Event ID 2267: "Failed to make the message titled: %1 Archive Pending for Mailbox %2" when user's mailbox is on Exchange Litigation Hold

book

Article ID: 100039986

calendar_today

Updated On:

Description

Error Message

Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Event ID:      2267
Task Category: Archive Task
Level:         Error
Computer:      evserver1.ev.local
Description:
Failed to make the message titled: %1 Archive Pending for %2

V-437-2267

Cause

Exchange mailbox is on Litigation Hold and it has reached the RecoverableItemsQuota value. This quota imposes a limit to the Recoverable Items folder or dumpster. When a mailbox is placed on a Litigation Hold in Exchange, the user cannot delete items. Instead, Exchange creates a copy of each items in a hidden folder called "Recoverable Items".

When Enterprise Vault archives messages, an Exchange process called "copy-on-write" is triggered and it generates versioned copies in the "Versions" subfolder of the "Recoverable Items" folder. Eventually, the RecoverableItemsQuota is reached and the Archiving Task cannot modify or delete any more items.

A Dtrace of the ArchiveTask process shows the following entries:

(ArchiveTask) <22400> EV~E Event ID: 2267 Failed to make the message titled: %1 Archive Pending for Mailbox %2
(ArchiveTask) <22400> EV:H {CArchivingAgent::MakeItemPendingAndProcessMsg} HRXEX fn trace : Error [0x8004060c], [.\ArchivingAgent.cpp, lines (7434,7460,7464,7468,7472,7576,7629), built Jul 10 17:51:28 2013]
(ArchiveTask) <22400> EV:M {CArchivingAgent::MakeItemPendingAndProcessMsg:#7785} Com Result [0x8004060c]
(ArchiveTask) <22400> EV:M {CArchivingAgent::WriteWorkItemsToQueue()} Com Result [0x8004060c] Call to MakeItemPendingAndQueueMsg() failed


The HEX code 0x8004060c translate to 'The message store has reached its maximum size'.

For more information regarding Exchange Litigation Holds and "copy-on-write" process, refer to the following article:

Understanding Litigation Hold
https://technet.microsoft.com/en-us/library/ee861123.aspx

For more information regarding RecoverableItemsQuota, please refer to the following article:

Configure Deleted Item retention and Recoverable Items quotas
https://technet.microsoft.com/en-us/library/ee364752(v=exchg.160).aspx

 

Resolution

There are several options available to resolve this issue:
  • Option #1: Increase the mailbox RecoverableItemsQuota value. Increasing this value will allow Enterprise Vault to continue archiving the mailbox. However, the Exchange Administrator needs to monitor the mailbox quota usage, since the quota can be reached again.
     
  • Option #2: Reduce the addition of items to the Versions folder during the Enterprise Vault archiving process, disabling the shortcut creation during the archiving process (Mailbox Policy setting). This option can reduce the size of the "Recoverable Items" folder; however, if the RecoverableItemsQuota has been reached, the quota setting might be increased. In addition, users would be force to use Enterprise Vault Search to find archived emails.
     
  • Option #3: Disable the user for archiving, until the mailbox is disabled from Litigation Hold in Exchange.
     
  • Option #4: Disable the mailbox from Litigation Hold in Exchange.

Issue/Introduction

Enterprise Vault Archiving Task cannot archive a mailbox. The following event is generated:

Log Name: Veritas Enterprise Vault
Source: Enterprise Vault
Event ID: 2267
Task Category: Archive Task
Level: Error
Computer: evserver1.ev.local
Description:
Failed to make the message titled: %1 Archive Pending for %2


In addition, the affected user's mailbox is on Exchange Litigation Hold.