropriate services have started. All the following must be running for Shopping to work:

IIS Admin service World Wide Web Publishing service Enterprise Vault Shopping service Enterprise Vault Directory service Enterprise Vault Exchange Mailbox task

If all the services are running, check the Application Event log on the computer that hosts the Shopping service and the computer that hosts the Exchange Mailbox task. Most high-level errors are self-explanatory, and the solution is straightforward. Table D-2 lists the error messages that you may receive. Table D-2 Message Log messages What to do

The Shopping Service root Create the folder and try again. directory (<...>) does not exist Failed to connect to the Shopping Service Make sure that the Shopping service is started.

Troubleshooting Problems with Enterprise Vault components

393

Table D-2 Message

Log messages (continued) What to do

Check the access permissions on the Shopping folders, as follows: Enterprise Vault\Shopping\. All Enterprise Vault users who use Shopping require Write access to the Shopping folder. One way to ensure that users have this access is to grant the Authenticated Users group Write access to the Shopping folder. You may prefer to grant access to a smaller group that contains only Enterprise Vault users. Enterprise Vault\Shopping Access. Everyone must have Full Control. Enterprise Vault\Shopping\Domain. Everyone must have Full Control Enterprise Vault\Shopping\Domain\user. Both the user (Domain\user) and the Administrators group on the Web Server computer (WebServerComputer\Administrators) must have Full Control.

Failed to create new basket BasketName Failed to create file: filespec. Failed to open file filespec

Failed to open file: <filespec>

Check the access permissions on the file. Both the user (Domain\user) and the Administrators group on the Web Server computer (WebServerComputer\Administrators) must have Full Control.

Failed to retrieve the Make sure that the Directory service is started. Shopping Service directory information

If there are no errors in the Application Event Log, or the errors listed do not point to an obvious solution, try stopping and then restarting all the Enterprise Vault services. If restarting the services does not fix the problem, try increasing the tracing level to see whether that produces any additional information in the Application Event Log.

Poor performance: Shopping service

Bigger shopping baskets mean poorer performance and a greater chance of locking problems during retrieval confirmations. There is no enforced limit on the size of a basket but, in general, users should try to keep baskets to a moderate size (typically fewer than a hundred or so items).

394

Troubleshooting Problems with Enterprise Vault components

Recovering lost disk space: Shopping service

When a user selects items to restore, a record of these items is kept in a .des file on the Shopping Service computer. As the user retrieves more items, the .des file gradually increases in size, even if the user deletes all shopping baskets. If this size increase becomes a problem, do the following:

1 2

Ask the affected users to delete all their baskets. As an administrator, delete each .des file manually.

New, empty .des files are created automatically as needed.

Moving shopping data: Shopping service

We recommend that you do not move the shopping data when users have started shopping. If you do move the data to another volume, all the individual file permissions are lost and must be reapplied manually. If you move rather than copy the data to somewhere else on the same volume, the file permissions are retained. To move the data to another location on the same volume

1 2 3 4

Stop IIS. Stop the Shopping service. Move the data. (Do not copy it.) Change the data location in the Vault Administration Console by performing the following steps in the order listed:

In the Administration Console, expand the left pane until the appropriate Vault Site is visible. Expand the Vault Site until Computers is visible. Expand Computers. Expand the computer that runs the Shopping service. In the right pane, double-click the Shopping service that you want to modify. On the General tab of the Shopping Service property page, click Change. If you are prompted for the password to the Vault Service account, type it and then click OK. In the Choose Folder dialog box, select the new folder and then click OK.

Start the Shopping service and IIS.

Troubleshooting Problems with Enterprise Vault components

395

Troubleshooting: Web Access application

This section includes the following topics:

Users do not see the Web page: Web Access application Web Access application does not work: Web Access application Other problems: Web Access application

Users do not see the Web page: Web Access application

If the IIS virtual directory settings are wrong, users do not see the Web page. The default URL for the Web Access application is /EnterpriseVault; the name of the Web Access application virtual directory in IIS. Check the Web Access application settings on the General tab of the Site Properties dialog box in the Administration Console. The protocol and port shown must match the protocol and port set for the default web site in IIS which contains the /EnterpriseVault virtual directory.

Web Access application does not work: Web Access application

The following must all be running for the Web Access application to work:

IIS World Wide Web Publishing service Enterprise Vault Directory service Enterprise Vault Shopping service Enterprise Vault Indexing service

Errors that can occur because the services are not started are as follows:

The message The Enterprise Vault Service is not available appears when the Web Access application is first accessed. The message Failed to perform search request appears when performing a search. Shopping baskets are not created.

Other problems: Web Access application

English text is displayed instead of text in the language of the Web browser. The language file needs to be in the same folder as the English language file (en.lan) and the Active Server Page (.asp) files. The language is that of the user's Web browser and not that of the IIS computer. If the correct language

396

Troubleshooting Problems with Enterprise Vault components

file does not exist, English is used. The name of the language file is language.lan.

Incorrect user name/password entry format. The user name must be in the form domain\username for the log on to work correctly. A message is unexpectedly restored with all attachments. When a user selects an attachment to restore, Enterprise Vault restores the whole message, with all its attachments. This is the correct behavior. An item cannot be added to a basket twice. When adding an item that has already been added to a basket, the item is not added again and there is no warning message. Error: ASP 0115. If one of the services that the Web Access application is using causes an access violation, this error is logged. Look at the Application Event log on the Web Server system and find out on which service the error occurred and what the error was. Error: ASP 0177. This could be the result of either of the following:

A Shopping, Indexing, or Storage service has not been registered on the Web Server computer. The wrong permissions have been set on the virtual directory.

Troubleshooting: Enterprise Vault Operations Manager and the Monitoring database

If you see an error page when attempting to access Enterprise Vault Operations Manager, or when using it to monitor your system, see the following TechNote on the Symantec Support Web site: http://www.symantec.com/docs/TECH51287 The TechNote provides detailed troubleshooting information related to installing and using Operations Manager For information on troubleshooting the Monitoring database and Monitoring agents, see the following TechNote on the Symantec Support Web site: http://www.symantec.com/docs/TECH50809

Troubleshooting: Enterprise Vault Reporting and FSA Reporting

If you have problems with installing Enterprise Vault Reporting, or when accessing or viewing its reports, see the following TechNote on the Enterprise Vault Support Web site: http://www.symantec.com/docs/TECH51288

Troubleshooting Problems with Enterprise Vault components

397

This TechNote gives detailed troubleshooting information for Enterprise Vault Reporting. If you have problems when configuring or using FSA Reporting, refer to the troubleshooting advice in the following Enterprise Vault TechNote: http://www.symantec.com/docs/TECH51475

Specific problems

Enterprise Vault services do not start (login failure). If Enterprise Vault services do not start and report a login failure, the most likely cause of the problem is that the password that has been supplied for the Vault Service account is wrong. If you supply an incorrect password, there will be login failures from all Enterprise Vault services. Error while enabling mailbox for user /o=aaaa/ou=bbbbb/cn=Recipients/cn=ccccc, error sending enabled message. Enterprise Vault cannot send the enable mailbox message. This message is stored in a file called EnableMailboxMessage.msg on the Exchange Mailbox task computer. Changes to an Enterprise Vault service do not take effect. For many of the settings that you can change, you must stop and restart the appropriate Enterprise Vault task or service so that it can obtain the new settings. There are some settings that affect more than one service, so you may need to stop and restart multiple services. Mailboxes with no associated Windows account are not archived. This is the correct behavior. The Exchange Mailbox task automatically disables archiving for such mailboxes. BCC recipients are missing from a message. If you archive an unsent message with BCC recipients and then restore it, the BCC recipients are missing from the restored message. Re-installing the Outlook Add-In to a different folder does not work. If you remove the Outlook Add-In and then install it to a different folder, Outlook may not refresh its cache and so may not recognize the new location. To force Outlook to see the new installation, do the following in the order listed:

Exit Outlook. Remove the Enterprise Vault Outlook Add-In from the computer. Start and then exit from Outlook.

