5/30/2014 4:51:26 PM [516,66] #############################################################
5/30/2014 4:51:26 PM [516,66] Request processing started
5/30/2014 4:51:26 PM [516,66] Url: http://webmail.abc.com/owa/forms/premium/StartPage.aspx
5/30/2014 4:51:26 PM [516,66] RawUrl: /owa/Default.aspx
5/30/2014 4:51:26 PM [516,66] Query String parameters:
5/30/2014 4:51:26 PM [516,66] Form: 
5/30/2014 4:51:26 PM [516,66] OWA Session details
5/30/2014 4:51:26 PM [516,66]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:51:26 PM [516,66]     Authentication type: Basic
5/30/2014 4:51:26 PM [516,66]     Authenticated user: abc\user1
5/30/2014 4:51:26 PM [516,66]     Client IP Address: 192.168.113.228
5/30/2014 4:51:26 PM [516,66]     Server IP Address: 10.1.60.87
5/30/2014 4:51:26 PM [516,66]     Host: webmail.abc.com
5/30/2014 4:51:26 PM [516,66] Primary SMTP Address: user1@abc.com
5/30/2014 4:51:26 PM [516,66] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:51:26 PM [516,66] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:51:26 PM [516,66] [EVContext::Initialise] Loading EVContext
5/30/2014 4:51:26 PM [516,66] [Resources::LoadLanguageFile] Trying to opening language file: C:\Program Files\Microsoft\Exchange Server\ClientAccess\owa\EnterpriseVault\v8.0.3.1845\Languages\en-us.lan
5/30/2014 4:51:26 PM [516,66] [Resources::LoadLanguageFile] Language file not found
5/30/2014 4:51:26 PM [516,66] [Resources::LoadLanguageFile] Trying to opening language file: C:\Program Files\Microsoft\Exchange Server\ClientAccess\owa\EnterpriseVault\v8.0.3.1845\Languages\en.lan
5/30/2014 4:51:26 PM [516,66] [Resources::LoadLanguageFile] Loaded language: en
5/30/2014 4:51:26 PM [516,66] [EVContext::ResetHiddenSettings] Resetting hidden settings to defaults
5/30/2014 4:51:26 PM [516,66] [EVContext::LoadHiddenSettings] Loading hidden settings
5/30/2014 4:51:26 PM [516,66] [EVContext::LoadHiddenSettings] Getting hidden message entry id using SMTP address: user1@abc.com
5/30/2014 4:51:26 PM [516,66] [WebDAVHelpers::GetEVHiddenMessageId] Mailbox Url: https://localhost/exchange/user1@abc.com
5/30/2014 4:51:26 PM [516,66] [WebDAVRequest::Send] Request url: https://localhost/exchange/user1@abc.com
5/30/2014 4:51:26 PM [516,66] [WebDAVRequest::Send] Request method: PROPFIND
5/30/2014 4:51:26 PM [516,66] [WebDAVRequest::Send] Request timeout (milliseconds): 30000
5/30/2014 4:51:26 PM [516,66] [WebDAVRequest::Send] Adding FBA cookies
5/30/2014 4:51:26 PM [516,66] [WebDAVRequest::Send] Adding Depth header: 0
5/30/2014 4:51:26 PM [516,66] [WebDAVRequest::Send] Request body: <?xml version="1.0"?><d:propfind xmlns:d="DAV:" ><d:prop><u:inbox xmlns:u="urn:schemas:httpmail:" /></d:prop></d:propfind>
5/30/2014 4:51:47 PM [516,66] [WebDAVRequest::Send] Exception sending WebDAV request: System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 192.168.113.228:443
   at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
   at System.Net.Sockets.Socket.InternalConnect(EndPoint remoteEP)
   at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Int32 timeout, Exception& exception)
   --- End of inner exception stack trace ---
   at System.Net.HttpWebRequest.GetResponse()
   at Symantec.EnterpriseVault.Owa.ExchangeStoreAccess.WebDAVRequest.Send()
5/30/2014 4:51:47 PM [516,66] [EVContext::LoadHiddenSettings] Exception loading hidden settings: 
5/30/2014 4:51:47 PM [516,66] [EVContext::LoadHiddenSettings]     System.NullReferenceException: Object reference not set to an instance of an object.
   at Symantec.EnterpriseVault.Owa.ExchangeStoreAccess.WebDAVHelpers.GetEVHiddenMessageId(Log oLog, EVContext oEVContext)
   at Symantec.EnterpriseVault.Owa.Core.EVContext.LoadHiddenSettings(Log oLog, Boolean brefresh)
5/30/2014 4:51:47 PM [516,66] [EVContext::LoadHiddenSettings] Using default settings
5/30/2014 4:51:47 PM [516,66] [EVContext::ResetHiddenSettings] Resetting hidden settings to defaults
5/30/2014 4:51:47 PM [516,66] [EVContext::LogHiddenSettings] Mailbox Settings loaded at: Monday, January 01, 0001, 12:00:00 AM
5/30/2014 4:51:47 PM [516,66] [EVContext::LogHiddenSettings]     Enabled for archiving: Never Enabled
5/30/2014 4:51:47 PM [516,66] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:51:47 PM [516,66] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:51:47 PM [516,66] [EVContext::IsValidBrowser] Checking browser...
5/30/2014 4:51:47 PM [516,66] [EVContext::IsValidBrowser] User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:51:47 PM [516,66] [EVContext::IsValidBrowser] Using premium client - browser valid
5/30/2014 4:51:47 PM [516,66] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:51:47 PM [516,66] [RequestProcessor::ProcessRequest] Setting response filter: Premium.WunderBar
5/30/2014 4:51:47 PM [516,66] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:51:47 PM [516,66] Request processing finished
5/30/2014 4:51:47 PM [516,66] #############################################################
5/30/2014 4:51:47 PM [516,66] Request processing started
5/30/2014 4:51:47 PM [516,66] Url: http://webmail.abc.com/owa/forms/premium/StartPage.aspx
5/30/2014 4:51:47 PM [516,66] RawUrl: /owa/Default.aspx
5/30/2014 4:51:47 PM [516,66] Query String parameters:
5/30/2014 4:51:47 PM [516,66] Form: 
5/30/2014 4:51:47 PM [516,66] OWA Session details
5/30/2014 4:51:47 PM [516,66]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:51:47 PM [516,66]     Authentication type: Basic
5/30/2014 4:51:47 PM [516,66]     Authenticated user: abc\user1
5/30/2014 4:51:47 PM [516,66]     Client IP Address: 192.168.113.228
5/30/2014 4:51:47 PM [516,66]     Server IP Address: 10.1.60.87
5/30/2014 4:51:47 PM [516,66]     Host: webmail.abc.com
5/30/2014 4:51:47 PM [516,66] Primary SMTP Address: user1@abc.com
5/30/2014 4:51:47 PM [516,66] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:51:47 PM [516,66] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:51:47 PM [516,66] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:51:47 PM [516,66] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:51:47 PM [516,66] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:51:47 PM [516,66] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
5/30/2014 4:51:47 PM [516,66] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:51:47 PM [516,66] Request processing finished
5/30/2014 4:51:47 PM [516,66] #############################################################
5/30/2014 4:51:47 PM [516,66] Response filter started
5/30/2014 4:51:47 PM [516,66] Url: http://webmail.abc.com/owa/forms/premium/StartPage.aspx
5/30/2014 4:51:47 PM [516,66] RawUrl: /owa/Default.aspx
5/30/2014 4:51:47 PM [516,66] Query String parameters:
5/30/2014 4:51:47 PM [516,66] Form: 
5/30/2014 4:51:47 PM [516,66] EV Extensions Resource version: v8.0.3.1845
5/30/2014 4:51:47 PM [516,66] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:51:47 PM [516,66] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:51:47 PM [516,66] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.WunderBar
5/30/2014 4:51:47 PM [516,66] Response filter finished
5/30/2014 4:51:47 PM [516,63] #############################################################
5/30/2014 4:51:47 PM [516,63] Request processing started
5/30/2014 4:51:47 PM [516,63] Url: http://webmail.abc.com/owa/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&a=
5/30/2014 4:51:47 PM [516,63] RawUrl: /owa/Default.aspx?ae=Folder&t=IPF.Note&a=
5/30/2014 4:51:47 PM [516,63] Query String parameters:
5/30/2014 4:51:47 PM [516,63]     ae: Folder
5/30/2014 4:51:47 PM [516,63]     t: IPF.Note
5/30/2014 4:51:47 PM [516,63]     a: 
5/30/2014 4:51:47 PM [516,63] Form: 
5/30/2014 4:51:47 PM [516,63] OWA Session details
5/30/2014 4:51:47 PM [516,63]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:51:47 PM [516,63]     Authentication type: Basic
5/30/2014 4:51:47 PM [516,63]     Authenticated user: abc\user1
5/30/2014 4:51:47 PM [516,63]     Client IP Address: 192.168.113.228
5/30/2014 4:51:47 PM [516,63]     Server IP Address: 10.1.60.87
5/30/2014 4:51:47 PM [516,63]     Host: webmail.abc.com
5/30/2014 4:51:47 PM [516,63] Primary SMTP Address: user1@abc.com
5/30/2014 4:51:47 PM [516,63] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:51:47 PM [516,63] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:51:47 PM [516,63] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:51:47 PM [516,63] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:51:47 PM [516,63] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:51:47 PM [516,63] [RequestProcessor::ProcessRequest] Setting response filter: Premium.Folder
5/30/2014 4:51:47 PM [516,63] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:51:47 PM [516,63] Request processing finished
5/30/2014 4:51:48 PM [516,63] #############################################################
5/30/2014 4:51:48 PM [516,63] Request processing started
5/30/2014 4:51:48 PM [516,63] Url: http://webmail.abc.com/owa/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&a=
5/30/2014 4:51:48 PM [516,63] RawUrl: /owa/Default.aspx?ae=Folder&t=IPF.Note&a=
5/30/2014 4:51:48 PM [516,63] Query String parameters:
5/30/2014 4:51:48 PM [516,63]     ae: Folder
5/30/2014 4:51:48 PM [516,63]     t: IPF.Note
5/30/2014 4:51:48 PM [516,63]     a: 
5/30/2014 4:51:48 PM [516,63] Form: 
5/30/2014 4:51:48 PM [516,63] OWA Session details
5/30/2014 4:51:48 PM [516,63]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:51:48 PM [516,63]     Authentication type: Basic
5/30/2014 4:51:48 PM [516,63]     Authenticated user: abc\user1
5/30/2014 4:51:48 PM [516,63]     Client IP Address: 192.168.113.228
5/30/2014 4:51:48 PM [516,63]     Server IP Address: 10.1.60.87
5/30/2014 4:51:48 PM [516,63]     Host: webmail.abc.com
5/30/2014 4:51:48 PM [516,63] Primary SMTP Address: user1@abc.com
5/30/2014 4:51:48 PM [516,63] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:51:48 PM [516,63] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:51:48 PM [516,63] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:51:48 PM [516,63] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:51:48 PM [516,63] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:51:48 PM [516,63] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
5/30/2014 4:51:48 PM [516,63] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:51:48 PM [516,63] Request processing finished
5/30/2014 4:51:48 PM [516,63] #############################################################
5/30/2014 4:51:48 PM [516,63] Response filter started
5/30/2014 4:51:48 PM [516,63] Url: http://webmail.abc.com/owa/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&a=
5/30/2014 4:51:48 PM [516,63] RawUrl: /owa/Default.aspx?ae=Folder&t=IPF.Note&a=
