cancel
Showing results for 
Search instead for 
Did you mean: 

Journaling: Archived Items stuck in the journal mailbox

jdewing
Level 4

After journal items archived, some stay in the mailbox forever while other items moved to the Enterprise Vault.  Right now I have about ~100 archived items stuck in the mailbox dating back for couple of weeks.

If I open any of the “stuck” items, I will get the following error along with attachment file “Quarantined Attachment.txt”:

“The custom form cannot be opened. Outlook will use an Outlook from instead. The form required to view this message cannot be displayed. Contact your administrator.”

The message from “Quarantined attachment.txt” would be “Symantec Mail Security replaced <mail subject> with this text message. The original file contained a filtering violation and was quarantined.”

Our Environment:

  • Exchange 2010
  • Enterprise Vault 10.0.4 with Hotfix 1

 

How can I fix this?

1 ACCEPTED SOLUTION

Accepted Solutions

JesusWept3
Level 6
Partner Accredited Certified

really it should be moved to invalid journal report, but i guess it depends on how the SMS handles it.
I think really you need to talk to SMS support and see if there is something you can do to have it move the items or delete them, at least just from the journal, or talk to EV support to see if its a bug as to why it won't move the item to a failed folder instead of just leaving it there

https://www.linkedin.com/in/alex-allen-turl-07370146

View solution in original post

6 REPLIES 6

JesusWept3
Level 6
Partner Accredited Certified

Sounds like you see the issue is that the items are being quarantined by SMS.
Probably best bet is to see if theres a way to configure it to move the items to a different folder or delete them altogether so they're not in the inbox anymore

https://www.linkedin.com/in/alex-allen-turl-07370146

GertjanA
Moderator
Moderator
Partner    VIP    Accredited Certified

A crude but effective workaround would be to Exclude the Journal Mailbox from AV-scanning.

Regards. Gertjan

jdewing
Level 4

I don't know if I want to excluded the Journal Mailbox from SMSME (Symantec Mail Security for MS Exchange".  "Virus" attached to email could still go to Journal Mailbox and then it will get archived.

I'm trying to figure out if I can exclude with attachement "Quarantined Attachment.txt" to delete it

 

Darryl_R
Level 3
Employee Accredited

I would assume you have tried requeing these files? Have these files been moved to a folder in the Journal mailbox? Do these emails have attachments that were stripped by the AV solution?

jdewing
Level 4

No, the files are still sitting in the inbox. I thought after few retries, it should move to a "Failed to copy" or other EV folder. I do get the Event ID 2270 "A queued operation exceeded the retry count and has been discarded". I don't know if it related.

Yes, the attachment files were replaced or added by the AV solution.

 

 

JesusWept3
Level 6
Partner Accredited Certified

really it should be moved to invalid journal report, but i guess it depends on how the SMS handles it.
I think really you need to talk to SMS support and see if there is something you can do to have it move the items or delete them, at least just from the journal, or talk to EV support to see if its a bug as to why it won't move the item to a failed folder instead of just leaving it there

https://www.linkedin.com/in/alex-allen-turl-07370146