398

Troubleshooting Problems with Enterprise Vault components

Reinstall the Enterprise Vault Outlook Add-In. Start Outlook.

Items cannot be deleted from archives. This may not be a problem at all. There is a five-minute delay before the Index service catches up with a user deleting something from an archive, so users should wait some time before checking that items have been deleted. Extra copy of an item when archive fails. If an item cannot be archived for some reason, and you have chosen not to delete the original item after archiving on the Archiving Actions tab of the Exchange Policy Properties dialog box, it is possible that the user may have an extra copy of the item. User cannot store items in an archive. Following a power or disk failure, Enterprise Vault may need to reconstruct indexes for one or more archives. If Enterprise Vault is reconstructing indexes for some archives, it rejects all archive and retrieval operations for those archives until the reconstruction is complete, so users of those archives cannot archive or retrieve items. A user whose archive index is being reconstructed cannot archive items, but does not receive any error message. Other archives are unaffected by the replay operations, so archive and retrieval operations can continue normally. The solution is to wait until Enterprise Vault has finished reconstructing the indexes. Archiving appears to work, but the log shows an error. If the error message is An error was detected whilst accessing the Vault Database "vaultstore", the password to the vault store may have been changed but the Storage service has not been stopped and restarted. Stop the Storage service and restart it so that the service uses the new password. Error: RPC Server is Unavailable. You can receive a message that an RPC Server is unavailable in the following situations:

When you are using the Administration Console to add Enterprise Vault services. When you are running the Enterprise Vault Configuration Program to configure your system.

When you are remotely managing a computer that is running Enterprise Vault services. Each Enterprise Vault computer requires a registered IP address, and the DNS properties for the TCP/IP protocol must be defined.

Troubleshooting Problems with Enterprise Vault components

399

You may see this problem if the computer on which you are configuring the Enterprise Vault services does not have any WINS servers defined, and you have chosen not to enable DNS for Windows Resolution on the TCP/IP Protocol property page for WINS. You can either use DNS for service control management or enable DNS for Windows resolution. If this does not solve the problem, set up the Administration Console computer to use LanMan names instead of DNS names to connect to Service Control Manager. To do this, set the following registry string value to 1:
On a 32-bit installation of Windows: HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault \Admin \UseLanmanNameForSCM On a 64-bit installation of Windows: HKEY_LOCAL_MACHINE \SOFTWARE \Wow6432Node \KVS \Enterprise Vault \Admin \UseLanmanNameForSCM

Items never become eligible for archiving, or manual archives do not work, or an item cannot be restored. All of these problems can happen if an Enterprise Vault server does not have the necessary Windows codepages installed. If you need to install extra languages, see the following article in the Microsoft Knowledge Base: http://support.microsoft.com/?kbid=177561 Microsoft Message Queue Server: MQIS Initialization Error. There is a known MSMQ Server problem that results in the following error message:
Error: 0xc00e0013 No connection with the Site's controller.

Alternatively, the following error may be logged in the Windows Application Event Log:
MQIS Database Initialization Error.

These errors may be caused by the lack of, or the misplacement of, the ODBC System Data Source Name (DSN) used to connect SQL Server to the MQIS database. For more information on how to solve this problem, see the following article in the Microsoft Knowledge Base: http://support.microsoft.com/?kbid=193510

400

Troubleshooting Techniques to aid troubleshooting

Restoring items for users

There may be occasions when you need to restore items on behalf of users. With suitable permissions, it is possible for you to restore items from any archive to any mailbox. The account you use to retrieve the items must have the following features:

Have Domain Admin permissions Have permissions to write to the user's mailbox Have read permissions on the archive Be a member of the local administrators group on the Enterprise Vault computer that is running the appropriate Exchange Mailbox task.

To restore an item on behalf of a user

1 2 3 4 5 6 7

In the Vault Administration Console, display the properties of the archive that contains the item to restore. Click the Permissions tab, and then click Add. Add yourself to the list of users. Start the Enterprise Vault Web application, and log on to it as yourself. Click the Search Vault icon. On the Search Archive page, select the archive that contains the item you want to restore. Restore the item to the appropriate mailbox.

Techniques to aid troubleshooting

This section provides information on the following topics:

Running on Demand: Run Now How to use Report Mode to test the Exchange Mailbox task Moved Items report from the Exchange Mailbox task Using tracing Using the Deployment Scanner Creating a mail message that contains the Outlook Add-Ins log How to modify registry settings

Troubleshooting Techniques to aid troubleshooting

401

Running on Demand: Run Now

The archiving tasks normally run according to a schedule that you set up. However, you may sometimes want to run a task outside this schedule. On such occasions, you can use Run Now to run the task immediately. Run Now is often useful when you are piloting or demonstrating Enterprise Vault. To run an Exchange Mailbox or Public Folder task immediately

1 2 3 4 5 6

In the left pane of the Administration Console, expand the Vault Site hierarchy until the Enterprise Vault Servers container is visible. Expand the Enterprise Vault Servers container. Expand the computer that runs the task you want to start. Click Tasks. In the right pane, right-click the task that you want to run and then, on the shortcut menu, click Run Now. Complete the Run Now dialog box, and then click OK.

How to use Report Mode to test the Exchange Mailbox task

When you run an Exchange Mailbox task in report mode, the task does not perform the processing that is done in other modes. Instead, it produces a report that shows the archiving and shortcut processing that the task would perform if it ran as a normal scheduled task. The report also includes information that is relevant to archiving based on quota, or based on age and quota. Hidden mailboxes do not appear in the report. The report file is in the Reports\Exchange Mailbox Archiving subfolder of the Enterprise Vault installation folder (for example C:\Program Files (x86)\Enterprise Vault\Reports\Exchange Mailbox Archiving). The file name is as follows:
EV_ARCHIVING_exchangeserver_yyyymmddhhmmss.TXT

where exchangeserver is the Exchange Server that is associated with the task and yyyymmddhhmmss is the date and time when the report was generated. The fields within the file are tab-separated so that you can easily transfer them to a spreadsheet program for analysis. For each mailbox, the report provides the details that are shown in Table D-3 about the processing that would be performed on a real run of the Exchange Mailbox task.

402

Troubleshooting Techniques to aid troubleshooting

Table D-3 Field

System Name

Fields in an Exchange Mailbox task report Description

The name of the Exchange Server computer for which you have generated the report. The legacy distinguished name. The primary Windows account for the mailbox. One of the following: New, Enabled, Disabled, or Suspended. The date on which the mailbox was checked. The time at which the check started. The time at which the check finished.