5/30/2014 4:51:48 PM [516,63] Query String parameters:
5/30/2014 4:51:48 PM [516,63]     ae: Folder
5/30/2014 4:51:48 PM [516,63]     t: IPF.Note
5/30/2014 4:51:48 PM [516,63]     a: 
5/30/2014 4:51:48 PM [516,63] Form: 
5/30/2014 4:51:48 PM [516,63] EV Extensions Resource version: v8.0.3.1845
5/30/2014 4:51:48 PM [516,63] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:51:48 PM [516,63] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:51:48 PM [516,63] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.Folder
5/30/2014 4:51:48 PM [516,63] Response filter finished
5/30/2014 4:51:48 PM [516,63] #############################################################
5/30/2014 4:51:48 PM [516,63] Request processing started
5/30/2014 4:51:48 PM [516,63] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAPq5KW3ZAAAJ
5/30/2014 4:51:48 PM [516,63] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAPq5KW3ZAAAJ
5/30/2014 4:51:48 PM [516,63] Query String parameters:
5/30/2014 4:51:48 PM [516,63]     ae: Item
5/30/2014 4:51:48 PM [516,63]     a: Preview
5/30/2014 4:51:48 PM [516,63]     t: IPM.Note
5/30/2014 4:51:48 PM [516,63]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAPq5KW3ZAAAJ
5/30/2014 4:51:48 PM [516,63] Form: 
5/30/2014 4:51:48 PM [516,63] OWA Session details
5/30/2014 4:51:48 PM [516,63]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:51:48 PM [516,63]     Authentication type: Basic
5/30/2014 4:51:48 PM [516,63]     Authenticated user: abc\user1
5/30/2014 4:51:48 PM [516,63]     Client IP Address: 192.168.113.228
5/30/2014 4:51:48 PM [516,63]     Server IP Address: 10.1.60.87
5/30/2014 4:51:48 PM [516,63]     Host: webmail.abc.com
5/30/2014 4:51:48 PM [516,63] Primary SMTP Address: user1@abc.com
5/30/2014 4:51:48 PM [516,63] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:51:48 PM [516,63] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:51:48 PM [516,63] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:51:48 PM [516,63] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:51:48 PM [516,63] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:51:48 PM [516,63] [RequestProcessor::ProcessItem] started
5/30/2014 4:51:48 PM [516,63] [RequestProcessor::ProcessItem] Finished
5/30/2014 4:51:48 PM [516,63] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:51:48 PM [516,63] Request processing finished
5/30/2014 4:51:49 PM [516,63] #############################################################
5/30/2014 4:51:49 PM [516,63] Request processing started
5/30/2014 4:51:49 PM [516,63] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAPq5KW3ZAAAJ
5/30/2014 4:51:49 PM [516,63] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAPq5KW3ZAAAJ
5/30/2014 4:51:49 PM [516,63] Query String parameters:
5/30/2014 4:51:49 PM [516,63]     ae: Item
5/30/2014 4:51:49 PM [516,63]     a: Preview
5/30/2014 4:51:49 PM [516,63]     t: IPM.Note
5/30/2014 4:51:49 PM [516,63]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAPq5KW3ZAAAJ
5/30/2014 4:51:49 PM [516,63] Form: 
5/30/2014 4:51:49 PM [516,63] OWA Session details
5/30/2014 4:51:49 PM [516,63]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:51:49 PM [516,63]     Authentication type: Basic
5/30/2014 4:51:49 PM [516,63]     Authenticated user: abc\user1
5/30/2014 4:51:49 PM [516,63]     Client IP Address: 192.168.113.228
5/30/2014 4:51:49 PM [516,63]     Server IP Address: 10.1.60.87
5/30/2014 4:51:49 PM [516,63]     Host: webmail.abc.com
5/30/2014 4:51:49 PM [516,63] Primary SMTP Address: user1@abc.com
5/30/2014 4:51:49 PM [516,63] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:51:49 PM [516,63] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:51:49 PM [516,63] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:51:49 PM [516,63] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:51:49 PM [516,63] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:51:49 PM [516,63] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
5/30/2014 4:51:49 PM [516,63] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:51:49 PM [516,63] Request processing finished
5/30/2014 4:51:54 PM [516,63] #############################################################
5/30/2014 4:51:54 PM [516,63] Request processing started
5/30/2014 4:51:54 PM [516,63] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAJ9PjbLsAAAJ
5/30/2014 4:51:54 PM [516,63] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAJ9PjbLsAAAJ
5/30/2014 4:51:54 PM [516,63] Query String parameters:
5/30/2014 4:51:54 PM [516,63]     ae: Item
5/30/2014 4:51:54 PM [516,63]     a: Preview
5/30/2014 4:51:54 PM [516,63]     t: IPM.Note.EnterpriseVault.Shortcut
5/30/2014 4:51:54 PM [516,63]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAJ9PjbLsAAAJ
5/30/2014 4:51:54 PM [516,63] Form: 
5/30/2014 4:51:54 PM [516,63] OWA Session details
5/30/2014 4:51:54 PM [516,63]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:51:54 PM [516,63]     Authentication type: Basic
5/30/2014 4:51:54 PM [516,63]     Authenticated user: abc\user1
5/30/2014 4:51:54 PM [516,63]     Client IP Address: 192.168.113.228
5/30/2014 4:51:54 PM [516,63]     Server IP Address: 10.1.60.87
5/30/2014 4:51:54 PM [516,63]     Host: webmail.abc.com
5/30/2014 4:51:54 PM [516,63] Primary SMTP Address: user1@abc.com
5/30/2014 4:51:54 PM [516,63] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:51:54 PM [516,63] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:51:54 PM [516,63] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:51:54 PM [516,63] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:51:54 PM [516,63] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:51:54 PM [516,63] [RequestProcessor::ProcessItem] started
5/30/2014 4:51:54 PM [516,63] [RequestProcessor::ProcessItem] Processing EV item
5/30/2014 4:51:54 PM [516,63] [RequestProcessor::ProcessOWAItemAction] started
5/30/2014 4:51:54 PM [516,63] [RequestProcessor::ProcessOWAItemAction] Previewing EV item
5/30/2014 4:51:54 PM [516,63] [Id::EwsId] Converting OwaId to EwsId
5/30/2014 4:51:54 PM [516,63] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
5/30/2014 4:51:55 PM [516,63] [ConvertId::DoConvertId] Converting ID using web services
5/30/2014 4:51:56 PM [516,63] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAJ9PjbLsAAA=
5/30/2014 4:51:56 PM [516,63] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties] Loading properties for: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAJ9PjbLsAAA=
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties] Loaded item properties: 
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   Id: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAJ9PjbLsAAA=
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAB9Up+iiqbWT6PR/JQQ3fLgANcBQevF
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   Size: 8410
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNAAuAAAAAAA+drvYRw5rS72vr3/RCe0lAQB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAA=
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   Archive Id: 10D04F53B98CCFC4086552BA3222F15301110000EVSYS
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   Saveset Id: 201307053047219~201304030416320000~Z~C0004A3CC9A33FE75B6B5D1DCC1BBAA1
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   Original Content Class: urn:content-classes:message
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   Original Size: 130161
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   View Item Ref Count: 
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   Archived Date: 7/6/2013 2:00:24 AM
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   Restored Date: 
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   Post Processed Date: 
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   Last modified time: 7/6/2013 2:00:33 AM
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   PR_URL_NAME: /Inbox/Transform your Valuable documents into Electronic Formats-2.EML
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
5/30/2014 4:51:56 PM [516,63] [MailboxItem::LoadProperties]   Original Icon Index: 
5/30/2014 4:51:56 PM [516,63] [RequestProcessor::ProcessOWAItemAction] Setting response filter: Premium.ArchivedItem
5/30/2014 4:51:56 PM [516,63] [RequestProcessor::ProcessOWAItemAction] Finished
5/30/2014 4:51:56 PM [516,63] [RequestProcessor::ProcessItem] Finished
5/30/2014 4:51:56 PM [516,63] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:51:56 PM [516,63] Request processing finished
5/30/2014 4:51:56 PM [516,63] #############################################################
5/30/2014 4:51:56 PM [516,63] Request processing started
5/30/2014 4:51:56 PM [516,63] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAJ9PjbLsAAAJ
5/30/2014 4:51:56 PM [516,63] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAJ9PjbLsAAAJ
5/30/2014 4:51:56 PM [516,63] Query String parameters:
5/30/2014 4:51:56 PM [516,63]     ae: Item
5/30/2014 4:51:56 PM [516,63]     a: Preview
5/30/2014 4:51:56 PM [516,63]     t: IPM.Note.EnterpriseVault.Shortcut
5/30/2014 4:51:56 PM [516,63]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAJ9PjbLsAAAJ
5/30/2014 4:51:56 PM [516,63] Form: 
5/30/2014 4:51:56 PM [516,63] OWA Session details
5/30/2014 4:51:56 PM [516,63]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:51:56 PM [516,63]     Authentication type: Basic
5/30/2014 4:51:56 PM [516,63]     Authenticated user: abc\user1
5/30/2014 4:51:56 PM [516,63]     Client IP Address: 192.168.113.228
5/30/2014 4:51:56 PM [516,63]     Server IP Address: 10.1.60.87
5/30/2014 4:51:56 PM [516,63]     Host: webmail.abc.com
5/30/2014 4:51:56 PM [516,63] Primary SMTP Address: user1@abc.com
5/30/2014 4:51:56 PM [516,63] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:51:56 PM [516,63] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:51:56 PM [516,63] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:51:56 PM [516,63] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:51:56 PM [516,63] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:51:56 PM [516,63] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
5/30/2014 4:51:56 PM [516,63] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:51:56 PM [516,63] Request processing finished
5/30/2014 4:51:56 PM [516,63] #############################################################
5/30/2014 4:51:56 PM [516,63] Response filter started
5/30/2014 4:51:56 PM [516,63] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAJ9PjbLsAAAJ
5/30/2014 4:51:56 PM [516,63] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAJ9PjbLsAAAJ
5/30/2014 4:51:56 PM [516,63] Query String parameters:
5/30/2014 4:51:56 PM [516,63]     ae: Item
