Some items cannot be retrieved (Event 6287)

[Christian_Fiedl]

Hi,

we have EV6.0 SP1 on a W2k3 SP1 Server,
one user reported she cannot retrieve some archived items:

Other archived items received the same day and hour can be retrieved without any problem.
Is there a possibility to retrieve the saveset directly using the saveset ID?

Our configuration prohibits users from restoring, manually archiving and if a shortcut is deleted the item is also deleted in the vault. So if the shortcut still exists, the item should be available.


Plz help.

TIA
/chf


When trying to reproduce it I get:

Unable to fetch item from "".
Reason: The system cannot find the path specified.
Saveset Id: 611000000000000~200610100948020000~0~040F0CFA289E46A68F4B92990032249
Archive Name:
Archive Folder Path: ?Posteingang
Reference:

[Alan_M]

Turn on client side logging and set it to maximum. Restart Outlook, Have the user attempt to retrieve an item look at the log file and post the relevant results back here.

http://support.veritas.com/docs/276094

[Christian_Fiedl]

Thx for fast reply,

I continued debugging on my own in the meantime. My guess is these are an "orphaned" shortcuts. This should not happen and I wonder how the user was able to figure it out. There is only one backdoor I am aware of:
Deleting a Vault item without deleting the shortcut by doing:

1) a vault search within Outlook (via toolbar icon)
2) select properties of the message
3) check "Delete this item from the Vault" and click "Delete"

To the best of my knowledge all other ways have been excluded by our configuration. Even the delete icon has been removed from the template of the Search Vaults result page.

Do you think this sounds reasonable? Or are there other possible "backdoors"?

Regards
/chf
PS: Hard to prove. Guess user will tell "I did not delete anything" ;)

Here's the relevant log information.