Mailbox name Associated account Mailbox state Date Start time End time

No of archivable items An archivable item is one that Enterprise Vault archives when the item meets the archiving criteria. An archivable item must be one of those listed in the message classes that Enterprise Vault archives automatically. Enterprise Vault has a number of standard message classes that it archives, and you can add more as necessary. To view or change the Enterprise Vault message classes, view the properties of the Enterprise Vault Directory and then click the Advanced tab. Total size of archivable The total size of items that Enterprise Vault will archive when the items items meet the archiving criteria. No of archivable folders No of items ready to archive The number of folders in the mailbox from which Enterprise Vault will archive. An item that is ready to archive is an archivable item that meets the archiving criteria and so would be archived on a real run of the Exchange Mailbox task. Depending on the number, it could take more than one run of the Exchange Mailbox task to archive this number. The total size of items that would be archived on a real run of the Exchange Mailbox task. Depending on the number, it could take more than one run of the Exchange Mailbox task to archive this number. The number of items that are larger than the Start with items larger than setting on the Archiving Rules tab of the Exchange Policy Properties dialog box. These items are archived before all others.

Size of items ready to archive

No of large items

Troubleshooting Techniques to aid troubleshooting

403

Table D-3 Field

Total size of large items

Fields in an Exchange Mailbox task report (continued) Description

The total size of items that are larger than the Start with items larger than setting on the Archiving Rules tab of the Exchange Policy Properties dialog box. The number of messages that would be archived on a single, real run of the Exchange Mailbox task. The total size of items that would be archived on a single, real run of the Exchange Mailbox task. The mailbox storage limit. The used percentage of the mailbox storage limit. The unused percentage of the mailbox storage limit.

No of messages that would be archived Size of messages that would be archived Quota limit Quota used % of Quota free

Space held by existing The mailbox space that is used by items that have the status pending items Pending Archive. Average size of shortcut (KB) No of Expired Shortcuts The average size of a shortcut in the mailbox.

The number of shortcuts in the mailbox that are ready to be deleted, according to the criteria you have set on the Storage Expiry tab of the Site Properties dialog box. The number of shortcuts in the mailbox that are ready to be deleted because the corresponding items have been deleted from an archive. This value depends on the setting Delete orphaned shortcuts on the Shortcut Deletion tab of the Exchange Mailbox Properties dialog box. The number of shortcuts in the mailbox that are ready to be deleted because they have reached the age at which to delete shortcuts. This value depends on the setting Delete shortcuts in folders on the Shortcut Deletion tab of the Exchange Mailbox Properties dialog box. The number of mailbox folders to which shortcuts have been moved or copied from other folders.

No of Orphaned Shortcuts

No of Old Shortcuts

No of Folders containing moved items No of moved items identified

The number of shortcuts that have been moved or copied to another mailbox folder. This figure is the total for all the folders in the mailbox.

404

Troubleshooting Techniques to aid troubleshooting

Table D-3 Field

Archiving policy applied

Fields in an Exchange Mailbox task report (continued) Description

The Exchange Mailbox policy that applies to the mailbox.

If you have chosen to archive until a percentage of mailbox storage limit is free, then the reporting figures are based on the first quota found when examining the mailbox quota settings in the following order:

Prohibit send and receive Prohibit send Issue warning

When using report mode, you may find it helpful to run the Exchange Mailbox task on demand, rather than using the normal schedule. You can do this by using Run Now. See Running on Demand: Run Now on page 401.

Moved Items report from the Exchange Mailbox task

The Exchange Mailbox task Moved Items report shows information about the numbers of moved and copied shortcuts. The report shows this information for each folder of the mailboxes that Enterprise Vault processes in a run of an Exchange Mailbox task. The report also includes information about any moved or copied shortcuts whose retention category has been updated. Enterprise Vault produces the report after the following types of Exchange Mailbox task run:

A scheduled run A run that you start with the Run Now option, in Archiving and shortcut processing mode or Shortcut processing mode

Hidden mailboxes do not appear in the report. The report file is in the Reports\Exchange Mailbox Archiving subfolder of the Enterprise Vault installation folder (for example C:\Program Files (x86)\Enterprise Vault\Reports\Exchange Mailbox Archiving). The file name is as follows:
MovedItemsUpdateSummary_exchangeserver_yyyymmdd.txt

where exchangeserver is the Exchange Server that is associated with the task and yyyymmdd is the date when the report was generated.

Troubleshooting Techniques to aid troubleshooting

405

The fields within the file are tab-separated so that you can easily transfer them to a spreadsheet program for analysis. For each mailbox folder, the report provides the details that are shown in Table D-4. Table D-4 Field
Mailbox Name Associated Account Mailbox Folder Date Start time End time

Fields in an Exchange Mailbox task Moved Items report Description

The legacy distinguished name. The primary Windows account for the mailbox. The mailbox folder to which the information applies. The date on which the task processed the mailbox. The time at which processing started. The time at which processing finished.

No. of moved shortcuts The number of shortcuts that have been moved into this mailbox folder. No. of copied shortcuts The number of shortcuts that have been copied into this mailbox folder. No. of shortcuts with updated Retention Category No. of failed updates Archiving policy applied The number of shortcuts that have had their retention category updated.

The number of shortcuts for which an update failed. The Exchange Mailbox policy that applies to the mailbox.

Using tracing
The tracing functionality in the Administration Console enables you to select from a number of supplied Dtrace scripts that collect tracing information. If you log a support call, Symantec Corporation may ask you to run a trace to aid problem diagnosis. To enable traces

1 2 3

In the Administration Console, expand the Enterprise Vault site until the Enterprise Vault Servers container is visible. Expand the Enterprise Vault Servers container. Expand the Enterprise Vault server on which you want to run a trace.

406

Troubleshooting Techniques to aid troubleshooting

4 5

Click the Enterprise Vault server. On the Tools menu, click Advanced Features to select it. Note that this setting is not remembered; it applies only to the current session of the Administration Console.

Press F5 to refresh the view. Underneath the server you now see a Traces container. You are now ready to create a new trace. The New Trace wizard asks for the following:

Which trace category to trace. This is the Enterprise Vault subsystem that in which your problem is likely to be contained. You might pick, for example, "Search and Indexing issues" or "Restoring and Retrieval issues". A title for the trace. If you have logged a support call, you may want to include the call number in the trace title. This title is used in the listing of traces in the Administration Console and is also included in the trace log file. An optional description of the trace. This is for your own notes. The amount of time to run the trace. Trace files can quickly get large, so a few minutes is usually the amount of time to choose. A maximum size for the log file. The trace will stop if the log file reaches this maximum size. Which folder to use to store the log file.

To create a new trace

1 2

In the Administration Console, enable traces as described in this section. Right-click the Traces container under the server on which you want to run a trace and, on the shortcut menu, click New and then Trace. The New Trace wizard starts. Work through the wizard. Once you have started the trace, you can view its properties by double-clicking the trace name in the Administration Console. You have options to open or copy the log file, but these are unavailable until the trace is complete.

Using the Deployment Scanner

If there is a problem you are trying to solve you may find it useful to run the Deployment Scanner to analyze a servers environment. Additionally, if you call Symantec support you may be asked to run the Deployment Scanner.

