Forum Discussion

dgh1981's avatar
dgh1981
Level 3
11 years ago

Search and Delete Messages

Good afternoon.  We recently had a virus-laden e-mail hit our company and users had clicked on links that had downloaded some Trojan viruses.  We have this cleaned up, but it got brought up to delete...
Enterprise Vault
Information Governance
Windows Server (2003-2008)
  • Pradeep-Papnai's avatar
    Pradeep-Papnai
    11 years ago

    I can suggest you to give permission on EV all archives to single user (http://www.symantec.com/docs/TECH69114) via EVPM. Example is below.

    [Directory]
    DirectoryComputerName=kvsvault
    SiteName=archivesite

    [ArchivePermissions]
    ArchiveName = all
    GrantAccess = read write delete, ourdomain\user

    Then need to search the suspected emails via browser search (http://evserver.domain.com/enterprisevault) against each archive and then delete. Your organization policies should allow deletion (from site setting, retention category, storage itself) & items should not be on DA hold.

  • Rob_Wilcox1's avatar
    Rob_Wilcox1
    11 years ago
    Across the board deletions, like you describe, aren't really that easy in EV unfortunately.
EV_Ajay's avatar
EV_Ajay
Level 6
11 years ago

Hi,

From Discovery Accelerator Point of view it's possible to search those Virus Email with Subject from all user archive ( If those email are archived and index by Enterprise Vault ). But it's not possible to delete those email using Discovery Accelerator.

As per design of Discovery Accelerator we able to perform action like search, review and export but not delete.

From DA you will get count / hits and user archive hits. Then we will come to know How many hits means No. of those email and in Every user archive contain No. of hits.