22/01/2007 18:20:22.296: ~CDesktop::GetSetting: 0x1
22/01/2007 18:20:22.296: CDesktop::GetSetting: 0x0
22/01/2007 18:20:22.296: CDesktop::LoadSettingsFromHiddenMessage: 0x0
22/01/2007 18:20:22.296: ~CDesktop::LoadSettingsFromHiddenMessage: 0x0
22/01/2007 18:20:22.296: ~CDesktop::GetSetting: 0x0
22/01/2007 18:20:22.296: ~::GetWebAppPath
22/01/2007 18:20:22.297: DesktopCommon::GetDownloadFormatParams: 0x0
22/01/2007 18:20:22.297: ~DesktopCommon::GetDownloadFormatParams: 0x0
22/01/2007 18:20:22.297: CDesktop::get_Setting: 0x0
22/01/2007 18:20:22.297: NoPSTDependency
22/01/2007 18:20:22.297: CDesktop::GetSetting: 0x0
22/01/2007 18:20:22.297: CDesktop::LoadSettingsFromHiddenMessage: 0x0
22/01/2007 18:20:22.298: ~CDesktop::LoadSettingsFromHiddenMessage: 0x0
22/01/2007 18:20:22.298: ~CDesktop::GetSetting: 0x0
22/01/2007 18:20:22.298: ~CDesktop::get_Setting: 0x0
22/01/2007 18:20:22.298: CStore::get_Offline: 0x0
22/01/2007 18:20:22.298: ~CStore::get_Offline: 0x0
22/01/2007 18:20:22.298: CDesktop::get_Setting: 0x0
22/01/2007 18:20:22.299: DefaultDoubleClickView
22/01/2007 18:20:22.299: CDesktop::GetSetting: 0x0
22/01/2007 18:20:22.299: CDesktop::LoadSettingsFromHiddenMessage: 0x0
22/01/2007 18:20:22.299: ~CDesktop::LoadSettingsFromHiddenMessage: 0x0
22/01/2007 18:20:22.299: ~CDesktop::GetSetting: 0x0
22/01/2007 18:20:22.299: ~CDesktop::get_Setting: 0x0
22/01/2007 18:20:22.300: Downloading from: http:///EnterpriseVault/download.asp?VaultID=15DE2C802B706E44FAEF4CA8574A8E5221110000VIEEVSITE&SaveSetID=611000000000000~200610100948020000~0~040F0CFA289E46A68F4B92990032249&FormatType=Unicode&Format=MSG&AttachmentID=0
22/01/2007 18:20:22.300: ::CInternetReconnect
22/01/2007 18:20:22.301: ::CInternetReconnect - refCount : 0
22/01/2007 18:20:22.301: ::IsInetOffline
22/01/2007 18:20:22.301: ~::IsInetOffline
22/01/2007 18:20:22.301: ~::CInternetReconnect
22/01/2007 18:20:22.302: CThreadManager::Add thread THID=6396
22/01/2007 18:20:22.303: CShortcutItem::Display returns: 0x0
22/01/2007 18:20:22.303: CDownloadSTA::MakeCallback: 0x0
22/01/2007 18:20:22.303: ~CShortcutItem::Display: 0x0
22/01/2007 18:20:22.312: Downloading: http:///EnterpriseVault/download.asp?VaultID=15DE2C802B706E44FAEF4CA8574A8E5221110000VIEEVSITE&SaveSetID=611000000000000~200610100948020000~0~040F0CFA289E46A68F4B92990032249&FormatType=Unicode&Format=MSG&AttachmentID=0
22/01/2007 18:20:22.313: CDownloadSTA::DoDownload: 0x0
22/01/2007 18:20:22.313: CThreadManager::Add thread THID=6476
22/01/2007 18:20:22.313: CDesktop::GetSetting: 0x0
22/01/2007 18:20:22.313: CDesktop::LoadSettingsFromHiddenMessage: 0x0
22/01/2007 18:20:22.313: ~CDesktop::LoadSettingsFromHiddenMessage: 0x0
22/01/2007 18:20:22.314: ~CDesktop::GetSetting: 0x1
22/01/2007 18:20:22.438: CDownloadBytes::Complete
22/01/2007 18:20:22.438: CDownloadBytes::End
22/01/2007 18:20:22.438: Waiting for DownloadBytes thread, THID=6476 to exit
22/01/2007 18:20:22.438: ~CDownloadBytes::Complete
22/01/2007 18:20:22.438: CThreadManager::Remove thread THID=6476
22/01/2007 18:20:22.439: ~CDownloadBytes::End
22/01/2007 18:20:22.439: ~CDownloadSTA::DoDownload: 0x80004005
22/01/2007 18:20:22.439: CShortcutItem::Callback: 0x0
22/01/2007 18:20:22.540: CCommands::FinalConstruct: 0x0
22/01/2007 18:20:22.541: Connections now on Desktop object: 4
22/01/2007 18:20:22.541: ~CCommands::FinalConstruct: 0x0
22/01/2007 18:20:22.541: CDesktop::get_Setting: 0x0
22/01/2007 18:20:22.541: NoUpgrade