Troubleshooting Techniques to aid troubleshooting

407

You can run Enterprise Vault Deployment Scanner from within the Administration Console. To enable the Deployment Scanner in the Administration Console

Start the Administration Console on the server on which you want to run the Deployment Scanner. You cannot run the Deployment Scanner on a remote server. On the Tools menu, click Advanced Features to select it. Note that this setting is not remembered: it applies only to the current session of the Administration Console. You are now ready to run the Deployment Scanner.

To run the Deployment Scanner from the Administration Console

1 2 3

In the Administration Console, expand the Enterprise Vault site until the Enterprise Vault Servers container is visible. Expand the Enterprise Vault Servers container. Right-click the Enterprise Vault server on which you are running the Administration Console and, on the shortcut menu, click Deployment Scanner. Work through the Deployment Scanner wizard. The Deployment Scanner always saves a report in the Enterprise Vault Reports folder. Additionally, if you choose the option to gather support information, the report is also stored in the .CAB file with the gathered information, in the folder you select.

Creating a mail message that contains the Outlook Add-Ins log

The Send Log button in the Outlook Add-ins log viewer enables the user to create a mail message that contains the Outlook Add-Ins log. To mail the Outlook Add-Ins log:

In Outlook, open the Enterprise Vault diagnostics dialog box. How you open this dialog box depends on the version of Outlook:

In Outlook 2003/2007, click Help, then About Enterprise Vault, and then Tech Info.

408

Troubleshooting Techniques to aid troubleshooting

In Outlook 2010, click the File tab, then Enterprise Vault, and then Additional support information.

Click Send Log. Outlook creates a mail message that contains the text of the log. The Subject is set to Enterprise Vault Outlook Add-In log file and the To field is left blank.

Add more information if required, then send the message.

You can use the SendLogFileMaxSizeMB and SendLogFileRecipients registry values on users' computers to control the behavior of Send Log. SendLogFileMaxSizeMB controls the maximum size of the message (default 5 MB), and SendLogFileRecipients specifies default recipients. For more information, see the Registry Values manual.

How to modify registry settings

For the most part you can configure Enterprise Vault with the Vault Administration Console, but there are occasions when you may need to use other tools. This section lists changes to the Windows registry that you can make to change the behavior of Enterprise Vault. This section includes information on the following topics:

Changing the MSMQ timeout Optimizing offline storage by sharing items Controlling content conversions Setting the maximum number of message recipients

Changing the MSMQ timeout

Enterprise Vault has a timeout value that limits the amount of time that services wait for responses from MSMQ. The occurrence of a timeout usually indicates a problem. However, a timeout can be expected to occur in a few cases, and so a reasonably short wait time is required for the component not to be idle for too long. If you make the timeout value too short, systems that are heavily loaded can signal timeout errors because they have not had time to complete the request. On the other hand, if you make the timeout value too long, this can slow the overall throughput of Enterprise Vault because timeouts are expected in some circumstances.

Troubleshooting Techniques to aid troubleshooting

409

The default timeout is 20 seconds, and the maximum value you can set is 300 seconds. If 300 seconds is not sufficient, you must do more investigation into your MSMQ and Enterprise Vault performance. We recommend that you adjust the timeout value in small steps, such as five seconds, until you have a suitable value. To change the timeout value

1 2

Edit the registry on the computer that is running the Enterprise Vault Storage service. Edit, or if necessary add, the following DWORD value:
HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault \Storage \QueueTimeout

3 4

Set the value to the number of seconds to wait. Stop and restart the Storage service and Exchange Mailbox task.

Optimizing offline storage by sharing items

Some HSM software products do not support the OFFLINE file attribute to indicate that a file has been moved to HSM secondary storage. In such cases, the Storage service assumes that a file is offline when a specific number of days have elapsed since the file was last modified. To specify the number of days before the Storage service assumes that a file is offline, you use the OfflineDays registry value. The default value is 0, which means that the Storage service assumes that items are always online. If several users share an item, the Storage service archives another copy of the item. All copies of a shared item are usually archived at the same time so that only one is archived.

410

Troubleshooting Techniques to aid troubleshooting

To change the offline setting

1 2

Edit the registry on the computer that is running the Enterprise Vault Storage service. Edit, or if necessary add, the following DWORD value:
HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault \OfflineDays

Set the value to the number of days that items stay online. The default value is 0, which stops the Storage service using the secondary offline status checking. If you set OfflineDays to 0, then the offline status is determined by the OFFLINE file attribute setting. The new setting is used immediately.

Controlling content conversions

By default, Enterprise Vault stores the compressed text or HTML versions of archived items. This lets users search for items and preview their contents before retrieving them. If you have no requirement for users to search on or preview the contents of items, you can improve performance by turning off content conversion. To control content conversions

1 2

Edit the registry on the computer that is running the Enterprise Vault Storage service. Edit, or if necessary add, the following DWORD value:
HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault \BypassConversions

3 4

Give BypassConversions a value of 0 to perform content conversions or 1 to turn off content conversion. Stop and restart the Storage service to make the change take effect.

Troubleshooting About moving an Indexing service

411

Setting the maximum number of message recipients

By default, Enterprise Vault does not archive messages that have more than 5000 recipients but you can control this setting. To set the maximum number of message recipients:

Edit the MaxNumOfRecipients registry value on the Exchange Mailbox task computer. This value is under the following registry key:
HKEY_LOCAL_MACHINE \SOFTWARE \KVS \Enterprise Vault \Agents

You can also use the SkipRecipCheckSize registry value to set the minimum size of message that is checked for its number of recipients. The size includes the size of the recipient list itself. The default for SkipRecipCheckSize is 750 KB. Messages that are larger than this are checked for the number of recipients, whereas smaller messages are assumed to have fewer than the maximum number of recipients.

About moving an Indexing service

The instructions in this section let you do the following:

Move an Indexing service and all its data to a different computer. Combine two or more Indexing services into one. Move some of an Indexing service's data to a different Indexing service.

Warning: We strongly recommend that you do not move an Indexing service because of the amount of work involved and because of the potential for introducing mistakes that take time to rectify. You require a database tool for viewing and changing data stored in the Enterprise Vault Directory service. Some examples of such tools are VisData (a sample application provided with Microsoft Visual Basic) and Query Analyzer (part of Microsoft SQL Server). The following instructions do not include details of how to set up your database tool to access the Vault Directory database. This section includes information on the following topics:

Notes on the Indexing data structure of the Vault Directory database Moving the Indexing service

412

Troubleshooting About moving an Indexing service

Notes on the Indexing data structure of the Vault Directory database

Each Indexing service has an entry in the Directory database, referred to as the IndexingServiceEntry. Each IndexingServiceEntry contains the ID of a ComputerEntry in the Directory database. The ComputerEntry contains the name of the computer on which the Indexing service is installed. An Indexing service has one or more root path locations. These are the folders on the local computer in which the Indexing service stores index data, such as D:\VaultData\Indexes. There is a Vault Directory database entry for each root path location. This is the IndexRootPathEntry. Each IndexRootPathEntry contains the folder name for the root path location in the IndexRootPath field, and the IndexingServiceID for the corresponding Indexing service in the IndexServiceEntryID field. An IndexingServiceEntry does not contain a list of its IndexRootPathEntry records. The link is the other way round; an IndexRootPathEntry contains a pointer to its IndexingServiceEntry. Each archive has a Vault Directory database entry. This is the VaultEntry. Each VaultEntry contains the ID of the IndexRootPathEntry where the archive's index data is stored.