5/30/2014 4:51:56 PM [516,63]     a: Preview
5/30/2014 4:51:56 PM [516,63]     t: IPM.Note.EnterpriseVault.Shortcut
5/30/2014 4:51:56 PM [516,63]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAJ9PjbLsAAAJ
5/30/2014 4:51:56 PM [516,63] Form: 
5/30/2014 4:51:56 PM [516,63] EV Extensions Resource version: v8.0.3.1845
5/30/2014 4:51:56 PM [516,63] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:51:56 PM [516,63] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:51:56 PM [516,63] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.ArchivedItem
5/30/2014 4:51:56 PM [516,63] Response filter finished
5/30/2014 4:51:56 PM [516,67] #############################################################
5/30/2014 4:51:56 PM [516,67] Request processing started
5/30/2014 4:51:56 PM [516,67] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL3AAAJ
5/30/2014 4:51:56 PM [516,67] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAAAZnkL3AAAJ
5/30/2014 4:51:56 PM [516,67] Query String parameters:
5/30/2014 4:51:56 PM [516,67]     ae: Item
5/30/2014 4:51:56 PM [516,67]     a: Preview
5/30/2014 4:51:56 PM [516,67]     t: IPM.Note
5/30/2014 4:51:56 PM [516,67]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL3AAAJ
5/30/2014 4:51:56 PM [516,67] Form: 
5/30/2014 4:51:56 PM [516,67] OWA Session details
5/30/2014 4:51:56 PM [516,67]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:51:56 PM [516,67]     Authentication type: Basic
5/30/2014 4:51:56 PM [516,67]     Authenticated user: abc\user1
5/30/2014 4:51:56 PM [516,67]     Client IP Address: 192.168.113.228
5/30/2014 4:51:56 PM [516,67]     Server IP Address: 10.1.60.87
5/30/2014 4:51:56 PM [516,67]     Host: webmail.abc.com
5/30/2014 4:51:56 PM [516,67] Primary SMTP Address: user1@abc.com
5/30/2014 4:51:56 PM [516,67] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:51:56 PM [516,67] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:51:56 PM [516,67] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:51:56 PM [516,67] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:51:56 PM [516,67] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:51:56 PM [516,67] [RequestProcessor::ProcessItem] started
5/30/2014 4:51:56 PM [516,67] [RequestProcessor::ProcessItem] Finished
5/30/2014 4:51:56 PM [516,67] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:51:56 PM [516,67] Request processing finished
5/30/2014 4:51:57 PM [516,67] #############################################################
5/30/2014 4:51:57 PM [516,67] Request processing started
5/30/2014 4:51:57 PM [516,67] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL3AAAJ
5/30/2014 4:51:57 PM [516,67] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAAAZnkL3AAAJ
5/30/2014 4:51:57 PM [516,67] Query String parameters:
5/30/2014 4:51:57 PM [516,67]     ae: Item
5/30/2014 4:51:57 PM [516,67]     a: Preview
5/30/2014 4:51:57 PM [516,67]     t: IPM.Note
5/30/2014 4:51:57 PM [516,67]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL3AAAJ
5/30/2014 4:51:57 PM [516,67] Form: 
5/30/2014 4:51:57 PM [516,67] OWA Session details
5/30/2014 4:51:57 PM [516,67]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:51:57 PM [516,67]     Authentication type: Basic
5/30/2014 4:51:57 PM [516,67]     Authenticated user: abc\user1
5/30/2014 4:51:57 PM [516,67]     Client IP Address: 192.168.113.228
5/30/2014 4:51:57 PM [516,67]     Server IP Address: 10.1.60.87
5/30/2014 4:51:57 PM [516,67]     Host: webmail.abc.com
5/30/2014 4:51:57 PM [516,67] Primary SMTP Address: user1@abc.com
5/30/2014 4:51:57 PM [516,67] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:51:57 PM [516,67] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:51:57 PM [516,67] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:51:57 PM [516,67] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:51:57 PM [516,67] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:51:57 PM [516,67] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
5/30/2014 4:51:57 PM [516,67] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:51:57 PM [516,67] Request processing finished
5/30/2014 4:51:59 PM [516,63] #############################################################
5/30/2014 4:51:59 PM [516,63] Request processing started
5/30/2014 4:51:59 PM [516,63] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:51:59 PM [516,63] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:51:59 PM [516,63] Query String parameters:
5/30/2014 4:51:59 PM [516,63]     ae: Item
5/30/2014 4:51:59 PM [516,63]     a: Preview
5/30/2014 4:51:59 PM [516,63]     t: IPM.Note.EnterpriseVault.Shortcut
5/30/2014 4:51:59 PM [516,63]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:51:59 PM [516,63] Form: 
5/30/2014 4:51:59 PM [516,63] OWA Session details
5/30/2014 4:51:59 PM [516,63]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:51:59 PM [516,63]     Authentication type: Basic
5/30/2014 4:51:59 PM [516,63]     Authenticated user: abc\user1
5/30/2014 4:51:59 PM [516,63]     Client IP Address: 192.168.113.228
5/30/2014 4:51:59 PM [516,63]     Server IP Address: 10.1.60.87
5/30/2014 4:51:59 PM [516,63]     Host: webmail.abc.com
5/30/2014 4:51:59 PM [516,63] Primary SMTP Address: user1@abc.com
5/30/2014 4:51:59 PM [516,63] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:51:59 PM [516,63] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:51:59 PM [516,63] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:51:59 PM [516,63] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:51:59 PM [516,63] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:51:59 PM [516,63] [RequestProcessor::ProcessItem] started
5/30/2014 4:51:59 PM [516,63] [RequestProcessor::ProcessItem] Processing EV item
5/30/2014 4:51:59 PM [516,63] [RequestProcessor::ProcessOWAItemAction] started
5/30/2014 4:51:59 PM [516,63] [RequestProcessor::ProcessOWAItemAction] Previewing EV item
5/30/2014 4:51:59 PM [516,63] [Id::EwsId] Converting OwaId to EwsId
5/30/2014 4:51:59 PM [516,63] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
5/30/2014 4:51:59 PM [516,63] [ConvertId::DoConvertId] Converting ID using web services
5/30/2014 4:51:59 PM [516,63] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAA=
5/30/2014 4:51:59 PM [516,63] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties] Loading properties for: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAA=
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties] Loaded item properties: 
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   Id: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAA=
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAB9Up+iiqbWT6PR/JQQ3fLgAAAjIyH2
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   Size: 4223
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNAAuAAAAAAA+drvYRw5rS72vr3/RCe0lAQB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAA=
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   Archive Id: 10D04F53B98CCFC4086552BA3222F15301110000EVSYS
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   Saveset Id: 201010086560828~201007051127050000~Z~C000AEB7651A88A883FCD889721856A1
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   Original Content Class: urn:content-classes:message
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   Original Size: 32496
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   View Item Ref Count: 
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   Archived Date: 10/9/2010 2:00:33 AM
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   Restored Date: 
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   Post Processed Date: 
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   Last modified time: 10/9/2010 2:00:28 AM
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   PR_URL_NAME: /Inbox/AD migration in Paramount Printing status update-3.EML
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
5/30/2014 4:51:59 PM [516,63] [MailboxItem::LoadProperties]   Original Icon Index: -1
5/30/2014 4:51:59 PM [516,63] [RequestProcessor::ProcessOWAItemAction] Setting response filter: Premium.ArchivedItem
5/30/2014 4:51:59 PM [516,63] [RequestProcessor::ProcessOWAItemAction] Finished
5/30/2014 4:51:59 PM [516,63] [RequestProcessor::ProcessItem] Finished
5/30/2014 4:51:59 PM [516,63] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:51:59 PM [516,63] Request processing finished
5/30/2014 4:51:59 PM [516,63] #############################################################
5/30/2014 4:51:59 PM [516,63] Request processing started
5/30/2014 4:51:59 PM [516,63] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:51:59 PM [516,63] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:51:59 PM [516,63] Query String parameters:
5/30/2014 4:51:59 PM [516,63]     ae: Item
5/30/2014 4:51:59 PM [516,63]     a: Preview
5/30/2014 4:51:59 PM [516,63]     t: IPM.Note.EnterpriseVault.Shortcut
5/30/2014 4:51:59 PM [516,63]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:51:59 PM [516,63] Form: 
5/30/2014 4:51:59 PM [516,63] OWA Session details
5/30/2014 4:51:59 PM [516,63]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:51:59 PM [516,63]     Authentication type: Basic
5/30/2014 4:51:59 PM [516,63]     Authenticated user: abc\user1
5/30/2014 4:51:59 PM [516,63]     Client IP Address: 192.168.113.228
5/30/2014 4:51:59 PM [516,63]     Server IP Address: 10.1.60.87
5/30/2014 4:51:59 PM [516,63]     Host: webmail.abc.com
5/30/2014 4:51:59 PM [516,63] Primary SMTP Address: user1@abc.com
5/30/2014 4:51:59 PM [516,63] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:51:59 PM [516,63] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:51:59 PM [516,63] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:51:59 PM [516,63] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:51:59 PM [516,63] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:51:59 PM [516,63] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
5/30/2014 4:51:59 PM [516,63] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:51:59 PM [516,63] Request processing finished
5/30/2014 4:51:59 PM [516,63] #############################################################
5/30/2014 4:51:59 PM [516,63] Response filter started
5/30/2014 4:51:59 PM [516,63] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:51:59 PM [516,63] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:51:59 PM [516,63] Query String parameters:
5/30/2014 4:51:59 PM [516,63]     ae: Item
5/30/2014 4:51:59 PM [516,63]     a: Preview
5/30/2014 4:51:59 PM [516,63]     t: IPM.Note.EnterpriseVault.Shortcut
5/30/2014 4:51:59 PM [516,63]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:51:59 PM [516,63] Form: 
