Delete message from Vault in EV 8

[Stormonts]

We have EV 8 running with 1 Exchange 2007 server.  Our users are in a provisioning group called "Unapproved users" for which the "Desktop Policy" does not have "Delete from Vault" enabled.

We have a separate provisioning group called "Administration" for which that property is enabled.

A user in the "Unapproved users" group needs to delete a message from their vault.  I added my administrator account to the target list for the "Administration" group and also gave my admin account full permission for the vault of that user.  When I open up their Vault in Outlook Web Access, the "Delete" option is still greyed out.  I tried to run the provisioning task, but that didn't help.

Does the actual user need to have their mailbox/vault that contains the message to be deleted also in the Administration provisioning group that we have set up?  I would assume that just giving a user who is in the correct Provisoning group permission to the vault in question would do it.

[TonySterling]

Can you do a search of the archive using the search.asp for the item and try to delete from there?

[rick_krieger]

Sounds like you have the admin permissions set in a way that it will work but just because you have permissions doesn't mean the button will be enabled... this is a different setting.  If you just want the admin to be able to delete this one message then consider doing a search in one of the search interfaces and delete the message from there (assuming that is not also locked down).

[Stormonts]

I logged into the VAC as the vault administrator account and gave the vault admin account full permission to the vault of the user in question.  I then performed a search and found the message.  I had to click on it to open and I had the standard X to delete button.  After I clicked on that, it warned that it would be deleted and I said yes.  I did a search again and the message is still there.

I then went tried to use the search.asp page logged in as vaultadministrator.  I found the message, selected it, clicked "Delete from vault", and received the error "You are not allowed to delete items from this vault"

[TonySterling]

I know you are on EV 8 but could you check the appropriate settings from this technote?

http://support.veritas.com/docs/286088

[Stormonts]

  I followed steps 1 and 2 in that article (the option was not checked), synched the mailboxes, restarted IIS, and it worked.

  This then leads into the question of: if that setting is enabled, do the settings in the policy override the delete option specified at the site level?  In other words, if the option is on at the site level, will a user with the appropriate policy applied (and the delete options unchecked) not be able to delete any messages?

[Paul_Grimshaw]

correct.

[TonySterling · Accepted solution]

You can also edit the WebApp.ini to remove the delete option there:

http://support.veritas.com/docs/288699

http://support.veritas.com/docs/292820

Regards,

[Stormonts]

Neither of those links mention EV 8.  In fact, the one specifically says: "These ArchiveExplorer settings are not supported in EV versions 7.0 and above."

Does that mean that they will still work, but aren't recommended?

We do have "ArchiveExplorerRestore = 0" set in our webapp.ini.

Paul, we do not want users to delete messages from the vault.  So we would be safe to leave the option enabled at the site level as long as the option to show the icons is disabled and the webapp.ini is configured as we have it?

[Stormonts]

Since the technotes don't mention it, should these settings still be used?