Moving the Indexing service

We recommend that, when moving an Indexing service's data, you move whole root paths intact and do not change the IndexRootPathEntry used by individual archives. These instructions describe moving whole root paths. In the instructions below, the computer from which you are moving the Indexing service is the source computer, whereas the computer to which you are moving the service is the target computer. To move the Indexing service

1 2

Install the Enterprise Vault software on the target computer, as described in the Installing and Configuring Enterprise Vault manual. Configure an Indexing service on the target computer. You do not need to create root path locations using the Administration Console. Any locations that you create with the Administration Console are not used for the indexes moved to the target computer. You can also move data to an existing Indexing service, using exactly the same steps below. The moved indexes are placed in new root path locations and do not share existing root path locations.

Troubleshooting About moving an Indexing service

413

Perform the following steps to obtain the Vault Database Directory entry for the Indexing service on the target computer:

Search the ComputerEntry records in the directory until you find the entry for the target computer. Note the ComputerEntryId for this entry. Search the IndexingServiceEntry records in the directory for the one that contains this ComputerEntryId. Note the IndexingServiceEntryId of this IndexingServiceEntry record. You use this in 9.

Perform the following steps to find the Directory database entry for the Indexing service on the source computer:

Search the ComputerEntry records in the directory until you find the entry for the source computer. Note the ComputerEntryId for this entry. Search the IndexingServiceEntry records in the directory for the one that contains this ComputerEntryId. Note the IndexingServiceEntryId of this IndexingServiceEntry record. You use this in 5.

Perform the following steps to identify all the Indexing service root path locations on the source computer:

Search the IndexRootPathEntry records in the directory for those that contain the IndexingServiceEntryId for the source computer. This is the value you obtained in 4. Decide which root path locations to move to the target computer. You can choose to move all of them, if you want to move the entire Indexing service to a new computer, or only some of them, if you want to spread the load between two Indexing services. Make a list of all the root path locations that you want to move. This list should record the IndexRootPathEntryID for each root path and the IndexRootPath folder where the index data is stored.

Perform the following steps to create folders on the target computer corresponding to the root path locations:

On the target computer, manually create one folder for each root path on the list that you made in 5.

414

Troubleshooting About moving an Indexing service

There is normally one root path for each disk used for storing index data. If the target computer has fewer disks than the source computer, this may not be possible. In this case, create multiple folders on the same disk. There is no harm in this: the important thing is to create as many folders as there are root paths to be moved. Do not try to combine multiple root paths into one, or to split the data within a root path and store it in multiple root paths.

Assign one of these folders to each root path on the list that you made in 5. You must create each new folder on the target computer on a disk with enough free space to hold all the data stored within its corresponding root path on the source computer. If using NTFS, modify the security permissions on each folder (and on each file created in the folder) so that it is fully accessible to the Administrators group but not accessible to anyone else.

7 8 9

Use the Service Control Manager to stop the Indexing services on both the source and target computers. Wait until both services have stopped. For each root path location on the list that you created in step 5, do the following:

Recursively copy all the files and subfolders from the root path location on the source computer to the corresponding folder on the target computer (that is, the folder you created in 6). There must be a one-to-one correspondence between the root path locations on the source computer and the new folders on the target computer. Do not use existing folders on the target computer, and do not copy more than one root path to the same folder. When the data has been safely copied, use your database tool to select the root path's IndexRootPathEntry in the directory, using its ID recorded on the list made in 5. Change the value in the IndexingServiceEntryID field to the ID that you obtained in 3. This associates this IndexRootPathEntry with the Indexing service on the target computer. Change the value in the IndexRootPath field to the name of the folder on the target computer into which the data for this root path has just been copied. Use the full, correct path name for the folder, including the drive letter.

Troubleshooting About moving an Indexing service

415

Ensure that the modified IndexRootPathEntry is written back to the directory.

Do not delete any data from the source computer at this stage.

10 Perform the following steps to start the Indexing services:

Start the Indexing service on the target computer. Identify all the archives whose data has been moved by searching the directory for all VaultEntry records that contain one of the IndexRootPathEntry IDs on the list created in 5. Verify that the data has been copied and that the Vault Directory database has been updated correctly. You can do this by using the Web Access application to search each archive. When you are sure that the target computer is working correctly, restart the Indexing service on the source computer if it still contains other root paths that were not moved. Do not delete the index data from the source computer until you have safely backed it up on the target computer.

416

Troubleshooting About moving an Indexing service

Index

Symbols
'Archive Explorer' in Basic OWA client [Archive Explorer] 133 'Archive Explorer' in Premium OWA [Archive Explorer] 133 'Reply To All' mode [Reply To All] 138 'Search Vaults' on Basic toolbar [Search Vaults] 138 'Search Vaults' on Premium toolbar [Search Vaults] 139

A
Action for failed items 101 Add server to Intranet Zone 118 AddServerToIntranetZone 119 Admin permissions 23, 35 Admin service modifying 48 Administration 39 Administration Console 34, 42 Administration Console commands role access (table) 27 Administration Console containers role access (table) 29 Administrator roles 24 Administrator security 23 Age and quota-based archiving 295297, 299 Age-based archiving 295296 Allow script in public folders 119 Allow script in shared folders 119 Allow shortcut copy 120 AllowCopyShortcut 120 AllowNonAsciiFilenames 168 AllowScriptSharedFolders 120 Application logs monitoring 40 Application roles 23 Applying settings 106 Archive confirmation 133 Archive deleted items 107 Archive draft items 101, 108 Archive Exchange Managed Folders 108

Archive Explorer connection mode 140 Archive Explorer tweaks 176 Archive naming convention 109 Archive queue 313 Archive subfolders 134 Archive unexpired Calendar Events 110, 164 ArchiveDeletedItems 108 ArchiveDraftItems 101 ArchiveExplorerDelete 177 ArchiveExplorerForward 177 ArchiveExplorerHelp 177 ArchiveExplorerReply 177 ArchiveExplorerReplyAll 178 ArchiveExplorerRestore 178 ArchiveExplorerSaveAs 178 ArchiveExplorerSearch 179 ArchiveExplorerSettings 179 ArchiveManagedFolders2 108 ArchiveNameFormat 110 ArchiveNonExpiredCalEvents 110, 164 Archives deleting 93 exporting 209 moving 72, 75, 77, 79 Archiving disabling 308 Archiving General 100, 158 Archiving General advanced settings 106 Archiving only items with attachments 306 Archiving Statistics for Last Hour 202 Archiving strategies 295 Archiving task 284 Archving Statistics for Last Hour 205 Assigning permissions 35 Assigning roles 24 Audit database moving 97 Auditing 315 ASP example 319 configuring 316 connection pool size 321 creating database 316

418

Index

Auditing (continued) NSF migration 280 recording details 318 tuning 320 VBS example 318 viewing audit log 320 Authorization Manager 24 Automatic domain authentication 174 Automatic Monitoring 181 Automatic monitoring introduction 181 Automatically delete IE file cache 120 Automatically re-enable Outlook add-in 120 AutoReEnable 121