5/30/2014 4:51:59 PM [516,63] EV Extensions Resource version: v8.0.3.1845
5/30/2014 4:51:59 PM [516,63] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:51:59 PM [516,63] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:51:59 PM [516,63] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.ArchivedItem
5/30/2014 4:51:59 PM [516,63] Response filter finished
5/30/2014 4:52:00 PM [516,63] #############################################################
5/30/2014 4:52:00 PM [516,63] Request processing started
5/30/2014 4:52:00 PM [516,63] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:52:00 PM [516,63] RawUrl: /owa/Default.aspx?ae=Item&a=Open&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:52:00 PM [516,63] Query String parameters:
5/30/2014 4:52:00 PM [516,63]     ae: Item
5/30/2014 4:52:00 PM [516,63]     a: Open
5/30/2014 4:52:00 PM [516,63]     t: IPM.Note.EnterpriseVault.Shortcut
5/30/2014 4:52:00 PM [516,63]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:52:00 PM [516,63] Form: 
5/30/2014 4:52:00 PM [516,63] OWA Session details
5/30/2014 4:52:00 PM [516,63]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:52:00 PM [516,63]     Authentication type: Basic
5/30/2014 4:52:00 PM [516,63]     Authenticated user: abc\user1
5/30/2014 4:52:00 PM [516,63]     Client IP Address: 192.168.113.228
5/30/2014 4:52:00 PM [516,63]     Server IP Address: 10.1.60.87
5/30/2014 4:52:00 PM [516,63]     Host: webmail.abc.com
5/30/2014 4:52:00 PM [516,63] Primary SMTP Address: user1@abc.com
5/30/2014 4:52:00 PM [516,63] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:52:00 PM [516,63] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:52:00 PM [516,63] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:52:00 PM [516,63] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:52:00 PM [516,63] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:52:00 PM [516,63] [RequestProcessor::ProcessItem] started
5/30/2014 4:52:00 PM [516,63] [RequestProcessor::ProcessItem] Processing EV item
5/30/2014 4:52:00 PM [516,63] [RequestProcessor::ProcessOWAItemAction] started
5/30/2014 4:52:00 PM [516,63] [RequestProcessor::ProcessOWAItemAction] Opening archived item
5/30/2014 4:52:00 PM [516,63] [Id::EwsId] Converting OwaId to EwsId
5/30/2014 4:52:00 PM [516,63] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
5/30/2014 4:52:00 PM [516,63] [ConvertId::DoConvertId] Converting ID using web services
5/30/2014 4:52:00 PM [516,63] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAA=
5/30/2014 4:52:00 PM [516,63] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties] Loading properties for: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAA=
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties] Loaded item properties: 
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   Id: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAA=
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAB9Up+iiqbWT6PR/JQQ3fLgAAAjIyH2
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   Size: 4223
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNAAuAAAAAAA+drvYRw5rS72vr3/RCe0lAQB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAA=
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   Archive Id: 10D04F53B98CCFC4086552BA3222F15301110000EVSYS
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   Saveset Id: 201010086560828~201007051127050000~Z~C000AEB7651A88A883FCD889721856A1
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   Original Content Class: urn:content-classes:message
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   Original Size: 32496
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   View Item Ref Count: 
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   Archived Date: 10/9/2010 2:00:33 AM
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   Restored Date: 
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   Post Processed Date: 
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   Last modified time: 10/9/2010 2:00:28 AM
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   PR_URL_NAME: /Inbox/AD migration in Paramount Printing status update-3.EML
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
5/30/2014 4:52:00 PM [516,63] [MailboxItem::LoadProperties]   Original Icon Index: -1
5/30/2014 4:52:00 PM [516,63] [Id::OwaId] Returning cached OwaId: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:52:00 PM [516,63] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
5/30/2014 4:52:00 PM [516,63] [MailboxFolder::LoadProperties] Folder name: Deleted Items
5/30/2014 4:52:00 PM [516,63] [MailboxFolder::LoadProperties] Folder path: /Deleted Items
5/30/2014 4:52:00 PM [516,63] [MailboxFolder::LoadProperties] Non-Deletable: False
5/30/2014 4:52:00 PM [516,63] [WebDAVRequest::Send] Request url: https://localhost/exchange/user1@abc.com/Deleted Items/10D04F53B98CCFC4086552BA3222F15301110000EVSYS!201010086560828.201007051127050000.Z.C000AEB7651A88A883FCD889721856A1.EML
5/30/2014 4:52:00 PM [516,63] [WebDAVRequest::Send] Request method: PROPFIND
5/30/2014 4:52:00 PM [516,63] [WebDAVRequest::Send] Request timeout (milliseconds): 30000
5/30/2014 4:52:00 PM [516,63] [WebDAVRequest::Send] Adding FBA cookies
5/30/2014 4:52:00 PM [516,63] [WebDAVRequest::Send] Adding Depth header: 0
5/30/2014 4:52:00 PM [516,63] [WebDAVRequest::Send] Request body: <?xml version="1.0"?><d:propfind xmlns:d="DAV:" ><d:prop><mapi:x0FFF0102 xmlns:mapi="http://schemas.microsoft.com/mapi/proptag/" /><exch:outlookmessageclass xmlns:exch="http://schemas.microsoft.com/exchange/" /></d:prop></d:propfind>
5/30/2014 4:52:21 PM [516,63] [WebDAVRequest::Send] Exception sending WebDAV request: System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 192.168.113.228:443
   at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
   at System.Net.Sockets.Socket.InternalConnect(EndPoint remoteEP)
   at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Int32 timeout, Exception& exception)
   --- End of inner exception stack trace ---
   at System.Net.HttpWebRequest.GetResponse()
   at Symantec.EnterpriseVault.Owa.ExchangeStoreAccess.WebDAVRequest.Send()
5/30/2014 4:52:21 PM [516,63] [EVServerRequest::CreateRequest] Sending request to: /restoreo2k.asp?vaultid=10D04F53B98CCFC4086552BA3222F15301110000EVSYS&savesetid=201010086560828~201007051127050000~Z~C000AEB7651A88A883FCD889721856A1&mbx=user1@abc.com&server=abc07BE&restorelocation=3&foldername=Deleted Items
5/30/2014 4:52:21 PM [516,63] [RestoreRequest::Send] Exception sending request to restore item: System.UriFormatException: Invalid URI: The format of the URI could not be determined.
   at System.Uri.CreateThis(String uri, Boolean dontEscape, UriKind uriKind)
   at System.Net.WebRequest.Create(String requestUriString)
   at Symantec.EnterpriseVault.Owa.EVServerRequests.EVServerRequest.CreateRequest(String sUrl)
   at Symantec.EnterpriseVault.Owa.EVServerRequests.RestoreRequest.Send()
5/30/2014 4:52:21 PM [516,63] [RequestProcessor::RestoreAndActOnItem] Item not restored
5/30/2014 4:52:21 PM [516,63] [Id::OwaId] Returning cached OwaId: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:52:21 PM [516,63] [RequestProcessor::RestoreAndActOnMailboxItem] Redirecting client to: /owa/?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAAAZnkL1AAAJ&EVItemUnavailable=1
5/30/2014 4:52:21 PM [516,63] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:52:21 PM [516,63] Request processing finished
5/30/2014 4:52:21 PM [516,67] #############################################################
5/30/2014 4:52:21 PM [516,67] Request processing started
5/30/2014 4:52:21 PM [516,67] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 4:52:21 PM [516,67] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 4:52:21 PM [516,67] Query String parameters:
5/30/2014 4:52:21 PM [516,67]     oeh: 1
5/30/2014 4:52:21 PM [516,67]     ns: Notify
5/30/2014 4:52:21 PM [516,67]     ev: Poll
5/30/2014 4:52:21 PM [516,67] Form: 
5/30/2014 4:52:21 PM [516,67] OWA Session details
5/30/2014 4:52:21 PM [516,67]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:52:21 PM [516,67]     Authentication type: Basic
5/30/2014 4:52:21 PM [516,67]     Authenticated user: abc\user1
5/30/2014 4:52:21 PM [516,67]     Client IP Address: 192.168.113.228
5/30/2014 4:52:21 PM [516,67]     Server IP Address: 10.1.60.87
5/30/2014 4:52:21 PM [516,67]     Host: webmail.abc.com
5/30/2014 4:52:21 PM [516,67] Primary SMTP Address: user1@abc.com
5/30/2014 4:52:21 PM [516,67] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:52:21 PM [516,67] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:52:21 PM [516,67] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:52:21 PM [516,67] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:52:21 PM [516,67] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:52:21 PM [516,67] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:52:21 PM [516,67] Request processing finished
5/30/2014 4:52:21 PM [516,67] #############################################################
5/30/2014 4:52:21 PM [516,67] Request processing started
5/30/2014 4:52:21 PM [516,67] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 4:52:21 PM [516,67] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 4:52:21 PM [516,67] Query String parameters:
5/30/2014 4:52:21 PM [516,67]     oeh: 1
5/30/2014 4:52:21 PM [516,67]     ns: Notify
5/30/2014 4:52:21 PM [516,67]     ev: Poll
5/30/2014 4:52:21 PM [516,67] Form: 
5/30/2014 4:52:21 PM [516,67] OWA Session details
5/30/2014 4:52:21 PM [516,67]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:52:21 PM [516,67]     Authentication type: Basic
5/30/2014 4:52:21 PM [516,67]     Authenticated user: abc\user1
5/30/2014 4:52:21 PM [516,67]     Client IP Address: 192.168.113.228
5/30/2014 4:52:21 PM [516,67]     Server IP Address: 10.1.60.87
5/30/2014 4:52:21 PM [516,67]     Host: webmail.abc.com
5/30/2014 4:52:21 PM [516,67] Primary SMTP Address: user1@abc.com
5/30/2014 4:52:21 PM [516,67] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:52:21 PM [516,67] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:52:21 PM [516,67] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:52:21 PM [516,67] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:52:21 PM [516,67] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:52:21 PM [516,67] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
5/30/2014 4:52:21 PM [516,67] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:52:21 PM [516,67] Request processing finished
5/30/2014 4:52:21 PM [516,63] #############################################################
5/30/2014 4:52:21 PM [516,63] Request processing started
