Sign in
 
HomeOnline20132010Other VersionsLibraryForumsGalleryEHLO Blog
TechCenter >
> 
> 
Indefinite Litigation Hold - Storage Issues - Archived Recoverable Items

建议的答复 Indefinite Litigation Hold - Storage Issues - Archived Recoverable Items

  • Tuesday, April 24, 2012 2:11 PM
     
     
    Sign In to Vote
    0

    We are unfortunately in a situation where we have been on Litigation Hold since 2010 and there is no end in sight at the moment. We are running Exchange 2010 SP2 RU1 in a DAG

    To keep the regular databases under a manageable size we are going to implement an archive policy and archive the Inbox and Sent Items to separate databases (Anything older than 180 days). What we are noticing in our test with Archiving is that the Recoverable Items size is HUGE for each Archive mailbox. I have 10 users in this test and they are consuming 250GB of space in the new Archive database. There archived Inbox and Sent Items might be consuming 10% of that space. The rest is the Archived Recoverable Items. What's interesting is if I run Get-MailboxFolderStatistics against their normal mailbox  their Recoverable items is not large at all. The other odd thing is that the archived Recoverable Items just keeps growing exponentially each day for each archived mailbox. These people are not trying to permanently delete their emails since we have been on Litigation Hold.

    I have no idea why the archived Recoverable Items is so large...It's almost as if the Recoverable Items folder in the Archive Mailboxes are somehow getting duplicated items when email is archived. The archived Recoverable items folder just seems insanely out of proportion to their regular mailbox Recoverable Items.

    Please let me know what other information you might need to help troubleshoot.

    Thanks,

    Stephen

    Stephen

     

All Replies

  • Tuesday, April 24, 2012 2:13 PM
     
     Proposed
    Sign In to Vote
    0
    That's the way litigation hold works, everything that is purged from Deleted Items is held in recoverable deleted items.

    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

     
  • Tuesday, April 24, 2012 2:20 PM
     
     
    Sign In to Vote
    0

    These users are telling me that they are not purging their Deleted Items over the past 2 years. Since they know we are on litigation hold there is no reason to delete anything. They might move email around or move email to the Deleted Items but they aren't emptying their Deleted Items.

    Is it possible that when you archive email out of the regular mailbox (such as Inbox and Sent Items, etc) while under Litigation hold that Litigation hold treats that archived email as a "purge" of email and recreates those archived emails in the Recoverable Items? I'm just trying to found something credible as to why the archived Recoverable Items is so large. Its larger than their regular mailbox and archived mailboxes combined. :)

    Stephen


    • Edited by slammers25 Tuesday, April 24, 2012 2:20 PM
    •  
     
  • Tuesday, April 24, 2012 8:37 PM
     
     
    Sign In to Vote
    0

    bump

    Stephen

     
  • Tuesday, April 24, 2012 8:52 PM
     
     
    Sign In to Vote
    0

    Is Single Item Recovery also enabled for these mailboxes? If SIR is enabled then which RI folder is the large one?

    • Recoverable Items
    • Recoverable Items\Deletes
    • Recoverable Items\Purges
    • Recoverable Items\Versions

    Microsoft Premier Field Engineer, Exchange
    MCSA 2000/2003
    MCTS: Win Server 2008 AD, Configuration MCTS: Win Server 2008 Network Infrastructure, Configuration
    MCITP: Enterprise Messaging Administrator 2010
    Former Microsoft MVP, Exchange Server

    NOTICE: My posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

     
  • Tuesday, April 24, 2012 9:40 PM
     
     
    Sign In to Vote
    0
    just curious, what would be the point or purpose of enabling litigation hold and single item recover for the same mailbox? From my understanding the two work the same way, the only difference is when a mailbox is on litigation hold items in the mailbox are *never* purged from the database until litigation hold has been removed.

    Bulls on Parade

     
  • Tuesday, April 24, 2012 11:01 PM
     
     
    Sign In to Vote
    0

    The mailboxes could of had SIR enabled prior to being put into litigation hold to ensure mail stays in the dumpster for the admin configured amount of time.

    When SIR is enabled items will stay in the dumpster for as long as the item retention policy states, and any Retention Policies on the mailbox will be respected and applied. It prevents users from being able to perform hard deletes (purges) of items from their dumpster.