B
Backup checking 60 Enterprise Vault data 325 Enterprise Vault databases 325 fingerprint database 326 index locations 327 system databases 325 vault store databases 326 vault stores 326 Backup mode 324 index locations 324 PowerShell cmdlets 324, 328 vault stores 324 Backup Procedures 323 Basic archive function 134 Basic restore function 134 Behavior when Archive Explorer closes 121 Browser search Customizing user interface BSDeleteButton 174 BSRestoreButton 174 BSDeleteButton 174 BSRestoreButton 174 Building Blocks failover 335 Update Service Locations 335

ClearTextPrimary 159 Client connection 135 Client-driven migration 220 Clients configuring 99, 105, 157 Code pages for right-to-left custom shortcuts 111, 164 Codepage adding 46 adding default 46 deleting 46 Configuring Clients 99, 105, 157 Creating a new retention category 67 Critical status thresholds configuring 205 Customizations and best practice 295 Customizing Outlook integrated search 171 Customizing the Web Access application 167

D
Day-to-day administration 39 DefaultFormatCodepage 168 DefaultFormatType 169 DefaultRankResults 171 Delete shortcut after restore 136 Deleting a vault store 93 Deleting a vault store group 57 Deleting an archive 93 Deleting moved archives 90 Deletion 66 shortcut 67 Deploy forms locally 121 Deployment Scanner 406 Desktop policies Domino mailbox archiving 102 Exchange mailbox archiving 117 Directory Database maintaining 51 moving 95 Directory database clearing entries 343 Directory Service recreating services 344 Directory service computer recovery 348 Directory service SQL database recovery 348 Disk space for indexes 50

C
Change vault store group 56 Checking disk space for vault stores 46 Checking logs 43 ClearText copies of RMS Protected items 158

Index

419

Disk space for vault stores checking 46 Disks monitoring 46 Do not archive pending reminders 111, 165 Domino Administrator role 25 Domino archiving user access required for NSF migration 279 Domino desktop policy Advanced settings 102 Pause interval 103 Preemptive archiving threshold 103 Vault Cache 102 Domino mailbox and desktop Advanced settings editing 99 Domino mailbox policy Action for failed items 101 Advanced settings 100 Archive draft items 101 Archiving General 100 Lookup e-mail addresses 101 Reset archive names 102 Strip attachments to non-shortcut items 102 Domino Server journaling archiving 202 Domino Server Monitoring Details tab 204 Domino Server Monitoring Summary tab 203 DontArchiveItemsPendingReminder 111, 165 Download item age limit 141 DownloadShortcutHideProgress 130

E
Editing settings 99, 106 Enabling archiving for new mailboxes 69 Encode custom body using appropriate code pages 111 Enterprise Vault data files copy or move 342 Enterprise Vault database restoring 340 Enterprise Vault Event Log 43 Enterprise Vault Operations Manager roles 30 troubleshooting 396 Enterprise Vault services monitoring 40 Environment recovery procedure 338 EvMoveArchiveTask.exe.config 79 EVservice 42 EVSVR 337

EvTaskGuardian.exe.config 81 Exchange Administrator role 25 Exchange desktop policy advanced settings 117 Outlook 117 OWA 132 Vault Cache 139 Virtual Vault 146 Exchange journal policy Archiving General 158 Exchange Journaling task queues 287 notes 289 Exchange mailbox policy Advanced settings 106 Archiving General 106 Synchronize folder permissions 115 Exchange Mailbox Task Moved Items report 404 report mode 401 Exchange Mailbox task queues 284 notes 286 Exchange managed content settings 108, 301 Exchange managed folder preventing synchronization 305 synchronization 303 system default filter 303 Exchange managed folders 108, 301 Exchange Public Folder policy Archiving General settings 164 Exchange public folder policy Advanced settings 163 Exchange Public Folder task queues 289 notes 290 Exchange Server journal mailbox 199 Exchange Server Monitoring Details tab 201 Exchange Server Monitoring Summary tab 199 Expand distribution lists 159 ExpandDistributionLists 159 Expiry 66 storage 66 Exported files importing 210 Exporting archives 209 starting the export 212 wizard 209

F
Failed DL expansion behaviour 160 FailedDLExpansion 160

420

Index

Failover in a Building Blocks configuration 335 FederatedSearchMaxItems 172 FederatedSearchMaxVolSets 172 FederatedSearchTimeout 173 File Server Administrator role 26 Fingerprint database monitoring 58 moving 96 Fingerprint databases 350 maintaining 51 Folder properties visible 122 FolderPropertiesVisible 122 Force form reload on error 122 ForceOfflineAEWithOutlookCacheMode 140 Forward mode 136 Forward original item 123 ForwardOriginalItem 123 Frequency on Monitoring tab of Site Properties 182 FSA databases maintaining 53 FSA Reporting troubleshooting 396 Future item retention category 112 FutureItemsRetCat 112

Integrated search Customizing user interface ISDeleteButton 175 ISRestoreButton 175 ISShowRetention 175 Internet Explorer security settings 376 InternetOpenTypeDirect 131 ISDeleteButton 175 ISRestoreButton 175 ISShowRetention 175 Item Ready Retrieval 292

J
Journal archives moving 79 Journal mailbox customizing settings 307 Journal Mailbox Details table 201 Journal mailboxes checking 44 Journaling Location Details 204 Journaling task 287

H
Hidden mailboxes 71 Hotfixes Microsoft 359 HTMLNotNotes 169

L
Launch Archive Explorer 123 LaunchAEInBrowser 123 Limit automatic re-enabling of add-in 124 Locate and Migrate 219, 241 Scheduling 220 LocateNetAppFilers 254 Location for restored items 136 Lock for download item age limit 141 Logs checking 43 Lookup e-mail addresses 101 LookupNames 101

I
Immediate status check performing 207 Importing exported files 210 Include default and anonymous permissions 112 IncludeDefOrAnonPerms 112 IncludeInheritedRights 113, 160, 165 Index file locations recovery 349 Index location cmdlet syntax 329 Index locations 50 Index volumes 95 Indexing Administrator role 26 IndexingServiceEntry 412 Inherited permissions 113, 160, 165

M
Mailbox archives moving 77 mailbox archives moving 75 Mailbox archiving best practice 295 Mailbox policy Domino 100

Index

421

Mailbox policy (continued) Exchange 106 Mailbox properties visible 124 Mailboxes enabling archiving 69 hidden 71 MailboxPropertiesVisible 124 Maintaining SQL databases 50 Manual archive inserts 141 Mark PST files 124 MarkPSTs 125 Max archive requests per synchronization 147 Max attempts to archive an item 147 Max data archived per synchronization 148 Max delete requests per synchronization 148 Max item size to archive 149 Max item updates per synchronization 149 Max total size of contentless operations 150 Max total size of items to archive 150 Maximum message size to archive in MB 113, 160, 165 MaxMessageSizeToArchiveMB 160 MaxPreviewSize 169 Message Class exclude 141 Message Class include 142 Message properties visible 125 Message queues 281 access 281 purging 281 MessagePropertiesVisible 125 Messaging Administrator role 25 Microsoft Authorization Manager 24 Microsoft Operations Manager (MOM) 182 Migrating exported files 210 Modifying Admin service 48 MOM 182 configuring 183 installing 183 monitoring 183 optional configuration 184 Monitored data viewing 193 Monitoring 181 fingerprint database 58 MOM 183 SCOM 186 site properties 182 Monitoring Application logs 40

