cancel
Showing results for 
Search instead for 
Did you mean: 

Prevent users from deleting archived messages but allow export to remove them from Vault

Stormonts
Level 5

I am not sure if this is possible or not (thought we had it working before we reveiwed some policy settings and attempted a export), but we want to set our EV environment so that users cannot delete messages from the Vault but an "Export to PST" or "Export to original mailbox" will remove them from the Vault.

We are using EV 11.0

 

With the configuration as follows, we logged into the VAC and attempted to "export to PST" or "export to original mailbox" with the "Remove exported items from archive" enabled.  When doing this, a copy of the items shows up in the mailbox or the PST, but a copy of the messages also stays in the Vault.

 

Configuration during attempted export:

Site Settings/Archive Settings = "Users can delete from their archives" is not checked.

Desktop Policy = "Delete from Vault" is not enabled.

Retention Categories = "Prevent automatic deletion of expired items with this category" and "Prevent user deletion of items with this category" are checked.

 

The only way we were able to get it to work was to uncheck the two "Prevent..." options in the Retention Category and then the messages would export to PST or the mailbox and also be removed from the Vault.  I thought that the vault service account would be exempt from any of these settings, but I guess it is still treated as a normal user?

 

By changing the settings of a specific retention category, did we end up giving users the ability to delete from the Vault while we were doing the export?  Or were they not able to since the desktop policy has "Delete from Vault" disabled so the users wouldn't see a button to delete?

 

 

 

 

1 ACCEPTED SOLUTION

Accepted Solutions

Rob_Wilcox1
Level 6
Partner

I would contact Symantec Support to clarify if that is the correct behaviour.

Working for cloudficient.com

View solution in original post

3 REPLIES 3

Rob_Wilcox1
Level 6
Partner

I would contact Symantec Support to clarify if that is the correct behaviour.

Working for cloudficient.com

GertjanA
Moderator
Moderator
Partner    VIP    Accredited Certified

What's the setting on the archives themselves for the users?

 

Regards. Gertjan

Stormonts
Level 5

On each user's actual archive, "Granted" is checked for read, write, and delete in the "Automatically set:" section for that owner of the archive.