    When Litigation Hold is applied the same is mostly true, except no hard deletes will happen within the mailbox even when items would have normally expired from the dumpster.

    Microsoft Premier Field Engineer, Exchange
    MCSA 2000/2003
    MCTS: Win Server 2008 AD, Configuration MCTS: Win Server 2008 Network Infrastructure, Configuration
    MCITP: Enterprise Messaging Administrator 2010
    Former Microsoft MVP, Exchange Server

    NOTICE: My posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

     
  • Wednesday, April 25, 2012 12:58 PM
     
     
    Sign In to Vote
    0

    How do I check to see if SIR is enabled? What shell command do I use? I'm only seeing commands to turn it on...

    Stephen

     
  • Wednesday, April 25, 2012 1:34 PM
     
     
    Sign In to Vote
    0
    It looks like Deletions and Versions are the big ones if that helps...

    Stephen

     
  • Wednesday, April 25, 2012 1:43 PM
     
     
    Sign In to Vote
    0
    Just checked a handful of the mailboxes in question and SIR is not enabled on them.

    Stephen

     
  • Wednesday, April 25, 2012 3:49 PM
     
     
    Sign In to Vote
    0

    Those could well be calendar versions which are enabled by default.  Check a few mailboxes to see if this is enabled

    Get-Mailbox

    Sukh

     
  • Wednesday, April 25, 2012 6:12 PM
     
     
    Sign In to Vote
    0

    Those could well be calendar versions which are enabled by default.  Check a few mailboxes to see if this is enabled

    Get-Mailbox

    Sukh

    I checked those same mailboxes and CalendarVersion is disabled.

    Stephen

     
  • Wednesday, April 25, 2012 6:39 PM
     
     
    Sign In to Vote
    0

    Try and open one of the mailboxes, do a  discovery search or maybe use the search-mailbox and only serach the dumpster, check whats in the versions & deletions folder

    Sukh

     
  • Wednesday, April 25, 2012 7:00 PM
    Moderator
     
     Proposed
    Sign In to Vote
    1
    I would suggest your legal folks  look at Journaling/ 3rd party archiving or otherwise rather than litigation hold . I dont consider litigation hold a viable "long-term" solution as you have seen as far as quota management.
     
  • Wednesday, May 02, 2012 2:18 AM
    Moderator
     
     Proposed
    Sign In to Vote
    0
    It looks like Deletions and Versions are the big ones if that helps...

    Stephen

    You can use mfcmapi to see what's in there if you are curious, and don't want to bother with a discovery search.


    Mike Crowley | MVP
    My Blog -- Planet Technologies

     
  • Wednesday, May 02, 2012 1:38 PM
     
     
    Sign In to Vote
    0

    Ok I used MFCMAPI and I exported my Deletions folder which is 10GB in my archive mailbox. I can see that every email in there has anywhere from 4-10 duplicate versions of itself. My archive mailbox itself is only 1GB in size. 

    So what could be causing the Recoverable Items to duplicate emails when they are sent to the Archive DB?

    Stephen

     
  • Wednesday, May 02, 2012 4:21 PM
    Moderator
     
     
    Sign In to Vote
    0

    Your description suggests copy-on-write protection is creating duplicates when a message is modified (such as a reply indicator).  Why this isn't in the versions folder instead of the deletions folder, I don't know.  Maybe this isnt it at all.  I'm out of ideas.

    Here is how you can cleanup these folders, but I understand this isn't the point...


    Mike Crowley | MVP
    My Blog -- Planet Technologies


     
  • Wednesday, May 02, 2012 4:28 PM
    Moderator
     
     
    Sign In to Vote
    0

    This seemed interesting:

     Client-Only rules causing a duplicate message to appear in dumpster

    also I wonder if cached mode glitches could cause this...


    Mike Crowley | MVP
    My Blog -- Planet Technologies


     
  • Tuesday, August 07, 2012 8:25 PM
    Moderator
     
     
    Sign In to Vote
    0

    I would also look at upgrading to SP2 RU3:

    Holy COW! Changes to Recoverable Items versioning in Exchange 2010 SP2 RU3