Mailbox Retention Policy - Tracking - Logging

we have a mbx retention policy which deleted items older than 6 months in sent items and it allows the users to receover from the recover deleted items.
This one users sent items disappered today completely except for 2 emails.  Then she receovered the items from recover deleted items.  Is there a way I can find when was the mbx retetnion policy fired agianst this user?  Even if it was fired
its shoudl be gradual.
thanks u

you can look in event viewer on mailbox server, App logs - filter by event ID
event ID 10027 Managed Folder Assistant - statistics of MRM expiration at end of this work cycle
you will not see specific usernames there, but you can isolate this user by just applying policy on her mailbox and run MRM on demand with PS
start-managedfolderassistant -identity clientname
also you can temporarily put retention hold and run mrm to see items tagged and their status.. like expires date on top of messages
thanks

Similar Messages

  • E-mail tracking/log retention

    Not so much of a technical issue, but was wondering how long everyone keeps their message tracking and/or e-mail logs around?  We use an M-Series, and it looks like you can't specify retention time, rather, you have to manually configure your disk size to limit or increase the amount of data you're keeping.
    I'm curios what other folks are doing, how long they're keeping message tracking data available and/or if they have an overall e-mail retention policy.  I know some firms are under government guidelines to archive all electronic communication for 7 years or similar.
    Thanks.

    This is something that we are starting to discuss in our shop.   We are just starting to have e-mail retention/archive/discovery conversations and the logs on the IronPort appliances come into that every once in a while.  If it is something that is easy to do it may be advantageous to add the ability to set retention of these logs by length of time.  From a technical stand point so many MB is great, logic, easy to understand.  Unfortunately in the business/legal world they use a different type of thinking and like to speak in terms of days.  At least, that's been my expierience.
    Long live the Iron Nation
    Jason

  • Recovery window retention policy deletes archive logs before a backup?

    Hi All,
    Oracle 11G on Windows 2008 R2
    This afternoon, I changed my RMAN retention policy from 'RETENTION POLICY REDUNDANCY 3' to RETENTION POLICY RECOVERY WINDOW OF 3 DAYS'
    However, i checked tonight and after my daily backup ran, all the archive logs prior to the backup had been deleted! Thus meaning i dont think i can restore to any point in time, prior to my daily backup. All the .arc logs were there after the backup. So i tried another test and kicked off the daily backup again. During the backup process, the archive logs got deleted again! Now i don't have any archive logs..
    Is this proper behaviour of RETENTION POLICY RECOVERY WINDOW?? I thought it would keep all the files needed for me to restore to any point in time for the previous 3 days. When i used REDUNDANCY, with my daily backups, it kept 3 days worth of backups+ archive logs so i could restore point-in-time to any point. How can i use RECOVERY WINDOW so that i can actually restore to any point-in-time for the 3 days??
    I wanted to change to RECOVERY WINDOW since i read that by using REDUNDANCY it only keeps X copies of a backup (so if i ran the backup 3 times in a day, i would only have those 3).
    Thanks in advance.

