Error Message

A Dtrace against the JournalTask process shows the following:

CArchivingAgent::IsEligibleForArchive(/O=EXCHANGE ORGANISATION/OU=EXCHANGE ADMINISTRATIVE GROUP (SYMANTEC)/CN=RECIPIENTS/CN=JOURNALMBX) |The message titled: Problem Message will not be journaled as it has the Do Not Journal property set |

If there is a significant number of emails with the MAPI property set, then these can be changed to a value of false by setting the following Registry Key and restarting the Journal Task:

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\KVS\Enterprise Vault\Agents
[DWORD] ClearDoNotJournal
0 = off
1 = on

The MFCMAPI utility can also be used to remove the attribute manually. 

• Download and install MFCMAPI.
• Ensure an email profile is created that is configured to connect to the relevant Journal Mailbox.
• Run MFCMAPI.
• Go to Session - Logon and Display Store Table.
• Select the relevant email profile that is configured to connect to the Journal Mailbox.
• Double-click the Mailbox, which will open up in a new screen.
• Expand the container and select Inbox.
• Right-click and select Open contents table, which will open up in a new screen.
• Select the problem message.
• In the bottom pane, which lists the MAPI properties of the message, search the Named Prop Name column for the existence of the Property sz: "Do Not Journal"
• Right-click, select Delete Property and then OK to the prompt.
• Close MFCMAPI.
• Monitor the journal mailbox and ensure the emails are archived successfully.

If, after performing the steps above, the mail still does not archive, then this indicates the level of corruption is too high and the only option is to manually move/delete the message or leave the message in the Inbox.

 

 

There are instances where EV is unable to archive Exchange journal emails due to a certain level of corruption within the journal email itself. On occasions, the archiving process cannot move the emails to one of the failed folders due to corruption. For this reason, these items are stamped with a MAPI property, which informs the archiving process not to keep attempting to archive these emails on subsequent scans. In some instances, this is a transient issue and steps can be taken to allow the archiving process to retry.