Indefinite Litigation Hold - Storage Issues - Archived Recoverable Items
-
Dienstag, 24. April 2012 14:11
We are unfortunately in a situation where we have been on Litigation Hold since 2010 and there is no end in sight at the moment. We are running Exchange 2010 SP2 RU1 in a DAG
To keep the regular databases under a manageable size we are going to implement an archive policy and archive the Inbox and Sent Items to separate databases (Anything older than 180 days). What we are noticing in our test with Archiving is that the Recoverable Items size is HUGE for each Archive mailbox. I have 10 users in this test and they are consuming 250GB of space in the new Archive database. There archived Inbox and Sent Items might be consuming 10% of that space. The rest is the Archived Recoverable Items. What's interesting is if I run Get-MailboxFolderStatistics against their normal mailbox their Recoverable items is not large at all. The other odd thing is that the archived Recoverable Items just keeps growing exponentially each day for each archived mailbox. These people are not trying to permanently delete their emails since we have been on Litigation Hold.
I have no idea why the archived Recoverable Items is so large...It's almost as if the Recoverable Items folder in the Archive Mailboxes are somehow getting duplicated items when email is archived. The archived Recoverable items folder just seems insanely out of proportion to their regular mailbox Recoverable Items.
Please let me know what other information you might need to help troubleshoot.
Thanks,
Stephen
Stephen
Alle Antworten
-
Dienstag, 24. April 2012 14:13 That's the way litigation hold works, everything that is purged from Deleted Items is held in recoverable deleted items.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
- Als Antwort vorgeschlagen Mike CrowleyMVP, Moderator Mittwoch, 2. Mai 2012 02:18
-
Dienstag, 24. April 2012 14:20
These users are telling me that they are not purging their Deleted Items over the past 2 years. Since they know we are on litigation hold there is no reason to delete anything. They might move email around or move email to the Deleted Items but they aren't emptying their Deleted Items.
Is it possible that when you archive email out of the regular mailbox (such as Inbox and Sent Items, etc) while under Litigation hold that Litigation hold treats that archived email as a "purge" of email and recreates those archived emails in the Recoverable Items? I'm just trying to found something credible as to why the archived Recoverable Items is so large. Its larger than their regular mailbox and archived mailboxes combined. :)
Stephen
- Bearbeitet slammers25 Dienstag, 24. April 2012 14:20
-
Dienstag, 24. April 2012 20:37
bump
Stephen
-
Dienstag, 24. April 2012 20:52
Is Single Item Recovery also enabled for these mailboxes? If SIR is enabled then which RI folder is the large one?
- Recoverable Items
- Recoverable Items\Deletes
- Recoverable Items\Purges
- Recoverable Items\Versions
Microsoft Premier Field Engineer, Exchange
MCSA 2000/2003
MCTS: Win Server 2008 AD, Configuration MCTS: Win Server 2008 Network Infrastructure, Configuration
MCITP: Enterprise Messaging Administrator 2010
Former Microsoft MVP, Exchange Server
NOTICE: My posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose. -
Dienstag, 24. April 2012 21:40just curious, what would be the point or purpose of enabling litigation hold and single item recover for the same mailbox? From my understanding the two work the same way, the only difference is when a mailbox is on litigation hold items in the mailbox are *never* purged from the database until litigation hold has been removed.
Bulls on Parade
-
Dienstag, 24. April 2012 23:01
The mailboxes could of had SIR enabled prior to being put into litigation hold to ensure mail stays in the dumpster for the admin configured amount of time.
When SIR is enabled items will stay in the dumpster for as long as the item retention policy states, and any Retention Policies on the mailbox will be respected and applied. It prevents users from being able to perform hard deletes (purges) of items from their dumpster.
When Litigation Hold is applied the same is mostly true, except no hard deletes will happen within the mailbox even when items would have normally expired from the dumpster.
Microsoft Premier Field Engineer, Exchange
MCSA 2000/2003
MCTS: Win Server 2008 AD, Configuration MCTS: Win Server 2008 Network Infrastructure, Configuration
MCITP: Enterprise Messaging Administrator 2010
Former Microsoft MVP, Exchange Server
NOTICE: My posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose. -
Mittwoch, 25. April 2012 12:58
How do I check to see if SIR is enabled? What shell command do I use? I'm only seeing commands to turn it on...
Stephen
-
Mittwoch, 25. April 2012 13:34It looks like Deletions and Versions are the big ones if that helps...
Stephen
-
Mittwoch, 25. April 2012 13:43Just checked a handful of the mailboxes in question and SIR is not enabled on them.
Stephen
-
Mittwoch, 25. April 2012 15:49
Those could well be calendar versions which are enabled by default. Check a few mailboxes to see if this is enabled
Get-Mailbox
Sukh
-
Mittwoch, 25. April 2012 18:12
I checked those same mailboxes and CalendarVersion is disabled.Those could well be calendar versions which are enabled by default. Check a few mailboxes to see if this is enabled
Get-Mailbox
Sukh
Stephen
-
Mittwoch, 25. April 2012 18:39
Try and open one of the mailboxes, do a discovery search or maybe use the search-mailbox and only serach the dumpster, check whats in the versions & deletions folder
Sukh
-
Mittwoch, 25. April 2012 19:00Moderator I would suggest your legal folks look at Journaling/ 3rd party archiving or otherwise rather than litigation hold . I dont consider litigation hold a viable "long-term" solution as you have seen as far as quota management.
- Als Antwort vorgeschlagen Mike CrowleyMVP, Moderator Mittwoch, 2. Mai 2012 02:17
-
Mittwoch, 2. Mai 2012 02:18Moderator
It looks like Deletions and Versions are the big ones if that helps...
You can use mfcmapi to see what's in there if you are curious, and don't want to bother with a discovery search.
Stephen
Mike Crowley | MVP
My Blog -- Planet Technologies
- Als Antwort vorgeschlagen Mike CrowleyMVP, Moderator Mittwoch, 2. Mai 2012 02:18
-
Mittwoch, 2. Mai 2012 13:38
Ok I used MFCMAPI and I exported my Deletions folder which is 10GB in my archive mailbox. I can see that every email in there has anywhere from 4-10 duplicate versions of itself. My archive mailbox itself is only 1GB in size.
So what could be causing the Recoverable Items to duplicate emails when they are sent to the Archive DB?
Stephen
-
Mittwoch, 2. Mai 2012 16:21Moderator
Your description suggests copy-on-write protection is creating duplicates when a message is modified (such as a reply indicator). Why this isn't in the versions folder instead of the deletions folder, I don't know. Maybe this isnt it at all. I'm out of ideas.
Here is how you can cleanup these folders, but I understand this isn't the point...
Mike Crowley | MVP
My Blog -- Planet Technologies
- Bearbeitet Mike CrowleyMVP, Moderator Mittwoch, 2. Mai 2012 16:25
-
Mittwoch, 2. Mai 2012 16:28Moderator
This seemed interesting:
Client-Only rules causing a duplicate message to appear in dumpster
also I wonder if cached mode glitches could cause this...
Mike Crowley | MVP
My Blog -- Planet Technologies- Bearbeitet Mike CrowleyMVP, Moderator Mittwoch, 2. Mai 2012 16:29
-
Dienstag, 7. August 2012 20:25Moderator
I would also look at upgrading to SP2 RU3:
Holy COW! Changes to Recoverable Items versioning in Exchange 2010 SP2 RU3
.png)
.png)
