User claims server archived all his email in inbox

[citizen]

I have a user who claims EV8sp2 server archived all his mail in his inbox.
In other folders mail was not archived.
Our policy would not explain this behavior.
Is there is a way to determine how this happened?
Could the Vault toolbar add-in have gone crazy and issue the request to archive all 10,000 items?

Any ideas?

[Wayne_Humphrey]

Hi Citizen,

Are you using Age or quota based archiving? Open the users mailbox and see what it looks like.

But NO in a nutshell is what you are asking.  

[ggeorgi]

Propably the user archived all the mails manually and presented the situation as he didn't do anything. But there is no way that EV did it by itself. check if you have another provisioning group that this user belongs to and there is a policy , that archives everything , connected to it

[JesusWept3]

do you have the full client installed? go to the properties of the users mailbox and check the Enterprise Vault tab and see what rules he's set against
it could be an incorrectly set EVPM scrpt or someone changed the policy

You can also look at the dates of when the items were archived and see if they fall outside of the archiving schedule

[citizen]

Thanks for the responses...I was pretty sure it was a client side issue but curious since I have never heard of this issue.

We are using the HTTP client and an age based only.

Is there a quick way to check the dates of when the items were archived?

Thanks,