think we've managed to resolved this - the trick was actually getting the logs w/o having to do the ctrl+shift thingy to get into the troubleshooting/diagnostic window. That was done via the registry changes.
Then i look at the logs and found this -
15/09/2008 16:53:19.812: Log file created (level 1).
15/09/2008 16:53:19.813: RPC over HTTP is enabled (flags = 3)
15/09/2008 16:53:19.815: Policy has disabled client from running when Outlook is configured to use RPC over HTTP
15/09/2008 16:58:19.083: Enterprise Vault desktop exited successfully
15/09/2008 16:58:19.084: Log file closed.
unticking the option "connect to my exchange mailbox using http" made the icons appear...
This also brought me to another thread - https://forums.symantec.com/syment/board/message?board.id=106&message.id=10764
So this is down to EV policy under advance> outlook
This adv settings has one which has an option to "disables user extensions" under this setting "rpc over http restrictions". That's the default.
Other options under "rpc over http restrictions":
None - All Enterprise Vault client functionality is available when using RPC over HTTP.
Disable Outlook Add-In
(Default) - Connecting to Enterprise Vault using RPC over HTTP is not enabled in the Enterprise Vault client.
Disable Offline Vault - Offline Vault is disabled when using RPC over HTTP.
Disable PST Import - Client-side PST migration is disabled when using RPC over HTTP.
Disable Offline Vault and PST Import - Offline Vault and client-side PST migration are disabled when using RPC over HTTP.
Am doing some testing now to confirm this issue via changing my test policy and testing rpc over http now..before deciding if not to do the change in production.