Monitoring database maintaining 53 moving 97 troubleshooting 396 Monitoring Details tab 195 Monitoring disks 46 Monitoring Enterprise Vault services 40 Monitoring journal mailboxes 44 Monitoring MSMQ queues 41 Monitoring parameters configuring 207 Monitoring system status 40 Move Archive 72 Accelerator restrictions 74 change performance 82 configuring 79 deleting moved archives 90 how it works 73 indexing levels 74 monitoring 87, 92 move statuses 89 reporting 92 retrying 91 starting, stopping and restarting 89 user deleted items 74 using 82 Move Archive Status table 196 Move Archive task 79 configuring 79 Move Archive wizard 82 MoveFailedArchivalNotes NSF migration 277 MoveFailedItemsToInbox 161 MoveNotEligibleForArchiveNotes NSF migration 277 Moving a fingerprint database 96 Moving a vault store 56 Moving a vault store database 96 Moving active archive to inactive archive 76 to new archive 75 Moving active archives 77 Moving inactive archive to active archive 76 Moving journal archives 79 Moving mailbox archives 77 between sites 77 Moving Monitoring database 97 Moving other mailbox archives 78

422

Index

Moving the audit database 97 Moving the Directory Database 95 MSMQ queue summary 282 MSMQ queues monitoring 41 MSMQ timeout 408

N
Noclient 170 NoSoftDeletes 131 NSF Administrator role 26 NSF migration auditing 280 behavior with failed items 277 editing the welcome message 274 effect on users 279 how to run wizard 280 item age limit 278 mail file limits 278 matching NSF files to archives 275 multiple instances 279 NSF file access control 278 NSF file locations 275 outline of the process 272 planning 273 scripted 269 standard mail templates 276 User ECL 279 Vault Service account 280 wizard assisted 271

O
Offline store required 142 Open mode 136 Operation Failed Archiving Task 285 Journaling task 288 Public Folder Task 290 Retrieval 292 Operations Manager accessing 190 introduction 189 monitoring 193 monitoring summary tab 194 roles 30 service tables 194 task tables 194 troubleshooting 396

Operations Manager (continued) using 191 Outlook Add-In behavior 125 Outlook advanced settings 117 OVItemArchiveAttempts 147 OVMaxItemArchivesPerSync 147 OVMaxItemDeletesPerSync 148 OVMaxItemUpdatesPerSync 149 OVMaxMessageSizeToArchiveMB 149 OVMaxToArchivePerSyncMB 148 OVMaxTotalToArchiveMB 150 OVMessageClassExclude 141 OVMessageClassInclude 142 OVPauseInterval 142 OVPerItemSleep 143 OVRequireOfflineStore 142 OVRootDirectory 144 OVRootDirectorySearchPath 144 OVSetupWizard 145 OVSyncArchiveTypes 145 OWA 'Archive Policy' context menu option 137 OWA Advanced settings 132 OWA2003ArchiveConfirmation 133 OWA2003ArchiveExplorerFromBasicNavbar 133 OWA2003ArchiveSubFolders 134 OWA2003BasicArchiveFunction 134 OWA2003BasicRestoreFunction 134 OWA2003ForwardMode 136 OWA2003OpenMode 137 OWA2003PremiumArchiveFunction 137 OWA2003PremiumRestoreFunction 138 OWA2003ReplyMode 138 OWA2003ReplyToAllMode 138 OWA2003RestoreConfirmation 138 OWA2003RestoreDeleteShortcut 136 OWA2003RestoreToRestoredItems 136 OWA2003SearchFromBasicNavbar 139 OWA2003ViewMode 139 OWA2010HideOWAArchivePolicy 137 OWAWebAppAlias 139

P
Partition rollover configuring 61 forcing 64 order 63 partition states 61 PowerShell cmdlet 64 Pause interval 142

Index

423

Pending shortcut timeout 113, 160, 165 PendingShortcutTimeout 113, 161, 166 Per item sleep 142 Performance counters LogicalDisk 198 Memory table 198 Processor table 199 VaultStores table 196 Performance tuning 310 Archive Queue 313 content conversion 312 excluding items 313 Storage service computers 311 Windoes Temp folder 311 Permissions assigning 35 controlling access 34 Vault Service account 372 Placeholder Application role 23, 27 Ports 355 configuring dynamic RPC ports 357 destination ports 357 Post Process Archived Item Journaling task 288 Power Administrator role 26 PowerShell backup commands 332 PowerShell cmdlets backup mode 324, 328 Partition rollover 64 remove custom settings 303 using in backup scripts 333 Preemptive archiving in advance 143 Preemptive archiving threshold 103 Premium archive function 137 Premium restore function 137 Printing behavior 125 PrintOriginalItem 126 Process Folders Public Folder Task 290 Process Item Archiving Task 285 Process Mailbox Archiving Task 285 Journaling task 288 Process Moved Items in Folder Archiving Task 285 Process System Archiving Task 285

Provisioning groups maintaining 69 PST Administrator role 26 PST configuration files 211 PST files Client-driven migration 220 marking 218 PST holding folder size 244 PST Import pause interval 126 PST Import work check interval 126 PST Locator task Switching off NetApp identification checks 254 PST Migration Locate and Migrate 241 PST migration 215 [PSTcheckpoint] section 227 [PSTcheckpoint] section process mode 228 [PSTcheckpoint] section report mode 227 client-driven 220 Client-driven migration 263 configuring the Locator Task 247 configuring the PST Collector task 248 configuring the PST holding folder 244, 264 configuring the PST Migrator task 249 creating a PST Migrator task 266 creating the PST Collector Task 245 creating the PST Locator Task 245 creating the PST Migrator Task 245 editing policy 243 editing PST file properties 258 editing the PST migration messages 265 enabling mailboxes 267 example initialization file for scripted migration 230 excluding network shares 257 in hosted environments 221 Locate and Migrate 219 marking PST files 218 NetApp device identification checks 254 outline of wizard 234 overview 216 Policy Manager output 227 process with Policy Manager 224 PST files on network drives and file servers 264 PST Locate and Migrate outline 251 running PST Collector task 259 running PST Locator task 258 running PST Migrator task 260

424

Index

PST migration (continued) Running the PST Locator task to find computers 252 Running the PST Locator task to find domains 252 Running the PST Locator task to find PST files 258 scheduling Locate and Migrate 220 Scripted 223 scripted migration event log 229 scripted preparation 226 scripting overview 223 selecting computers to search 255 setting up accounts to manage 250 setting up Locate and Migrate 242 size of PST holding folder 244 temporary files folder 266 tips 218, 237 tools 215 troubleshooting 260 users 239 wizard 233 wizard preparation 236 wizard starting 240 PST search interval 126 PSTImportNoWorkPauseInterval 126 PSTImportPauseInterval 126 PSTSearchInterval 126 Public folder archiving best practice 309 Public Folder operations 127 Public Folder task 289

Q
Queue Journal items 161 QueueJournalItems 161 Quota-based archiving 295297, 299

