Overview:
There are three types of message journaling, Standard journaling, BCC journaling, and Envelope journaling, in Microsoft Exchange 2003. Microsoft Exchange 2007 only offers Envelope journaling in Standard or Premium journaling.

Exchange 2003 Standard journaling does not capture the expansion of distribution groups, does not journal BCC recipients, and does not journal alternate recipients. BCC journaling will capture the BCC recipient in the message and Envelope journaling will capture the BCC recipient in the envelope journal report, however this will not be displayed in the actual message.  For more information on enabling the different types of journaling see the Related Documents section article 275840.

Exchange 2007 Standard and Premium journaling behaves like Exchange 2003 Envelope journaling in regard to searchable recipients.


How Envelope journaling works and Distribution Lists (Exchange 2003 and Exchange 2007)
 

1. Envelope journaling, the Exchange server wraps the email into an envelope.  The original email becomes an attachment.  This attachment is wrapped with the Envelope's author/recipient list.  The Envelope wrapper contains all of the authors (From) and recipients (To/Cc/Bcc) of the email.   This list will include To/Cc/Bcc members, the To/Cc distribution list names, but it will not include the BCC distribution list name.  

 

2. Journal Task gathers the author/recipient list from the attachment (original) email.  During this process, the Journal Task expands the distribution lists and compares its list against the Envelope author/recipient list.

 

3. After comparing the two lists of authors/recipients, any extra authors/recipients found in the Envelope list are collected by the Journal task to be indexed as Undisclosed Recipients later.

 

4. Journal Task then discards the Envelope wrapper from the attachment email and begins the filtering process to verify the attachment email is suppose to be archived.   It passes through in this order, Selective, Custom then Journal Connector.

 

5. If the item is to be archived, the Journal Task follows the rules of the Journal Mailbox Policy.  

 

6. If the Policy is set to expand Distribution Lists, the Journal Task will do so.  Otherwise the item will be Archived and Indexed with the distribution list closed.  The Journal Task will also include the Undisclosed Recipients list to be Archived and Indexed.  

Note: The distribution list must not be hidden from the Global Address List (GAL) or Distribution List expansion will fail.

How BCC journaling works and Distribution Lists (Exchange 2003 only)
 

1. BCC journaling is similar to Envelope journaling except BCC journaling will insert the complete authors/recipient list is in the email itself and it will disclose the BCC field.  When using BCC journaling, Microsoft repeats the recipient list on the BCC filed:  BCC, TO, CC, BCC.  This repeat of the entire recipient field is a function of Microsoft and not Enterprise Vault.

 

2. The Journaling task begins the filtering process to verify the email is suppose to be archived.   It passes through in this order, Selective, Custom then Journal Connector.

 

3. If the item is to be archived, the Journal Task follows the rules of the Journal Mailbox Policy.  

 

4. If the Policy is set to expand Distribution Lists, the Journal Task will do so.  Otherwise the item will be Archived and Indexed with the distribution list closed.  The Journal Task will also include the BCC distribution list name and members to be Archived and Indexed.   

 

Note: Searches will not display the members of the Distribution Lists.  Members of  Distribution Lists can be searched according to the table below. (Figure 1)

Figure 1
 


The following email criteria is used in the examples below:

Email Criteria:
Each email used a distribution list (DL) in the TO and BCC recipients rows.  The two DL's were Chicago Users and Orlando Users.

The Searches were conducted via Discovery Accelerator and the Browser search using the TO field.

For BCC viewing behavior
The BCC recipient information can only be displayed in the review set of searches of Compliance Accelerator (CA) or Discovery Accelerator (DA) 2007 Service Pack 1 or later or CA / DA 8.x with the ECM API enabled.  The following viewing behaviors are the current expected behaviors:
- Exchange 2003 message with DL in the BCC field and the Journal Task's DL expansion setting set to either active or disabled
--- with neither Envelope or BCC Journaling active, nothing will be displayed
--- with Envelope Journaling active, DL expansion is forced to be active regardless of the Journal Task settings, the DL members will be displayed, but not the DL name
--- with BCC Journaling active, the DL name will be displayed, but the DL members will not be displayed

- Exchange 2007 message with DL in the BCC field
--- with either Standard or Premium Journaling enabled, DL name will be displayed, DL members will not be displayed (the same as Exchange 2003 BCC Journaling).  This behavior is due to Exchange 2007 DL expansion providing only the SMTP e-mail addresses of the DL members and not providing the member aliases.