Event ID - 2776

Looks like an issue introduced in EV 8

http://support.veritas.com/docs/318415

Event ID 2776 is seen with description 'AddAttachmentListToMsgBody' on messages with embedded attachments during a mailbox archiving run.
Details:
This issue will occur only when the option to 'Use message body' is used for Shortcut body on the Shortcut Content tab of the Mailbox policy. The following error will be seen in the Enterprise Vault (EV) Event Viewer log:

Event Type: Error
Event Source: Enterprise Vault
Event Category: Archive Task
Event ID: 2776
Computer: EVSERVER
Description:
An exception occurred in routine

AddAttachmentListToMsgBody
EXCEPTION_ACCESS_VIOLATION @ 0x78145878

This error does not prevent the message or attachments from being archived properly.

Workaround
The following registry entry can be added to the EV server to stop the error from occurring.

1. Go to Start | Run type regedit and click OK.

2. Expand HKEY_LOCAL_MACHINE\SOFTWARE\KVS\Enterprise Vault\Agents.

3. Right-click on Agents and choose New > DWORD Value.

4. Enter RemoveEmbeddedAttachments for the Name and give it a decimal value of 0.

5. Restart the Mailbox Archiving Task.

This setting will allow the message to be archived without the error occurring in the Event Viewer log.

NOTE: The embedded attachments will continue to be archived with this setting in place.


Symantec Corporation has acknowledged that the above-mentioned issue is present in the current version(s) of the product(s) mentioned at the end of this article. Symantec Corporation is committed to product quality and satisfied customers.

This issue is currently under investigation by Symantec Corporation. Pending the outcome of the investigation, this issue may be resolved by way of a patch or hotfix in current or future revisions of the software. However, this particular issue is not currently scheduled for any release. If you feel this issue has a direct business impact for you and your continued use of the product, please contact your Symantec Sales representative or the Symantec Sales group to discuss these concerns. For information on how to contact Symantec Sales, please see http://www.symantec.com

Please be sure to refer back to this document periodically as any changes to the status of the issue will be reflected here.


Supplemental Material:

System: Ref.# Description
Event ID: 2776 An exception occurred in routine AddAttachmentListToMsgBody EXCEPTION_ACCESS_VIOLATION @ 0x78145878
ETrack: 1511077 8.0- Event 2776 occurs during post processing when content of shortcut is set to 'Use message body'

Products Applied:
Enterprise Vault for Microsoft Exchange 8.0, 8.0 SP1

Last Updated: June 18 2009 08:46 PM GMT
Expires on: 05-21-2010
Subscribe Via E-Mail IconSubscribe to receive critical updates about this document

Subjects:
Enterprise Vault for Microsoft Exchange
Archiving: Error During Archiving Run