22/01/2007 18:20:22.541: CDesktop::GetSetting: 0x0
22/01/2007 18:20:22.541: CDesktop::LoadSettingsFromHiddenMessage: 0x0
22/01/2007 18:20:22.542: ~CDesktop::LoadSettingsFromHiddenMessage: 0x0
22/01/2007 18:20:22.542: ~CDesktop::GetSetting: 0x1
22/01/2007 18:20:22.542: ~CDesktop::get_Setting: 0x1
22/01/2007 18:20:22.543: CDesktop::OpenStore: 0x0
22/01/2007 18:20:22.584: CDesktop::LoadSettingsFromHiddenMessage: 0x0
22/01/2007 18:20:22.584: ~CDesktop::LoadSettingsFromHiddenMessage: 0x0
22/01/2007 18:20:22.584: ~CDesktop::OpenStore: 0x0
22/01/2007 18:20:22.585: CStore::OpenShortcut: 0x0
22/01/2007 18:20:22.587: CShortcutItem::ReadItemProps: 0x0
22/01/2007 18:20:22.590: ~CShortcutItem::ReadItemProps: 0x0
22/01/2007 18:20:22.590: ~CStore::OpenShortcut: 0x0
22/01/2007 18:20:22.591: CDesktop::get_Setting: 0x0
22/01/2007 18:20:22.591: DefaultDoubleClickView
22/01/2007 18:20:22.591: CDesktop::GetSetting: 0x0
22/01/2007 18:20:22.591: CDesktop::LoadSettingsFromHiddenMessage: 0x0
22/01/2007 18:20:22.591: ~CDesktop::LoadSettingsFromHiddenMessage: 0x0
22/01/2007 18:20:22.591: ~CDesktop::GetSetting: 0x0
22/01/2007 18:20:22.592: ~CDesktop::get_Setting: 0x0
22/01/2007 18:20:22.592: CDesktop::get_Setting: 0x0
22/01/2007 18:20:22.592: DefaultWebAppURL
22/01/2007 18:20:22.592: CDesktop::GetSetting: 0x0
22/01/2007 18:20:22.592: CDesktop::LoadSettingsFromHiddenMessage: 0x0
22/01/2007 18:20:22.592: ~CDesktop::LoadSettingsFromHiddenMessage: 0x0
22/01/2007 18:20:22.593: ~CDesktop::GetSetting: 0x0
22/01/2007 18:20:22.593: ~CDesktop::get_Setting: 0x0
22/01/2007 18:20:22.593: CShortcutItem::Display: 0x0
22/01/2007 18:20:22.593: CShortcutItem::Display...Return Last Failed error: 0x80004005
22/01/2007 18:20:22.594: ~CShortcutItem::Display: 0x0
22/01/2007 18:20:22.608: ~CShortcutItem::Callback: 0x0
22/01/2007 18:20:22.609: ~CDownloadSTA::MakeCallback: 0x0
22/01/2007 18:20:22.622: CDesktop::FinalRelease
22/01/2007 18:20:22.622: Connections left on Desktop object: 3
22/01/2007 18:20:22.624: Deleting CComCallback thread THID=6396
22/01/2007 18:20:22.624: ::~CInternetReconnect
22/01/2007 18:20:22.624: ::CInternetReconnect - refCount : 0
22/01/2007 18:20:22.624: ::IsInetOffline
22/01/2007 18:20:22.624: ~::IsInetOffline
22/01/2007 18:20:22.624: ~::~CInternetReconnect
22/01/2007 18:20:22.624: CComCallback: calling CoUninitialize, thread THID=6396
22/01/2007 18:20:22.625: CComCallback: CoUninitialize completed, thread THID=6396
22/01/2007 18:20:22.625: CThreadManager::Remove thread THID=6396
22/01/2007 18:20:29.283: CCommands::DoSearchArchives: 0x0
22/01/2007 18:20:29.283: ::CInternetReconnect
22/01/2007 18:20:29.283: ::CInternetReconnect - refCount : 0
22/01/2007 18:20:29.284: ::IsInetOffline
22/01/2007 18:20:29.284: ~::IsInetOffline
22/01/2007 18:20:29.284: ~::CInternetReconnect
22/01/2007 18:20:29.284: CDesktop::GetOLConnectionState: 0x0
22/01/2007 18:20:29.284: Outlook Exchange Connection Mode: 1
22/01/2007 18:20:29.284: ~CDesktop::GetOLConnectionState: 0x0
22/01/2007 18:20:29.285: Exchange connection state: 1

[Alan_M]

I guess there are several ways to bypass policy restrictions. You describe one another would be to use Archive explorer for Outlook or I guess accessing the web app (search and AE) directly through a web browser. There is also a reg entry that can be made to override the policy settings.

Users will be users, unfortunately.....

Consider turning on auditing so you can lay the blame squarely at their door.