Hello,
Somewhat weird problem:
Deleted user entry from database using query:
USE EnterpriseVaultDirectory
DELETE
FROM ExchangeMailboxEntry
Where MbxDisplayName = 'Lastname Firstname'
Put the vault of this user to Deleted state using VAC.
For a while the 7113 event started to show:
Following archive could not be deleted as it contains items that are on hold, or their retention category does not allow deletions, or a compliance device retention period prevents them from being deleted.
Archive Name = Lastname Firstname
Archive Entry Id = ***************************************************************
Total items on hold = 6359
Now that I investigated this issue after several weeks:
- There is no entry for this user in the Directory database
- The archive has vanished from the list of archives in VAC
BUT this event is still occurring in the event log and this query produces a result:
USE EnterpriseVaultDirectory
SELECT * FROM Archive
WHERE ArchiveStatus = 4
It produces a row with this user info...
This article would possibly been useful if the archive still existed in the VAC archive list but it's not there:
http://www.symantec.com/docs/TECH178002
- Within SQL Management Studio run the following:
USE EnterpriseVaultDirectory
SELECT * FROM Archive
WHERE ArchiveStatus = 4This will generate a list of all of the Archives set for Deletion.
- Check the results and make sure that the ArchiveName column contains the Archive/s in question. Take note of the RootIdentity for each Archive.
- Within SQL run the following SQL query to change the status back to Available:
USE EnterpriseVaultDirectory
UPDATE Archive
SET ArchiveStatus = 1
WHERE ArchiveStatus = 4 AND RootIdentity = 'RootIdentity taken from step2'
- Refresh the view in the VAC and make sure that the vault status for the archive/s have changed from Marked for Deletion to Available.
- Restart the Storage Service, delete the archive/s again and Dtrace the StorageDelete process.
- Refresh VAC and the archive should now be gone, although it may take a few minutes depending on the size of the archive.
What do I do to get rid of the event 7113 now that the archive itself appears to be already be deleted...?
EV version is 11.0.1
Sani B.