Search and Delete Messages
Good afternoon. We recently had a virus-laden e-mail hit our company and users had clicked on links that had downloaded some Trojan viruses. We have this cleaned up, but it got brought up to delete any of these messages from Enterprise Vault. I just used Discovery Accelerator to find all of the messages, but not sure if I can delete from the archive from there. I know I can set EV policy to allow deletion, but is that just by user? Is there a way to globally search every archive for certain messages and then purge them?
Thanks!
I can suggest you to give permission on EV all archives to single user (http://www.symantec.com/docs/TECH69114) via EVPM. Example is below.
[Directory]
DirectoryComputerName=kvsvault
SiteName=archivesite
[ArchivePermissions]
ArchiveName = all
GrantAccess = read write delete, ourdomain\user
Then need to search the suspected emails via browser search (http://evserver.domain.com/enterprisevault) against each archive and then delete. Your organization policies should allow deletion (from site setting, retention category, storage itself) & items should not be on DA hold.- Across the board deletions, like you describe, aren't really that easy in EV unfortunately.