Forum Discussion

DavidAlvarez's avatar
DavidAlvarez
Level 4
6 years ago

Prevent deleting items policy

Hi, I have been asked to prevent items in SMTP archive being deleted. I have found this article: https://www.veritas.com/support/en_US/article.100001457 That says: Before archived items can be de...
  • ChrisLangevin's avatar
    ChrisLangevin
    6 years ago

    An administrator must be granted Delete permissions on an archive in order to delete from it, just like anybody else. The trouble comes, of course, because an administrator can usually log onto the server and grant himself those permissions in the VAC. If this is a concern for you, rather than trying to lock down the permissions of administrators, you might look into enabling some detailed auditing. You might find it dissuades more wrongdoing than does a tight permissions scheme.

    --Chris

DavidAlvarez's avatar
DavidAlvarez
Level 4

Thanks both for your answers! But I have know another question/petition. According to the article the configuration can be changed to let admins delete or not delete items. I have a customer that uses EV to store journaling (via exchange journaling and SMTP Journaling), the want to configure EV so that even admins can't delete items. Is that possible?

ChrisLangevin's avatar
ChrisLangevin
Level 6
6 years ago

An administrator must be granted Delete permissions on an archive in order to delete from it, just like anybody else. The trouble comes, of course, because an administrator can usually log onto the server and grant himself those permissions in the VAC. If this is a concern for you, rather than trying to lock down the permissions of administrators, you might look into enabling some detailed auditing. You might find it dissuades more wrongdoing than does a tight permissions scheme.

--Chris

  • DavidAlvarez's avatar
    DavidAlvarez
    Level 4
    6 years ago

    Thanks Chris and Gertjan, it helped a lot.