Problem
Journal mailbox items remain as pending archive when their attachments have been quarantined and replaced with a text file
Error Message
A Dtrace of the JournalTask will show the following:
{CEVExchangeItem::DoInitialise:#460} requesting attachment row [0]. requested RMS format [False]
{CEVExchangeItem::DoInitialise:#517} Item maybe a forwarded managed folder item attached as .MSG
{CEVExchangeItem::DoInitialise} HRXEX fn trace : Error [0x80030050], [.\EVExchangeItem.cpp, lines {208,297,328,397,397,397,436,440,503,518,520}, built Jan 7 10:46:03 2014].
{CEVExchangeItem::Initialise} HRXEX fn trace : Unexpected fn exit path, [.\EVExchangeItem.cpp, lines {135,146,148}, built Jan 7 10:46:03 2014].
{CExchangeArchivableItem::InitialiseEVExchItem:#417} An error occurred [0x80030050]
{CArchivingAgent::ProcessItemInternal:#15064} Call to PI_GetMAPISession Failed RetryCount[3] [0x80030050]
:CArchivingAgent::ProcessItem() |Something has gone wrong and this has been our last retry. We will undo the archive pending message in the users mailbox, so leaving it as a normal message again |
{CExchangeShortcutAccessor::UndoMarkForArchiveEx} (Entry)
{CExchangeShortcutAccessor::UndoMarkForArchiveEx} (Exit) Status: [<0x40380>]
:CArchivingAgent::ProcessItem() |Exiting routine |
{CArchivingAgent::ProcessItemInternal:#15953} It took [1.286711] seconds to process item [A0BCDE2345FA6B7CD89012EF3456A789]. [0x80030050]
{CExchangeAdvancedPolicy::~CExchangeAdvancedPolicy:#44} Destructing policy object.
{AgentMessageDispenser::ActivateObject:#3708} An error that we don't specifically recognise has occurred, [0x80030050], so we'll just increment this messages retry count.
{AgentMessageDispenser::ActivateObject} (Exit) Status: [The dispenser was asked to repost the message to be retried later (0xc00408e2)]
{AgentMessageDispenser::ProcessNextMessage:#1032} It took [1.293830] seconds to process the [MsgID_ProcessItemExV7 (74)] MSMQ message body (ActivateObject). Processing the message [failed].
{AgentMessageDispenser::ProcessNextMessage:#1048} Processing MSMQ message body (ActivateObject) failed with [0xc00408e2]. The retry count will be incremented, and the message reposted to the end of the queue.
Cause
The Journal Mail Items have been modified, this has been seen with Symantec Mail Security for Exchange, where the original message that is attached in the Journal Envelope message is replaced with a plain text file named 'Quarantined Attachment.txt'. When Enterprise Vault encounters such an item the Journal Archiving agent sees the Journal Mail item as a normal well formed Envelope message, however the text file attachment does not conform to a standard Envelope message.
Workaround
The program that has modified the problem messages should be reconfigured to not replace the attached original message with a text file. If Mail Security for Exchange is identified as the program that has modified the messages there is a configuration document:
Solution
This issue has been addressed in the following releases:
Enterprise Vault 11.0.1 Cumulative Hotfix 1 Release
https://www.veritas.com/docs/000024613
Enterprise Vault 12
The following link contains information about Enterprise Vault 12
https://www.veritas.com/docs/000099905
Note: For information on how to obtain Enterprise Vault 12 see: How to obtain the license key and installation download for Veritas products
Related Knowledge Base Articles
References
Was this content helpful?
Translated Content
Please note that this document is a translation from English, and may have been machine-translated. It is possible that updates have been made to the original version after this document was translated and published. Veritas does not guarantee the accuracy regarding the completeness of the translation. You may also refer to the English Version of this knowledge base article for up-to-date information.