Description

Enterprise Vault 15.2.1 introduces a new diagnostic component called LieModeLockMonitor.  Once enabled, it will monitor MAPI lie mode lock usage system-wide, 
and generate diagnostic events in the Enterprise Vault event log in case of lie mode lock errors.

Additionally, it can optionally collect memory dumps of any processes determined to be the cause of locking failures. By default, this component is disabled but can be enabled and configured via registry settings on the Enterprise Vault server.

Registry Configuration

The following registry values are available under:

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KVS\Enterprise Vault\LieModeLockMonitor

1. Enabled
   Value Type: DWORD
   Options:
   0 – Disable LieModeLockMonitor (default)
   1 – Enable LieModeLockMonitor
2. DumpsEnabled
   Value Type: DWORD
   Options:
   0 – Memory dumps are disabled (default)
   1 – Memory dumps are enabled
3. DumpFolder
   Value Type: REG_SZ (String)
   Description: Absolute folder path used for storing user-mode memory dumps. Ensure the folder has sufficient available space, as dumps can be large.
   Note: If DumpsEnabled is set to 1 and no DumpFolder is specified, dumps will be created in either the Enterprise Vault service account’s %TEMP% folder or %LOCALAPPDATA%\Temp.

Important Notes

• The LieModeLockMonitor component is a diagnostic feature and must only be enabled during evidence collection. Administrators must disable or delete the registry values once the required Dtrace logs, Event Logs, and memory dumps have been collected.
• After creating the LieModeLockMonitor registry values, administrators must restart the Enterprise Vault Admin Service for the diagnostic component to become active.