Forum Discussion

David_Lee's avatar
David_Lee
Level 3
19 years ago

AD Distribution groups

EV 5 SP5, Exchange 2003 SP1

In the journaling functionality of exchange / kvs it seems as though kvs does not store the meta data for members of the distribution list. You can only review the distribution group membership when viewing the whole e-mail in outlook but at that time the distribution group resolves itself to the current membership... As a compliance issue this is not good as the distribution group may have changed...

Can anyone confirm / deny this for me please?
  • Drache - just spotted your last post. Isn't it the best typo yet? :-) In EV if something misbehaves and I find a reg key for it I always set it even if it's just reiterating the (supposed) default behaviour. I think it was IncludeInheritedPermissions in CP2 that turned me on to this way of working with EV. Sad but true :-(.

    David - you are getting there. Fantastic stuff dude.

    Dino - oh no. A bug d'you think? The good news is that you ARE compliant for SOX et al at the data level. Your problem is not "this is the email, tell us who knew about it" - you can do that... it's the "tell us all the email xxx recieved" you can't do right? If it's a bug to fix or a hack to the indexes then it can all be made right can't it?!? I know nothing about CA. Have you tried DA instead? (I know nothing about DA either by the way!)

    Suggest you put the call into Symantec and let us know how is goes? Unless Ghost, Dodo, Drache, etc know?



    David
    http://www.UDStech.com

13 Replies

  • Ahhh.... It's like a light has been switched on!!!!

    Envelope journaling is what I need.... I am now off to turn it on!!!!

    Thanks for your patience gents.. You are all very freindly and helpfull... I hope I can return the favour to someone else in this forum...

    Regards

    Dave
  • We are presently using envelope journaling however, are finding that expansion of distribution lists (especially as undisclosed recipients) is not being displayed in CA. Forget viewing this info in EV using the web interface - its not shown at all. It may be stored in the index but there is no way to see it in the EV search pages which is extremely disappointing to say the least. You can see *some* of the recipient info in CA if you click the Comment and Audit History button, however we are finding that this list is almost always incomplete - we can validate this as we capture the raw enveloped journaled message or even the source message in outlook and compare the results in CA - guess what - they don't match...
    We plan to open a call about this and will post if we can resolve.
  • Drache - just spotted your last post. Isn't it the best typo yet? :-) In EV if something misbehaves and I find a reg key for it I always set it even if it's just reiterating the (supposed) default behaviour. I think it was IncludeInheritedPermissions in CP2 that turned me on to this way of working with EV. Sad but true :-(.

    David - you are getting there. Fantastic stuff dude.

    Dino - oh no. A bug d'you think? The good news is that you ARE compliant for SOX et al at the data level. Your problem is not "this is the email, tell us who knew about it" - you can do that... it's the "tell us all the email xxx recieved" you can't do right? If it's a bug to fix or a hack to the indexes then it can all be made right can't it?!? I know nothing about CA. Have you tried DA instead? (I know nothing about DA either by the way!)

    Suggest you put the call into Symantec and let us know how is goes? Unless Ghost, Dodo, Drache, etc know?



    David
    http://www.UDStech.com