R
Recovery 337338 Directory service computer 348 Directory service SQL database 348 Enterprise Vault component 348 Index file locations 349 Shopping service files 349 using data-only backups 339 using full-system backups 338 vault store files 350

Recovery (continued) vault store SQL database 350 Recovery procedure 338 Registry entries checking after recovery 347 Registry values in NSF file migration 277 Remove PST entries 127 Remove server from Intranet Zone 128 RemovePSTEntries 127 RemoveServerFromIntranetZone 128 Reply behavior 128 Reply mode 138 ReplyToOriginalItem 128 Report mode 401 Reporting roles 30 troubleshooting 396 ReportVersions 80 RescheduleIntervalInMins 80 Reset archive names 113, 161 Reset archvie names 102 ResetArchiveNames 114, 161 Restore an Item Storage service 293 Restore confirmation 138 Restore Item Retrieval 292 RestoreToPSTOption 176 Restoring items for users 400 Retention Category creating 67 Retrieval queues 291 notes 292 RetryTimeInMinutes 81 Return failed items to inbox 161 Role administrator access to containers (table) 29 Roles assigning 24 assigning administrator 30 creating 33 determining current role 34 Enterprise Vault Operations Manager 30 modifying 31 resetting 34 Roles-based administration 23 Root folder 143

Index

425

Root folder search path 144 RPC over HTTP restrictions 128129 RPC over HTTP URL 129 RPCOverHTTPRestrictions 130 RPCOverHTTPUseDirectConnection 129

S
Safety copies configuring removal 59 managing 59 SCOM 182 configuration 187 monitoring 186 setting up 186 Search across all indexes 144 Search behavior 130 SearchRSS 173 Security alert during NSF migration 279 Servers installing software 340 renamed 341 Services recreating 346 starting 41 stopping 41 Services table 195 Set failed messages 'Do Not Archive' 114, 166 SetFailedMsgsDoNotArchive 101, 114, 166 SetForceFormReload 123 Setting a system message 94 Settings applying Advanced tab 106 editing Advanced journal policy 157 editing advanced public folder settings 163 editing Advanced tab 99, 106 SharePoint Administrator role 26 Shopping service files recovery 349 Shortcut deletion 67 Shortcut download progress 130 Shortcut sync for mail clients 114 Show content in Reading Pane 151 Show Setup Wizard 145 ShowAllMaxResults 173 Single instance storage monitoring 58 SkipDuplicateItems 80 Soft deletes 131

SQL databases maintaining 50 SQL queries 361 Start At on Monitoring tab of Site Properties 182 Starting a service 43 Starting services 42 Starting tasks 42 Starting tasks or services 41 Status check performing 207 Stopping a service 43 Stopping services 42 Stopping tasks 42 Stopping tasks or services 41 Storage Administrator role 26 Storage expiry 66 Storage service computers performance 311 Storage service queues 293 notes 294 Store Item Storage service 293 Strip attachments to non-shortcut items 102, 115, 166 StripAttachmentsToNonShortcutItems 102, 115, 166 Synchronize archive types 145 Synchronize folder permissions 115 Synchronize System Archiving task 286 Journaling task 288 SynchronizeFolderPermissions 115 System Center Operations Manager 2007 182 System mailbox troubleshooting 372 System message setting 94 System status monitoring 40

T
Task Applications role 26 Task guardian service 81 configuring 81 Tasks starting 41 stopping 41 Tasks table 195

426

Index

Threshold on Monitoring tab of Site Properties 182 Threshold number of items to trigger synchronization 152 Threshold total size of items to trigger synchronization 152 Troubleshooting 363 Archive Explorer items 370 Archive pending problems 390 archive problems 390 archiving fails 380381 client problems 368, 377 components 374 content conversion 410 cross-domain archiving 382 Deployment scanner 406 desktop clients 364 Directory service 377 Directory service problems 378 Directory service security problems 378 Enterprise Vault mailbox 372 Exchange Journaling Tasks 379 Exchange Mailbox Tasks 379 Exchange Server 2000 permissions 382 File System Archiving 376 icon problems 370 index data problems 370 Indexing data structure 412 Indexing events 385 Indexing service 383 Indexing service moving 411412 Indexing service starting problems 384 installation 363 installation procedure 364 low resources 376 mailbox problems 371 MAPI session not created 375 MAPISVC.INF 368 maximum message recipients 411 message restore problems 390 Moved Items report 404 moving shopping data 394 MSMQ dead letter queue 367 MSMQ message 375 MSMQ timeout 408 MSSQLServer 365 new mailbox problems 373 offline storage settings 409 online operation problems 390

Troubleshooting (continued) Operations Manager 396 Outlook Add-Ins log 407 Outlook Web Access Extensions 364 PowerPoint 371 queue access problems 390 queue creation problems 389 recovering lost disk space 394 registry settings 408 report mode 401 Reporting 396 resetting passwords 366 restored items 371 restoring items 400 Retrieval service 383 RPC server 370 Run Now 401 searches fail 384 server problems 367 servers 363 service not starting 375 Shopping service 391 Shopping service log messages 392 Shopping service performance 393 shortcut problems 369 specific problems 397 SQL problems 378 SQL Server licenses 366 SQL Server problems 365 Storage service 388 Storage service not starting 389 techniques 400 timeouts with large baskets 371 tracing 405 tracing levels 379 user archive access problem 376 user problems 369 various problems 397 vault store creation 390 vault store creation errors 391 Web Access application 368, 395 Web Access general problems 396 Web Access not working 395 Web Access page not seen 395

U
Update Basket Retrieval 292

Index

427

Update Shortcut Archiving Task 286 Public Folder Task 290 URLEncodeFilenames 170 Use proxy settings 131 UseFederatedSearch 173 UseFolderSwitchOnAEClose 121 UseNewStyleSearch 130 User interface tweaks 174 Users can archive items 153 Users can copy items to another store 153 Users can copy items within their archive 154 Users can hard delete items 154 Users can reorganize items 155 UseSelfInstallFunct 125

VVAutoSyncItemThreshold 152 VVDenyMultiContentlessOpsAboveMB 150 VVReadingPaneContent 151

W
Warn if default or anonymous permissions exist 116 Warn when mailbox not under quota after archiving run 116 Warning thresholds configuring 205 WarnWhenDefOrAnonPerms 116 WDS search auto-enable 145 Web Access application configuration 168 customizing 167 Web Access application settings checking 347 Web Application alias 139 Web Application URL 131 WebAppURL 132 Windows Event Viewer 43 running 44 Windows Service Control manager 42 Windows Temp folder performance 311

V
Vault Cache 102, 139 Vault Service account changing 36 NSF migration 280 permissions 372 Vault store change sharing level 55 moving to a different group 56 Vault store cmdlet syntax 330 Vault store databases maintaining 50 moving 96 Vault store files recovery 350 Vault store group configure sharing 55 deleting 57 managing 53 status 54 Vault store SQL database recovery 350 Vault stores deleting 93 View mode 139 ViewMessage_Format 170 Virtual Vault 146 VVAllowArchive 153 VVAllowHardDelete 155 VVAllowInterStoreCopyAndMove 154 VVAllowIntraStoreCopy 154 VVAllowReOrg 155 VVAutoSyncItemsSizeThresholdMB 153