Items in the journal mailbox remain as pending archive when their attachments have been quarantined

Items in the journal mailbox remain as pending archive when their attachments have been quarantined

Article: 100013607
Last Published: 2015-03-06
Ratings: 0 0
Product(s): Enterprise Vault

Problem

Journal mailbox items remain as pending archive when their attachments have been quarantined and replaced with a text file

Error Message

A Dtrace of the JournalTask will show the following:

{CEVExchangeItem::DoInitialise:#434} Item is Envelope and Journal Task, querying the Attachment Table.
{CEVExchangeItem::DoInitialise:#460} requesting attachment row [0]. requested RMS format [False]
{CEVExchangeItem::DoInitialise:#517} Item maybe a forwarded managed folder item attached as .MSG
{CEVExchangeItem::DoInitialise} HRXEX fn trace : Error [0x80030050], [.\EVExchangeItem.cpp, lines {208,297,328,397,397,397,436,440,503,518,520}, built Jan 7 10:46:03 2014].
{CEVExchangeItem::Initialise} HRXEX fn trace : Unexpected fn exit path, [.\EVExchangeItem.cpp, lines {135,146,148}, built Jan 7 10:46:03 2014].
{CExchangeArchivableItem::InitialiseEVExchItem:#417} An error occurred [0x80030050]
{CArchivingAgent::ProcessItemInternal:#15064} Call to PI_GetMAPISession Failed RetryCount[3] [0x80030050]
:CArchivingAgent::ProcessItem() |Something has gone wrong and this has been our last retry. We will undo the archive pending message in the users mailbox, so leaving it as a normal message again |
{CExchangeShortcutAccessor::UndoMarkForArchiveEx} (Entry)
{CExchangeShortcutAccessor::UndoMarkForArchiveEx} (Exit) Status: [<0x40380>]
:CArchivingAgent::ProcessItem() |Exiting routine |
{CArchivingAgent::ProcessItemInternal:#15953} It took [1.286711] seconds to process item [A0BCDE2345FA6B7CD89012EF3456A789]. [0x80030050]
{CExchangeAdvancedPolicy::~CExchangeAdvancedPolicy:#44} Destructing policy object.
{AgentMessageDispenser::ActivateObject:#3708} An error that we don't specifically recognise has occurred, [0x80030050], so we'll just increment this messages retry count.
{AgentMessageDispenser::ActivateObject} (Exit) Status: [The dispenser was asked to repost the message to be retried later (0xc00408e2)]
{AgentMessageDispenser::ProcessNextMessage:#1032} It took [1.293830] seconds to process the [MsgID_ProcessItemExV7 (74)] MSMQ message body (ActivateObject). Processing the message [failed].
{AgentMessageDispenser::ProcessNextMessage:#1048} Processing MSMQ message body (ActivateObject) failed with [0xc00408e2]. The retry count will be incremented, and the message reposted to the end of the queue.

Cause

The Journal Mail Items have been modified, this has been seen with Symantec Mail Security for Exchange, where the original message that is attached in the Journal Envelope message is replaced with a plain text file named 'Quarantined Attachment.txt'.  When Enterprise Vault encounters such an item the Journal Archiving agent sees the Journal Mail item as a normal well formed Envelope message, however the text file attachment does not conform to a standard Envelope message.

Workaround

The program that has modified the problem messages should be reconfigured to not replace the attached original message with a text file.  If Mail Security for Exchange is identified as the program that has modified the messages there is a configuration document:

Solution

This issue has been addressed in the following releases:

Enterprise Vault 11.0.1 Cumulative Hotfix 1 Release
https://www.veritas.com/docs/000024613

Enterprise Vault 12

The following link contains information about Enterprise Vault 12
https://www.veritas.com/docs/000099905

Note: For information on how to obtain Enterprise Vault 12 see: How to obtain the license key and installation download for Veritas products

References

Etrack : 3533442

Was this content helpful?