5/30/2014 4:52:21 PM [516,63] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ&EVItemUnavailable=1
5/30/2014 4:52:21 PM [516,63] RawUrl: /owa/Default.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAAAZnkL1AAAJ&EVItemUnavailable=1
5/30/2014 4:52:21 PM [516,63] Query String parameters:
5/30/2014 4:52:21 PM [516,63]     ae: Item
5/30/2014 4:52:21 PM [516,63]     a: Open
5/30/2014 4:52:21 PM [516,63]     t: ipm.note.enterprisevault.shortcut
5/30/2014 4:52:21 PM [516,63]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:52:21 PM [516,63]     EVItemUnavailable: 1
5/30/2014 4:52:21 PM [516,63] Form: 
5/30/2014 4:52:21 PM [516,63] OWA Session details
5/30/2014 4:52:21 PM [516,63]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:52:21 PM [516,63]     Authentication type: Basic
5/30/2014 4:52:21 PM [516,63]     Authenticated user: abc\user1
5/30/2014 4:52:21 PM [516,63]     Client IP Address: 192.168.113.228
5/30/2014 4:52:21 PM [516,63]     Server IP Address: 10.1.60.87
5/30/2014 4:52:21 PM [516,63]     Host: webmail.abc.com
5/30/2014 4:52:21 PM [516,63] Primary SMTP Address: user1@abc.com
5/30/2014 4:52:21 PM [516,63] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:52:21 PM [516,63] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:52:21 PM [516,63] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:52:21 PM [516,63] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:52:21 PM [516,63] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:52:21 PM [516,63] [RequestProcessor::ProcessItem] started
5/30/2014 4:52:21 PM [516,63] [RequestProcessor::ProcessItem] Processing EV item
5/30/2014 4:52:21 PM [516,63] [RequestProcessor::ProcessOWAItemAction] started
5/30/2014 4:52:21 PM [516,63] [RequestProcessor::ProcessOWAItemAction] Opening shortcut due to unavailable item
5/30/2014 4:52:21 PM [516,63] [Id::EwsId] Converting OwaId to EwsId
5/30/2014 4:52:21 PM [516,63] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
5/30/2014 4:52:21 PM [516,63] [ConvertId::DoConvertId] Converting ID using web services
5/30/2014 4:52:21 PM [516,63] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAA=
5/30/2014 4:52:21 PM [516,63] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties] Loading properties for: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAA=
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties] Loaded item properties: 
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   Id: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAA=
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAB9Up+iiqbWT6PR/JQQ3fLgAAAjIyH2
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   Size: 4223
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNAAuAAAAAAA+drvYRw5rS72vr3/RCe0lAQB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAA=
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   Archive Id: 10D04F53B98CCFC4086552BA3222F15301110000EVSYS
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   Saveset Id: 201010086560828~201007051127050000~Z~C000AEB7651A88A883FCD889721856A1
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   Original Content Class: urn:content-classes:message
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   Original Size: 32496
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   View Item Ref Count: 
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   Archived Date: 10/9/2010 2:00:33 AM
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   Restored Date: 
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   Post Processed Date: 
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   Last modified time: 10/9/2010 2:00:28 AM
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   PR_URL_NAME: /Inbox/AD migration in Paramount Printing status update-3.EML
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
5/30/2014 4:52:21 PM [516,63] [MailboxItem::LoadProperties]   Original Icon Index: -1
5/30/2014 4:52:21 PM [516,63] [RequestProcessor::ProcessOWAItemAction] Setting response filter: Premium.ArchivedItemUnavailable
5/30/2014 4:52:21 PM [516,63] [RequestProcessor::ProcessOWAItemAction] Finished
5/30/2014 4:52:21 PM [516,63] [RequestProcessor::ProcessItem] Finished
5/30/2014 4:52:21 PM [516,63] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:52:21 PM [516,63] Request processing finished
5/30/2014 4:52:21 PM [516,63] #############################################################
5/30/2014 4:52:21 PM [516,63] Request processing started
5/30/2014 4:52:21 PM [516,63] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ&EVItemUnavailable=1
5/30/2014 4:52:21 PM [516,63] RawUrl: /owa/Default.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAAAZnkL1AAAJ&EVItemUnavailable=1
5/30/2014 4:52:21 PM [516,63] Query String parameters:
5/30/2014 4:52:21 PM [516,63]     ae: Item
5/30/2014 4:52:21 PM [516,63]     a: Open
5/30/2014 4:52:21 PM [516,63]     t: ipm.note.enterprisevault.shortcut
5/30/2014 4:52:21 PM [516,63]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:52:21 PM [516,63]     EVItemUnavailable: 1
5/30/2014 4:52:21 PM [516,63] Form: 
5/30/2014 4:52:21 PM [516,63] OWA Session details
5/30/2014 4:52:21 PM [516,63]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:52:21 PM [516,63]     Authentication type: Basic
5/30/2014 4:52:21 PM [516,63]     Authenticated user: abc\user1
5/30/2014 4:52:21 PM [516,63]     Client IP Address: 192.168.113.228
5/30/2014 4:52:21 PM [516,63]     Server IP Address: 10.1.60.87
5/30/2014 4:52:21 PM [516,63]     Host: webmail.abc.com
5/30/2014 4:52:21 PM [516,63] Primary SMTP Address: user1@abc.com
5/30/2014 4:52:21 PM [516,63] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:52:21 PM [516,63] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:52:21 PM [516,63] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:52:21 PM [516,63] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:52:21 PM [516,63] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:52:21 PM [516,63] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
5/30/2014 4:52:21 PM [516,63] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:52:21 PM [516,63] Request processing finished
5/30/2014 4:52:21 PM [516,63] #############################################################
5/30/2014 4:52:21 PM [516,63] Response filter started
5/30/2014 4:52:21 PM [516,63] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ&EVItemUnavailable=1
5/30/2014 4:52:21 PM [516,63] RawUrl: /owa/Default.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAAAZnkL1AAAJ&EVItemUnavailable=1
5/30/2014 4:52:21 PM [516,63] Query String parameters:
5/30/2014 4:52:21 PM [516,63]     ae: Item
5/30/2014 4:52:21 PM [516,63]     a: Open
5/30/2014 4:52:21 PM [516,63]     t: ipm.note.enterprisevault.shortcut
5/30/2014 4:52:21 PM [516,63]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:52:21 PM [516,63]     EVItemUnavailable: 1
5/30/2014 4:52:21 PM [516,63] Form: 
5/30/2014 4:52:21 PM [516,63] EV Extensions Resource version: v8.0.3.1845
5/30/2014 4:52:21 PM [516,63] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:52:21 PM [516,63] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:52:21 PM [516,63] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.ArchivedItemUnavailable
5/30/2014 4:52:21 PM [516,63] Response filter finished
5/30/2014 4:52:55 PM [516,67] #############################################################
5/30/2014 4:52:55 PM [516,67] Request processing started
5/30/2014 4:52:55 PM [516,67] Url: http://webmail.abc.com/owa/redir.aspx?URL=/Viewmessage.asp?vaultid=10D04F53B98CCFC4086552BA3222F15301110000EVSYS&savesetid=201010086560828~201007051127050000~Z~C000AEB7651A88A883FCD889721856A1&OWA2007=1&OWA2007Url=http%253a%252f%252fwebmail.abc.com%252fowa%252f
5/30/2014 4:52:55 PM [516,67] RawUrl: /owa/redir.aspx?URL=%2fViewmessage.asp%3fvaultid%3d10D04F53B98CCFC4086552BA3222F15301110000EVSYS%26savesetid%3d201010086560828~201007051127050000~Z~C000AEB7651A88A883FCD889721856A1%26OWA2007%3d1%26OWA2007Url%3dhttp%253a%252f%252fwebmail.abc.com%252fowa%252f
5/30/2014 4:52:55 PM [516,67] Query String parameters:
5/30/2014 4:52:55 PM [516,67]     URL: /Viewmessage.asp?vaultid=10D04F53B98CCFC4086552BA3222F15301110000EVSYS&savesetid=201010086560828~201007051127050000~Z~C000AEB7651A88A883FCD889721856A1&OWA2007=1&OWA2007Url=http%3a%2f%2fwebmail.abc.com%2fowa%2f
5/30/2014 4:52:55 PM [516,67] Form: 
5/30/2014 4:52:55 PM [516,67] OWA Session details
5/30/2014 4:52:55 PM [516,67]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:52:55 PM [516,67]     Authentication type: Basic
5/30/2014 4:52:55 PM [516,67]     Authenticated user: abc\user1
5/30/2014 4:52:55 PM [516,67]     Client IP Address: 192.168.113.228
5/30/2014 4:52:55 PM [516,67]     Server IP Address: 10.1.60.87
5/30/2014 4:52:55 PM [516,67]     Host: webmail.abc.com
5/30/2014 4:52:55 PM [516,67] Primary SMTP Address: user1@abc.com
5/30/2014 4:52:55 PM [516,67] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:52:55 PM [516,67] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:52:55 PM [516,67] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:52:55 PM [516,67] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:52:55 PM [516,67] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:52:55 PM [516,67] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:52:55 PM [516,67] Request processing finished
5/30/2014 4:54:18 PM [516,1] #############################################################
5/30/2014 4:54:18 PM [516,1] Request processing started
5/30/2014 4:54:18 PM [516,1] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 4:54:18 PM [516,1] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 4:54:18 PM [516,1] Query String parameters:
5/30/2014 4:54:18 PM [516,1]     oeh: 1
5/30/2014 4:54:18 PM [516,1]     ns: Notify
5/30/2014 4:54:18 PM [516,1]     ev: Poll
5/30/2014 4:54:18 PM [516,1] Form: 
5/30/2014 4:54:18 PM [516,1] OWA Session details
5/30/2014 4:54:18 PM [516,1]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:54:18 PM [516,1]     Authentication type: Basic
5/30/2014 4:54:18 PM [516,1]     Authenticated user: abc\user1
5/30/2014 4:54:18 PM [516,1]     Client IP Address: 192.168.113.228
5/30/2014 4:54:18 PM [516,1]     Server IP Address: 10.1.60.87
5/30/2014 4:54:18 PM [516,1]     Host: webmail.abc.com
5/30/2014 4:54:18 PM [516,1] Primary SMTP Address: user1@abc.com
5/30/2014 4:54:18 PM [516,1] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:54:18 PM [516,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:54:18 PM [516,1] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:54:18 PM [516,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:54:18 PM [516,1] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:54:18 PM [516,1] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:54:18 PM [516,1] Request processing finished
