Start a Conversation

Unsolved

This post is more than 5 years old

B

824

May 6th, 2015 07:00

Discussion: Delete from Archive

I want to raise the following discussion regarding the Delete function from SourceOne Web Search.

You have a Delete option when you have Administrator rights on mapped folders.

I can delete an item from the archive (or delete 100 000 items) and according to the documentation the following happens:

- 24 hours before the item is actually deleted from the archive

- Item will be deleted from SQL, Indexes and also from the Archive.

If the Archive is under retention the following happens:

- If a user tries to delete a message that is under retention, all references to the message are

removed from SQL and from the index. However, the message is not deleted from the

volume: - Error message: Cannot delete message(s) from storage in Volume ,

the volume is under retention.

So let's say: I am Admin 1 and I do have bad intentions on some e-mails, I delete them from the archive.

There is a case in our environment where Person X says that he didn't send an attachment to Person Y.

Person X calls me (Admin 1) to delete the message.

A few months later:

Compliance Admin Z uses the Web Search and is unable to find the item because it has been deleted from SQL, Index.

So Compliance Admin Z will never know the message was actually archived or in the system. He also doesn't know that the message is still existing in the .emx file somewhere in the archive. (or even deleted from the EMX if no retention has been applied)

----

This is a strange behaviour I think, it would be quiet easy to delete mails from the archive? Not actually what to expect from a compliancy-solution?

No Responses!
No Events found!

Top