Items in the journal mailbox remain as pending archive when their attachments have been quarantined
Article ID: 100013607
Updated On:
Description
Error Message
A Dtrace of the JournalTask will show the following:
{CEVExchangeItem::DoInitialise:#460} requesting attachment row [0]. requested RMS format [False]
{CEVExchangeItem::DoInitialise:#517} Item maybe a forwarded managed folder item attached as .MSG
{CEVExchangeItem::DoInitialise} HRXEX fn trace : Error [0x80030050], [.\EVExchangeItem.cpp, lines {208,297,328,397,397,397,436,440,503,518,520}, built Jan 7 10:46:03 2014].
{CEVExchangeItem::Initialise} HRXEX fn trace : Unexpected fn exit path, [.\EVExchangeItem.cpp, lines {135,146,148}, built Jan 7 10:46:03 2014].
{CExchangeArchivableItem::InitialiseEVExchItem:#417} An error occurred [0x80030050]
{CArchivingAgent::ProcessItemInternal:#15064} Call to PI_GetMAPISession Failed RetryCount[3] [0x80030050]
:CArchivingAgent::ProcessItem() |Something has gone wrong and this has been our last retry. We will undo the archive pending message in the users mailbox, so leaving it as a normal message again |
{CExchangeShortcutAccessor::UndoMarkForArchiveEx} (Entry)
{CExchangeShortcutAccessor::UndoMarkForArchiveEx} (Exit) Status: [<0x40380>]
:CArchivingAgent::ProcessItem() |Exiting routine |
{CArchivingAgent::ProcessItemInternal:#15953} It took [1.286711] seconds to process item [A0BCDE2345FA6B7CD89012EF3456A789]. [0x80030050]
{CExchangeAdvancedPolicy::~CExchangeAdvancedPolicy:#44} Destructing policy object.
{AgentMessageDispenser::ActivateObject:#3708} An error that we don't specifically recognise has occurred, [0x80030050], so we'll just increment this messages retry count.
{AgentMessageDispenser::ActivateObject} (Exit) Status: [The dispenser was asked to repost the message to be retried later (0xc00408e2)]
{AgentMessageDispenser::ProcessNextMessage:#1032} It took [1.293830] seconds to process the [MsgID_ProcessItemExV7 (74)] MSMQ message body (ActivateObject). Processing the message [failed].
{AgentMessageDispenser::ProcessNextMessage:#1048} Processing MSMQ message body (ActivateObject) failed with [0xc00408e2]. The retry count will be incremented, and the message reposted to the end of the queue.
Cause
The Journal Mail Items have been modified, this has been seen with Symantec Mail Security for Exchange, where the original message that is attached in the Journal Envelope message is replaced with a plain text file named 'Quarantined Attachment.txt'. When Enterprise Vault encounters such an item the Journal Archiving agent sees the Journal Mail item as a normal well formed Envelope message, however the text file attachment does not conform to a standard Envelope message.
Workaround
The program that has modified the problem messages should be reconfigured to not replace the attached original message with a text file. If Mail Security for Exchange is identified as the program that has modified the messages there is a configuration document:
Resolution
This issue has been addressed in the following releases:
Enterprise Vault 11.0.1 Cumulative Hotfix 1 Release
https://www.veritas.com/docs/000024613
Enterprise Vault 12
The following link contains information about Enterprise Vault 12
https://www.veritas.com/docs/000099905
Note: For information on how to obtain Enterprise Vault 12 see: How to obtain the license key and installation download for Veritas products
Issue/Introduction
Additional Information