5/30/2014 4:54:18 PM [516,1] #############################################################
5/30/2014 4:54:18 PM [516,1] Request processing started
5/30/2014 4:54:18 PM [516,1] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 4:54:18 PM [516,1] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 4:54:18 PM [516,1] Query String parameters:
5/30/2014 4:54:18 PM [516,1]     oeh: 1
5/30/2014 4:54:18 PM [516,1]     ns: Notify
5/30/2014 4:54:18 PM [516,1]     ev: Poll
5/30/2014 4:54:18 PM [516,1] Form: 
5/30/2014 4:54:18 PM [516,1] OWA Session details
5/30/2014 4:54:18 PM [516,1]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:54:18 PM [516,1]     Authentication type: Basic
5/30/2014 4:54:18 PM [516,1]     Authenticated user: abc\user1
5/30/2014 4:54:18 PM [516,1]     Client IP Address: 192.168.113.228
5/30/2014 4:54:18 PM [516,1]     Server IP Address: 10.1.60.87
5/30/2014 4:54:18 PM [516,1]     Host: webmail.abc.com
5/30/2014 4:54:18 PM [516,1] Primary SMTP Address: user1@abc.com
5/30/2014 4:54:18 PM [516,1] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:54:18 PM [516,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:54:18 PM [516,1] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:54:18 PM [516,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:54:18 PM [516,1] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:54:18 PM [516,1] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
5/30/2014 4:54:18 PM [516,1] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:54:18 PM [516,1] Request processing finished
5/30/2014 4:56:18 PM [516,67] #############################################################
5/30/2014 4:56:18 PM [516,67] Request processing started
5/30/2014 4:56:18 PM [516,67] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 4:56:18 PM [516,67] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 4:56:18 PM [516,67] Query String parameters:
5/30/2014 4:56:18 PM [516,67]     oeh: 1
5/30/2014 4:56:18 PM [516,67]     ns: Notify
5/30/2014 4:56:18 PM [516,67]     ev: Poll
5/30/2014 4:56:18 PM [516,67] Form: 
5/30/2014 4:56:18 PM [516,67] OWA Session details
5/30/2014 4:56:18 PM [516,67]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:56:18 PM [516,67]     Authentication type: Basic
5/30/2014 4:56:18 PM [516,67]     Authenticated user: abc\user1
5/30/2014 4:56:18 PM [516,67]     Client IP Address: 192.168.113.228
5/30/2014 4:56:18 PM [516,67]     Server IP Address: 10.1.60.87
5/30/2014 4:56:18 PM [516,67]     Host: webmail.abc.com
5/30/2014 4:56:18 PM [516,67] Primary SMTP Address: user1@abc.com
5/30/2014 4:56:18 PM [516,67] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:56:18 PM [516,67] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:56:18 PM [516,67] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:56:18 PM [516,67] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:56:18 PM [516,67] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:56:18 PM [516,67] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:56:18 PM [516,67] Request processing finished
5/30/2014 4:56:18 PM [516,67] #############################################################
5/30/2014 4:56:18 PM [516,67] Request processing started
5/30/2014 4:56:18 PM [516,67] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 4:56:18 PM [516,67] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 4:56:18 PM [516,67] Query String parameters:
5/30/2014 4:56:18 PM [516,67]     oeh: 1
5/30/2014 4:56:18 PM [516,67]     ns: Notify
5/30/2014 4:56:18 PM [516,67]     ev: Poll
5/30/2014 4:56:18 PM [516,67] Form: 
5/30/2014 4:56:18 PM [516,67] OWA Session details
5/30/2014 4:56:18 PM [516,67]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:56:18 PM [516,67]     Authentication type: Basic
5/30/2014 4:56:18 PM [516,67]     Authenticated user: abc\user1
5/30/2014 4:56:18 PM [516,67]     Client IP Address: 192.168.113.228
5/30/2014 4:56:18 PM [516,67]     Server IP Address: 10.1.60.87
5/30/2014 4:56:18 PM [516,67]     Host: webmail.abc.com
5/30/2014 4:56:18 PM [516,67] Primary SMTP Address: user1@abc.com
5/30/2014 4:56:18 PM [516,67] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:56:18 PM [516,67] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:56:18 PM [516,67] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:56:18 PM [516,67] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:56:18 PM [516,67] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:56:18 PM [516,67] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
5/30/2014 4:56:18 PM [516,67] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:56:18 PM [516,67] Request processing finished
5/30/2014 4:58:12 PM [516,67] #############################################################
5/30/2014 4:58:12 PM [516,67] Request processing started
5/30/2014 4:58:12 PM [516,67] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:58:12 PM [516,67] RawUrl: /owa/Default.aspx?ae=Item&a=Open&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:58:12 PM [516,67] Query String parameters:
5/30/2014 4:58:12 PM [516,67]     ae: Item
5/30/2014 4:58:12 PM [516,67]     a: Open
5/30/2014 4:58:12 PM [516,67]     t: IPM.Note.EnterpriseVault.Shortcut
5/30/2014 4:58:12 PM [516,67]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:58:12 PM [516,67] Form: 
5/30/2014 4:58:12 PM [516,67] OWA Session details
5/30/2014 4:58:12 PM [516,67]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:58:12 PM [516,67]     Authentication type: Basic
5/30/2014 4:58:12 PM [516,67]     Authenticated user: abc\user1
5/30/2014 4:58:12 PM [516,67]     Client IP Address: 192.168.113.228
5/30/2014 4:58:12 PM [516,67]     Server IP Address: 10.1.60.87
5/30/2014 4:58:12 PM [516,67]     Host: webmail.abc.com
5/30/2014 4:58:12 PM [516,67] Primary SMTP Address: user1@abc.com
5/30/2014 4:58:12 PM [516,67] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:58:12 PM [516,67] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:58:12 PM [516,67] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:58:12 PM [516,67] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:58:12 PM [516,67] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:58:12 PM [516,67] [RequestProcessor::ProcessItem] started
5/30/2014 4:58:12 PM [516,67] [RequestProcessor::ProcessItem] Processing EV item
5/30/2014 4:58:12 PM [516,67] [RequestProcessor::ProcessOWAItemAction] started
5/30/2014 4:58:12 PM [516,67] [RequestProcessor::ProcessOWAItemAction] Opening archived item
5/30/2014 4:58:12 PM [516,67] [Id::EwsId] Converting OwaId to EwsId
5/30/2014 4:58:12 PM [516,67] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
5/30/2014 4:58:12 PM [516,67] [ConvertId::DoConvertId] Converting ID using web services
5/30/2014 4:58:12 PM [516,67] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAA=
5/30/2014 4:58:12 PM [516,67] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties] Loading properties for: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAA=
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties] Loaded item properties: 
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   Id: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAA=
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAB9Up+iiqbWT6PR/JQQ3fLgAAAjIyH2
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   Size: 4223
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNAAuAAAAAAA+drvYRw5rS72vr3/RCe0lAQB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAA=
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   Archive Id: 10D04F53B98CCFC4086552BA3222F15301110000EVSYS
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   Saveset Id: 201010086560828~201007051127050000~Z~C000AEB7651A88A883FCD889721856A1
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   Original Content Class: urn:content-classes:message
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   Original Size: 32496
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   View Item Ref Count: 
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   Archived Date: 10/9/2010 2:00:33 AM
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   Restored Date: 
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   Post Processed Date: 
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   Last modified time: 10/9/2010 2:00:28 AM
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   PR_URL_NAME: /Inbox/AD migration in Paramount Printing status update-3.EML
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
5/30/2014 4:58:12 PM [516,67] [MailboxItem::LoadProperties]   Original Icon Index: -1
5/30/2014 4:58:12 PM [516,67] [Id::OwaId] Returning cached OwaId: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:58:12 PM [516,67] [WebDAVRequest::Send] Request url: https://localhost/exchange/user1@abc.com/Deleted Items/10D04F53B98CCFC4086552BA3222F15301110000EVSYS!201010086560828.201007051127050000.Z.C000AEB7651A88A883FCD889721856A1.EML
5/30/2014 4:58:12 PM [516,67] [WebDAVRequest::Send] Request method: PROPFIND
5/30/2014 4:58:12 PM [516,67] [WebDAVRequest::Send] Request timeout (milliseconds): 30000
5/30/2014 4:58:12 PM [516,67] [WebDAVRequest::Send] Adding FBA cookies
5/30/2014 4:58:12 PM [516,67] [WebDAVRequest::Send] Adding Depth header: 0
5/30/2014 4:58:12 PM [516,67] [WebDAVRequest::Send] Request body: <?xml version="1.0"?><d:propfind xmlns:d="DAV:" ><d:prop><mapi:x0FFF0102 xmlns:mapi="http://schemas.microsoft.com/mapi/proptag/" /><exch:outlookmessageclass xmlns:exch="http://schemas.microsoft.com/exchange/" /></d:prop></d:propfind>
5/30/2014 4:58:33 PM [516,67] [WebDAVRequest::Send] Exception sending WebDAV request: System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 192.168.113.228:443
   at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
   at System.Net.Sockets.Socket.InternalConnect(EndPoint remoteEP)
   at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Int32 timeout, Exception& exception)
   --- End of inner exception stack trace ---
   at System.Net.HttpWebRequest.GetResponse()
   at Symantec.EnterpriseVault.Owa.ExchangeStoreAccess.WebDAVRequest.Send()
5/30/2014 4:58:33 PM [516,67] [EVServerRequest::CreateRequest] Sending request to: /restoreo2k.asp?vaultid=10D04F53B98CCFC4086552BA3222F15301110000EVSYS&savesetid=201010086560828~201007051127050000~Z~C000AEB7651A88A883FCD889721856A1&mbx=user1@abc.com&server=abc07BE&restorelocation=3&foldername=Deleted Items
5/30/2014 4:58:33 PM [516,67] [RestoreRequest::Send] Exception sending request to restore item: System.UriFormatException: Invalid URI: The format of the URI could not be determined.
