How to find when a mailbox was enabled for archiving

[ia01]

Using EV 10.0.1

Need to find out when a mailbox was first enabled for archiving. Any way that we can find that?

Many Thanks

[TonySterling]

This might help, Wayne posted this here: https://www-secure.symantec.com/connect/forums/sql-query-show-date-archive-was-created

This runs against the vault store database.

SELECT 
MbxDisplayName AS 'Mailbox',
ExchangeComputer AS 'Exchange Server',
MbxItemCount AS '#Items (Mailbox)',
VS1.ArchivedItems AS '#Items (Archive)',
MbxSize/1024 AS 'Mbx Size (MB)',
VS1.ArchivedItemsSize/1024 AS  'Archive Size(MB)',
(mbxsize+VS1.ArchivedItemsSize)/1024 AS 'Total Size(MB)',
VS1.CreatedDate AS 'Archive Created',
VS1.ModifiedDate AS 'Archive Updated', 
MbxExchangeState AS 'Exchange State'
 
FROM
EnterpriseVaultDirectory.dbo.ExchangeMailboxEntry AS EME,
EnterpriseVaultDirectory.dbo.ExchangeServerEntry AS ESE,
EVMailboxVS01..ArchivePoint AS VS1
 
WHERE
EME.DefaultVaultID  = VS1.ArchivePointID AND
EME.MbxArchivingState = 1 AND
EME.ExchangeServerIdentity = ESE.ExchangeServerIdentity 

[TonySterling · Accepted solution]

I had to update it a bit for EV 10, here you go:

SELECT
MbxDisplayName AS 'Mailbox',
ExchangeComputer AS 'Exchange Server',
VS1.CreatedDate AS 'Archive Created',
VS1.ModifiedDate AS 'Archive Updated',
MbxExchangeState AS 'Exchange State'
 
FROM
EnterpriseVaultDirectory.dbo.ExchangeMailboxEntry AS EME,
EnterpriseVaultDirectory.dbo.ExchangeServerEntry AS ESE,
EnterpriseVaultDirectory.dbo.ExchangeMailboxStore AS EMS,
"YourVaultStoreDB"..ArchivePoint AS VS1
 
WHERE
EME.DefaultVaultID  = VS1.ArchivePointID AND
EME.MbxArchivingState = 1 AND
EMS.ExchangeServerIdentity = ESE.ExchangeServerIdentity

or this one has all the original info such as number of items and size:

SELECT
MbxDisplayName AS 'Mailbox',
ExchangeComputer AS 'Exchange Server',
MbxItemCount AS '#Items (Mailbox)',
VS1.ArchivedItems AS '#Items (Archive)',
MbxSize/1024 AS 'Mbx Size (MB)',
VS1.ArchivedItemsSize/1024 AS  'Archive Size(MB)',
(mbxsize+VS1.ArchivedItemsSize)/1024 AS 'Total Size(MB)',
VS1.CreatedDate AS 'Archive Created',
VS1.ModifiedDate AS 'Archive Updated',
MbxExchangeState AS 'Exchange State'
 
FROM
EnterpriseVaultDirectory.dbo.ExchangeMailboxEntry AS EME,
EnterpriseVaultDirectory.dbo.ExchangeServerEntry AS ESE,
EnterpriseVaultDirectory.dbo.ExchangeMailboxStore AS EMS,
"YourVaultStoreDB"..ArchivePoint AS VS1ArchivePoint AS VS1
 
WHERE
EME.DefaultVaultID  = VS1.ArchivePointID AND
EME.MbxArchivingState = 1 AND
EMS.ExchangeServerIdentity = ESE.ExchangeServerIdentity

[ia01]

Many Thanks

[JesusWept3]

just to let you know thats a query based on assumption.
i.e. you can enable someone for archiving and you'd go by the archive Create Data. which is fine.
But if you disable them for 6 months and then re-enable the user and associate them with the same archive, the create date will remain when it was created at the very beginning, nothing will track when it was re-enabled again

[ia01]

Following worked for me, only thing I needed is to add EXCHANGE_VAULT_STORE_DB_NAME

SELECT

MbxDisplayName AS 'Mailbox',

ExchangeComputer AS 'Exchange Server',

VS1.CreatedDate AS 'Archive Created',

VS1.ModifiedDate AS 'Archive Updated',

MbxExchangeState AS 'Exchange State'

FROM

EnterpriseVaultDirectory.dbo.ExchangeMailboxEntry AS EME,

EnterpriseVaultDirectory.dbo.ExchangeServerEntry AS ESE,

EnterpriseVaultDirectory.dbo.ExchangeMailboxStore AS EMS,

EXCHANGE_VAULT_STORE_DB_NAME..ArchivePoint AS VS1

WHERE

EME.DefaultVaultID  = VS1.ArchivePointID AND

EME.MbxArchivingState = 1 AND

EMS.ExchangeServerIdentity = ESE.ExchangeServerIdentity