   at System.Uri.CreateThis(String uri, Boolean dontEscape, UriKind uriKind)
   at System.Net.WebRequest.Create(String requestUriString)
   at Symantec.EnterpriseVault.Owa.EVServerRequests.EVServerRequest.CreateRequest(String sUrl)
   at Symantec.EnterpriseVault.Owa.EVServerRequests.RestoreRequest.Send()
5/30/2014 4:58:33 PM [516,67] [RequestProcessor::RestoreAndActOnItem] Item not restored
5/30/2014 4:58:33 PM [516,67] [Id::OwaId] Returning cached OwaId: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:58:33 PM [516,67] [RequestProcessor::RestoreAndActOnMailboxItem] Redirecting client to: /owa/?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAAAZnkL1AAAJ&EVItemUnavailable=1
5/30/2014 4:58:33 PM [516,67] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:58:33 PM [516,67] Request processing finished
5/30/2014 4:58:33 PM [516,66] #############################################################
5/30/2014 4:58:33 PM [516,66] Request processing started
5/30/2014 4:58:33 PM [516,66] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 4:58:33 PM [516,66] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 4:58:33 PM [516,66] Query String parameters:
5/30/2014 4:58:33 PM [516,66]     oeh: 1
5/30/2014 4:58:33 PM [516,66]     ns: Notify
5/30/2014 4:58:33 PM [516,66]     ev: Poll
5/30/2014 4:58:33 PM [516,66] Form: 
5/30/2014 4:58:33 PM [516,66] OWA Session details
5/30/2014 4:58:33 PM [516,66]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:58:33 PM [516,66]     Authentication type: Basic
5/30/2014 4:58:33 PM [516,66]     Authenticated user: abc\user1
5/30/2014 4:58:33 PM [516,66]     Client IP Address: 192.168.113.228
5/30/2014 4:58:33 PM [516,66]     Server IP Address: 10.1.60.87
5/30/2014 4:58:33 PM [516,66]     Host: webmail.abc.com
5/30/2014 4:58:33 PM [516,66] Primary SMTP Address: user1@abc.com
5/30/2014 4:58:33 PM [516,66] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:58:33 PM [516,66] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:58:33 PM [516,66] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:58:33 PM [516,66] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:58:33 PM [516,66] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:58:33 PM [516,66] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:58:33 PM [516,66] Request processing finished
5/30/2014 4:58:33 PM [516,66] #############################################################
5/30/2014 4:58:33 PM [516,66] Request processing started
5/30/2014 4:58:33 PM [516,66] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 4:58:33 PM [516,66] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 4:58:33 PM [516,66] Query String parameters:
5/30/2014 4:58:33 PM [516,66]     oeh: 1
5/30/2014 4:58:33 PM [516,66]     ns: Notify
5/30/2014 4:58:33 PM [516,66]     ev: Poll
5/30/2014 4:58:33 PM [516,66] Form: 
5/30/2014 4:58:33 PM [516,66] OWA Session details
5/30/2014 4:58:33 PM [516,66]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:58:33 PM [516,66]     Authentication type: Basic
5/30/2014 4:58:33 PM [516,66]     Authenticated user: abc\user1
5/30/2014 4:58:33 PM [516,66]     Client IP Address: 192.168.113.228
5/30/2014 4:58:33 PM [516,66]     Server IP Address: 10.1.60.87
5/30/2014 4:58:33 PM [516,66]     Host: webmail.abc.com
5/30/2014 4:58:33 PM [516,66] Primary SMTP Address: user1@abc.com
5/30/2014 4:58:33 PM [516,66] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:58:33 PM [516,66] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:58:33 PM [516,66] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:58:33 PM [516,66] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:58:33 PM [516,66] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:58:33 PM [516,66] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
5/30/2014 4:58:33 PM [516,66] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:58:33 PM [516,66] Request processing finished
5/30/2014 4:58:33 PM [516,1] #############################################################
5/30/2014 4:58:33 PM [516,1] Request processing started
5/30/2014 4:58:33 PM [516,1] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ&EVItemUnavailable=1
5/30/2014 4:58:33 PM [516,1] RawUrl: /owa/Default.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAAAZnkL1AAAJ&EVItemUnavailable=1
5/30/2014 4:58:33 PM [516,1] Query String parameters:
5/30/2014 4:58:33 PM [516,1]     ae: Item
5/30/2014 4:58:33 PM [516,1]     a: Open
5/30/2014 4:58:33 PM [516,1]     t: ipm.note.enterprisevault.shortcut
5/30/2014 4:58:33 PM [516,1]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:58:33 PM [516,1]     EVItemUnavailable: 1
5/30/2014 4:58:33 PM [516,1] Form: 
5/30/2014 4:58:33 PM [516,1] OWA Session details
5/30/2014 4:58:33 PM [516,1]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:58:33 PM [516,1]     Authentication type: Basic
5/30/2014 4:58:33 PM [516,1]     Authenticated user: abc\user1
5/30/2014 4:58:33 PM [516,1]     Client IP Address: 192.168.113.228
5/30/2014 4:58:33 PM [516,1]     Server IP Address: 10.1.60.87
5/30/2014 4:58:33 PM [516,1]     Host: webmail.abc.com
5/30/2014 4:58:33 PM [516,1] Primary SMTP Address: user1@abc.com
5/30/2014 4:58:33 PM [516,1] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:58:33 PM [516,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:58:33 PM [516,1] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:58:33 PM [516,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:58:33 PM [516,1] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:58:33 PM [516,1] [RequestProcessor::ProcessItem] started
5/30/2014 4:58:33 PM [516,1] [RequestProcessor::ProcessItem] Processing EV item
5/30/2014 4:58:33 PM [516,1] [RequestProcessor::ProcessOWAItemAction] started
5/30/2014 4:58:33 PM [516,1] [RequestProcessor::ProcessOWAItemAction] Opening shortcut due to unavailable item
5/30/2014 4:58:33 PM [516,1] [Id::EwsId] Converting OwaId to EwsId
5/30/2014 4:58:33 PM [516,1] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
5/30/2014 4:58:33 PM [516,1] [ConvertId::DoConvertId] Converting ID using web services
5/30/2014 4:58:33 PM [516,1] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAA=
5/30/2014 4:58:33 PM [516,1] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties] Loading properties for: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAA=
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties] Loaded item properties: 
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   Id: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNABGAAAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAA=
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAB9Up+iiqbWT6PR/JQQ3fLgAAAjIyH2
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   Size: 4223
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADYzZGRhMjczLWNlMzYtNDZiYy1iOWI5LWRkYjhhY2E4MzYwNAAuAAAAAAA+drvYRw5rS72vr3/RCe0lAQB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAA=
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   Archive Id: 10D04F53B98CCFC4086552BA3222F15301110000EVSYS
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   Saveset Id: 201010086560828~201007051127050000~Z~C000AEB7651A88A883FCD889721856A1
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   Original Content Class: urn:content-classes:message
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   Original Size: 32496
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   View Item Ref Count: 
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   Archived Date: 10/9/2010 2:00:33 AM
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   Restored Date: 
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   Post Processed Date: 
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   Last modified time: 10/9/2010 2:00:28 AM
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   PR_URL_NAME: /Inbox/AD migration in Paramount Printing status update-3.EML
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
5/30/2014 4:58:33 PM [516,1] [MailboxItem::LoadProperties]   Original Icon Index: -1
5/30/2014 4:58:33 PM [516,1] [RequestProcessor::ProcessOWAItemAction] Setting response filter: Premium.ArchivedItemUnavailable
5/30/2014 4:58:33 PM [516,1] [RequestProcessor::ProcessOWAItemAction] Finished
5/30/2014 4:58:33 PM [516,1] [RequestProcessor::ProcessItem] Finished
5/30/2014 4:58:33 PM [516,1] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:58:33 PM [516,1] Request processing finished
5/30/2014 4:58:33 PM [516,1] #############################################################
5/30/2014 4:58:33 PM [516,1] Request processing started
5/30/2014 4:58:33 PM [516,1] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ&EVItemUnavailable=1
5/30/2014 4:58:33 PM [516,1] RawUrl: /owa/Default.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAAAZnkL1AAAJ&EVItemUnavailable=1
5/30/2014 4:58:33 PM [516,1] Query String parameters:
5/30/2014 4:58:33 PM [516,1]     ae: Item
5/30/2014 4:58:33 PM [516,1]     a: Open
5/30/2014 4:58:33 PM [516,1]     t: ipm.note.enterprisevault.shortcut
5/30/2014 4:58:33 PM [516,1]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:58:33 PM [516,1]     EVItemUnavailable: 1
5/30/2014 4:58:33 PM [516,1] Form: 
5/30/2014 4:58:33 PM [516,1] OWA Session details
5/30/2014 4:58:33 PM [516,1]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:58:33 PM [516,1]     Authentication type: Basic
5/30/2014 4:58:33 PM [516,1]     Authenticated user: abc\user1
5/30/2014 4:58:33 PM [516,1]     Client IP Address: 192.168.113.228
5/30/2014 4:58:33 PM [516,1]     Server IP Address: 10.1.60.87
5/30/2014 4:58:33 PM [516,1]     Host: webmail.abc.com
5/30/2014 4:58:33 PM [516,1] Primary SMTP Address: user1@abc.com
5/30/2014 4:58:33 PM [516,1] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:58:33 PM [516,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:58:33 PM [516,1] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:58:33 PM [516,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:58:33 PM [516,1] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:58:33 PM [516,1] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
5/30/2014 4:58:33 PM [516,1] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:58:33 PM [516,1] Request processing finished
5/30/2014 4:58:33 PM [516,1] #############################################################
5/30/2014 4:58:33 PM [516,1] Response filter started
5/30/2014 4:58:33 PM [516,1] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ&EVItemUnavailable=1
5/30/2014 4:58:33 PM [516,1] RawUrl: /owa/Default.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAAA%2bdrvYRw5rS72vr3%2fRCe0lBwB9Up%2biiqbWT6PR%2fJQQ3fLgAAALEpf1AAB9Up%2biiqbWT6PR%2fJQQ3fLgAAAZnkL1AAAJ&EVItemUnavailable=1
5/30/2014 4:58:33 PM [516,1] Query String parameters:
5/30/2014 4:58:33 PM [516,1]     ae: Item
5/30/2014 4:58:33 PM [516,1]     a: Open
5/30/2014 4:58:33 PM [516,1]     t: ipm.note.enterprisevault.shortcut
5/30/2014 4:58:33 PM [516,1]     id: RgAAAAA+drvYRw5rS72vr3/RCe0lBwB9Up+iiqbWT6PR/JQQ3fLgAAALEpf1AAB9Up+iiqbWT6PR/JQQ3fLgAAAZnkL1AAAJ
5/30/2014 4:58:33 PM [516,1]     EVItemUnavailable: 1
5/30/2014 4:58:33 PM [516,1] Form: 
5/30/2014 4:58:33 PM [516,1] EV Extensions Resource version: v8.0.3.1845
5/30/2014 4:58:33 PM [516,1] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:58:33 PM [516,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:58:33 PM [516,1] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.ArchivedItemUnavailable
5/30/2014 4:58:33 PM [516,1] Response filter finished
5/30/2014 4:58:36 PM [516,1] #############################################################
5/30/2014 4:58:36 PM [516,1] Request processing started
5/30/2014 4:58:36 PM [516,1] Url: http://webmail.abc.com/owa/redir.aspx?URL=/Viewmessage.asp?vaultid=10D04F53B98CCFC4086552BA3222F15301110000EVSYS&savesetid=201010086560828~201007051127050000~Z~C000AEB7651A88A883FCD889721856A1&OWA2007=1&OWA2007Url=http%253a%252f%252fwebmail.abc.com%252fowa%252f
5/30/2014 4:58:36 PM [516,1] RawUrl: /owa/redir.aspx?URL=%2fViewmessage.asp%3fvaultid%3d10D04F53B98CCFC4086552BA3222F15301110000EVSYS%26savesetid%3d201010086560828~201007051127050000~Z~C000AEB7651A88A883FCD889721856A1%26OWA2007%3d1%26OWA2007Url%3dhttp%253a%252f%252fwebmail.abc.com%252fowa%252f
5/30/2014 4:58:36 PM [516,1] Query String parameters:
5/30/2014 4:58:36 PM [516,1]     URL: /Viewmessage.asp?vaultid=10D04F53B98CCFC4086552BA3222F15301110000EVSYS&savesetid=201010086560828~201007051127050000~Z~C000AEB7651A88A883FCD889721856A1&OWA2007=1&OWA2007Url=http%3a%2f%2fwebmail.abc.com%2fowa%2f
5/30/2014 4:58:36 PM [516,1] Form: 
5/30/2014 4:58:36 PM [516,1] OWA Session details
5/30/2014 4:58:36 PM [516,1]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 4:58:36 PM [516,1]     Authentication type: Basic
5/30/2014 4:58:36 PM [516,1]     Authenticated user: abc\user1
5/30/2014 4:58:36 PM [516,1]     Client IP Address: 192.168.113.228
5/30/2014 4:58:36 PM [516,1]     Server IP Address: 10.1.60.87
5/30/2014 4:58:36 PM [516,1]     Host: webmail.abc.com
5/30/2014 4:58:36 PM [516,1] Primary SMTP Address: user1@abc.com
5/30/2014 4:58:36 PM [516,1] EV Extensions DLL version: 8.0.3.0
5/30/2014 4:58:36 PM [516,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 4:58:36 PM [516,1] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 4:58:36 PM [516,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 4:58:36 PM [516,1] [EVContext::IsValidBrowser] Returning: True
5/30/2014 4:58:36 PM [516,1] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 4:58:36 PM [516,1] Request processing finished
5/30/2014 5:00:18 PM [516,1] #############################################################
5/30/2014 5:00:18 PM [516,1] Request processing started
5/30/2014 5:00:18 PM [516,1] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 5:00:18 PM [516,1] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 5:00:18 PM [516,1] Query String parameters:
5/30/2014 5:00:18 PM [516,1]     oeh: 1
5/30/2014 5:00:18 PM [516,1]     ns: Notify
5/30/2014 5:00:18 PM [516,1]     ev: Poll
5/30/2014 5:00:18 PM [516,1] Form: 
5/30/2014 5:00:18 PM [516,1] OWA Session details
5/30/2014 5:00:18 PM [516,1]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 5:00:18 PM [516,1]     Authentication type: Basic
5/30/2014 5:00:18 PM [516,1]     Authenticated user: abc\user1
5/30/2014 5:00:18 PM [516,1]     Client IP Address: 192.168.113.228
5/30/2014 5:00:18 PM [516,1]     Server IP Address: 10.1.60.87
5/30/2014 5:00:18 PM [516,1]     Host: webmail.abc.com
5/30/2014 5:00:18 PM [516,1] Primary SMTP Address: user1@abc.com
5/30/2014 5:00:18 PM [516,1] EV Extensions DLL version: 8.0.3.0
5/30/2014 5:00:18 PM [516,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 5:00:18 PM [516,1] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 5:00:18 PM [516,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 5:00:18 PM [516,1] [EVContext::IsValidBrowser] Returning: True
5/30/2014 5:00:18 PM [516,1] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 5:00:18 PM [516,1] Request processing finished
5/30/2014 5:00:18 PM [516,1] #############################################################
5/30/2014 5:00:18 PM [516,1] Request processing started
5/30/2014 5:00:18 PM [516,1] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 5:00:18 PM [516,1] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 5:00:18 PM [516,1] Query String parameters:
5/30/2014 5:00:18 PM [516,1]     oeh: 1
5/30/2014 5:00:18 PM [516,1]     ns: Notify
5/30/2014 5:00:18 PM [516,1]     ev: Poll
5/30/2014 5:00:18 PM [516,1] Form: 
5/30/2014 5:00:18 PM [516,1] OWA Session details
5/30/2014 5:00:18 PM [516,1]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 5:00:18 PM [516,1]     Authentication type: Basic
5/30/2014 5:00:18 PM [516,1]     Authenticated user: abc\user1
5/30/2014 5:00:18 PM [516,1]     Client IP Address: 192.168.113.228
5/30/2014 5:00:18 PM [516,1]     Server IP Address: 10.1.60.87
5/30/2014 5:00:18 PM [516,1]     Host: webmail.abc.com
5/30/2014 5:00:18 PM [516,1] Primary SMTP Address: user1@abc.com
5/30/2014 5:00:18 PM [516,1] EV Extensions DLL version: 8.0.3.0
5/30/2014 5:00:18 PM [516,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 5:00:18 PM [516,1] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 5:00:18 PM [516,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 5:00:18 PM [516,1] [EVContext::IsValidBrowser] Returning: True
5/30/2014 5:00:18 PM [516,1] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
5/30/2014 5:00:18 PM [516,1] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 5:00:18 PM [516,1] Request processing finished
5/30/2014 5:02:18 PM [516,1] #############################################################
5/30/2014 5:02:18 PM [516,1] Request processing started
5/30/2014 5:02:18 PM [516,1] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 5:02:18 PM [516,1] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 5:02:18 PM [516,1] Query String parameters:
5/30/2014 5:02:18 PM [516,1]     oeh: 1
5/30/2014 5:02:18 PM [516,1]     ns: Notify
5/30/2014 5:02:18 PM [516,1]     ev: Poll
5/30/2014 5:02:18 PM [516,1] Form: 
5/30/2014 5:02:18 PM [516,1] OWA Session details
5/30/2014 5:02:18 PM [516,1]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 5:02:18 PM [516,1]     Authentication type: Basic
5/30/2014 5:02:18 PM [516,1]     Authenticated user: abc\user1
5/30/2014 5:02:18 PM [516,1]     Client IP Address: 192.168.113.228
5/30/2014 5:02:18 PM [516,1]     Server IP Address: 10.1.60.87
5/30/2014 5:02:18 PM [516,1]     Host: webmail.abc.com
5/30/2014 5:02:18 PM [516,1] Primary SMTP Address: user1@abc.com
5/30/2014 5:02:18 PM [516,1] EV Extensions DLL version: 8.0.3.0
5/30/2014 5:02:18 PM [516,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 5:02:18 PM [516,1] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 5:02:18 PM [516,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 5:02:18 PM [516,1] [EVContext::IsValidBrowser] Returning: True
5/30/2014 5:02:18 PM [516,1] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 5:02:18 PM [516,1] Request processing finished
5/30/2014 5:02:18 PM [516,1] #############################################################
5/30/2014 5:02:18 PM [516,1] Request processing started
5/30/2014 5:02:18 PM [516,1] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 5:02:18 PM [516,1] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
5/30/2014 5:02:18 PM [516,1] Query String parameters:
5/30/2014 5:02:18 PM [516,1]     oeh: 1
5/30/2014 5:02:18 PM [516,1]     ns: Notify
5/30/2014 5:02:18 PM [516,1]     ev: Poll
5/30/2014 5:02:18 PM [516,1] Form: 
5/30/2014 5:02:18 PM [516,1] OWA Session details
5/30/2014 5:02:18 PM [516,1]     User agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
5/30/2014 5:02:18 PM [516,1]     Authentication type: Basic
5/30/2014 5:02:18 PM [516,1]     Authenticated user: abc\user1
5/30/2014 5:02:18 PM [516,1]     Client IP Address: 192.168.113.228
5/30/2014 5:02:18 PM [516,1]     Server IP Address: 10.1.60.87
5/30/2014 5:02:18 PM [516,1]     Host: webmail.abc.com
5/30/2014 5:02:18 PM [516,1] Primary SMTP Address: user1@abc.com
5/30/2014 5:02:18 PM [516,1] EV Extensions DLL version: 8.0.3.0
5/30/2014 5:02:18 PM [516,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
5/30/2014 5:02:18 PM [516,1] [EVContext::Initialise] EVContext intialised at 5/30/2014 4:51:47 PM
5/30/2014 5:02:18 PM [516,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
5/30/2014 5:02:18 PM [516,1] [EVContext::IsValidBrowser] Returning: True
5/30/2014 5:02:18 PM [516,1] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
5/30/2014 5:02:18 PM [516,1] [RequestProcessor:StopImpersonation] Stopped impersonation
5/30/2014 5:02:18 PM [516,1] Request processing finished