    Hi All,
    Here is the SHOW ALL output:
    RMAN> show all;
    RMAN configuration parameters for database with db_unique_name MMSPRD7 are:
    CONFIGURE RETENTION POLICY TO RECOVERY WINDOW OF 3 DAYS;
    CONFIGURE BACKUP OPTIMIZATION OFF; # default
    CONFIGURE DEFAULT DEVICE TYPE TO DISK; # default
    CONFIGURE CONTROLFILE AUTOBACKUP ON;
    CONFIGURE CONTROLFILE AUTOBACKUP FORMAT FOR DEVICE TYPE DISK TO '%F'; # default
    CONFIGURE DEVICE TYPE DISK PARALLELISM 1 BACKUP TYPE TO BACKUPSET; # default
    CONFIGURE DATAFILE BACKUP COPIES FOR DEVICE TYPE DISK TO 1; # default
    CONFIGURE ARCHIVELOG BACKUP COPIES FOR DEVICE TYPE DISK TO 1; # default
    CONFIGURE MAXSETSIZE TO UNLIMITED; # default
    CONFIGURE ENCRYPTION FOR DATABASE OFF; # default
    CONFIGURE ENCRYPTION ALGORITHM 'AES128'; # default
    CONFIGURE COMPRESSION ALGORITHM 'BASIC' AS OF RELEASE 'DEFAULT' OPTIMIZE FOR LOA
    D TRUE ; # default
    CONFIGURE ARCHIVELOG DELETION POLICY TO NONE; # default
    CONFIGURE SNAPSHOT CONTROLFILE NAME TO 'D:\ORACLE\DATABASE\ORA11G\DATABASE\SNCFM
    MSPRD7.ORA'; # default
    Here is the RMAN script:
    Recovery Manager: Release 11.2.0.3.0 - Production on Mon Jan 20 23:03:12 2014
    Copyright (c) 1982, 2011, Oracle and/or its affiliates.  All rights reserved.
    connected to target database: XXX (DBID=)
    RMAN> CROSSCHECK ARCHIVELOG ALL;
    2> CROSSCHECK BACKUPSET;
    3> CROSSCHECK BACKUP;
    4> CROSSCHECK COPY;
    5> DELETE NOPROMPT EXPIRED ARCHIVELOG ALL;
    6> DELETE NOPROMPT EXPIRED BACKUPSET;
    7> DELETE NOPROMPT OBSOLETE;
    8> BACKUP CURRENT CONTROLFILE;
    9> BACKUP AS COMPRESSED BACKUPSET DATABASE PLUS ARCHIVELOG DELETE INPUT;
    Also, not sure if you needed the whole RMAN output, but here is the deletion part:
    RMAN retention policy will be applied to the command
    RMAN retention policy is set to recovery window of 3 days
    using channel ORA_DISK_1
    Deleting the following obsolete backups and copies:
    Type                 Key    Completion Time    Filename/Handle
    Backup Set           1392   15-JAN-14        
      Backup Piece       1392   15-JAN-14          F:\ORAFRA\MMSPRD7\BACKUPSET\2014_01_15\O1_MF_NNNDF_TAG20140115T190054_9FG89R8N_.BKP
    Backup Set           1393   15-JAN-14        
      Backup Piece       1393   15-JAN-14          F:\ORAFRA\MMSPRD7\BACKUPSET\2014_01_15\O1_MF_ANNNN_TAG20140115T192204_9FG9KDHX_.BKP
    Backup Set           1397   16-JAN-14        
      Backup Piece       1397   16-JAN-14          F:\ORAFRA\MMSPRD7\BACKUPSET\2014_01_16\O1_MF_ANNNN_TAG20140116T190027_9FJWNW6L_.BKP
    Backup Set           1400   17-JAN-14        
      Backup Piece       1400   17-JAN-14          F:\ORAFRA\MMSPRD7\BACKUPSET\2014_01_17\O1_MF_ANNNN_TAG20140117T190138_9FMK349M_.BKP
    deleted backup piece
    backup piece handle=F:\ORAFRA\MMSPRD7\BACKUPSET\2014_01_15\O1_MF_NNNDF_TAG20140115T190054_9FG89R8N_.BKP RECID=1392 STAMP=836938856
    deleted backup piece
    backup piece handle=F:\ORAFRA\MMSPRD7\BACKUPSET\2014_01_15\O1_MF_ANNNN_TAG20140115T192204_9FG9KDHX_.BKP RECID=1393 STAMP=836940124
    deleted backup piece
    backup piece handle=F:\ORAFRA\MMSPRD7\BACKUPSET\2014_01_16\O1_MF_ANNNN_TAG20140116T190027_9FJWNW6L_.BKP RECID=1397 STAMP=837025228
    deleted backup piece
    backup piece handle=F:\ORAFRA\MMSPRD7\BACKUPSET\2014_01_17\O1_MF_ANNNN_TAG20140117T190138_9FMK349M_.BKP RECID=1400 STAMP=837111700
    Deleted 4 objects

  • How to force retention policy in Office365 for a mailbox

    Looking to run the MRM retention policy for a E3 mailbox and or Tenant.   I have an old PST file (2011 and older) that I have attached to their active Office365 mailbox Inbox Subfolder and have a policy in MRM to send the online Archive.  
    I know the MRM policy works because it has placed items in the "Online Archive" for the inbox and it's sub folders.
    The questions is how often does this MRM policy run on it's own?   Daily, hourly, weekly.
    How do I force the policy to take effect immediately?
    This is what I believe will do this via powershell:
    Set-executionpolicy remotesigned -force
    Set-executionpolicy unrestricted -force
    $LiveCred = Get-Credential
    Connect-msolservice -credential $LiveCred
    $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUrl
    https://ps.outlook.com/powershell/ -Credential $LiveCred -Authentication Basic -AllowRedirection Import-PSSession $Session
      Set-Mailbox “mailbox name” -RetentionPolicy “Archive Policy”
     Start-ManagedFolderAssistant -Identity “mailbox name”

    Hi,
    In Exchange 2013, the Managed Folder Assistant is a throttle-based assistant.
    Throttle-based assistants are always running and don't need to be scheduled. The system resources they can consume are throttled. You can configure the Managed Folder Assistant to process all mailboxes on a Mailbox server within a certain period (known as
    a work cycle).
    You can use the following command to check work cycle.
    Get-MailboxServer –Identity ExServer | Format-List *WorkCycle*
    If you want to force the policy to take effect immediately, you can use the Start-ManagedFolderAssistant cmdlet.
    Here is an article for your reference, this article also applies to Exchange online.
    http://technet.microsoft.com/en-GB/library/dd297955(v=exchg.150).aspx
    Best regards,
    <o:p></o:p>
    Belinda Ma
    TechNet Community Support

  • More Info Needed in Message Tracking Logs in Exchnage 2010 MAILBOX

    Hello All
    I would like to understand more on message tracking which was little bit confused for me 2 days back.
    As far as i can know, HUB SERVER is  the main part of the messaging tracking is playing  vital role in Exchange 2010.
    also, mailbox roles too...
    i can see the message tracking logs created in mailbox is only usefull , for  web interface for message tracking is part of the Exchange Control Panel and provides very basic search
    functionality to search for messages either sent by or received by a mailbox, based on the sender, recipients, and subject line.  
    so message tracking logs which is available in mailbox is only user for end users who can perform the message tracking by themself vua ECP without installing EMC. -- AM I RIGHT  
    How will message tracking logs created in mailbox servers .......... will it replicate from HUB servers?  
    so if i have 4 mailbox servers, will all the mailbox servers having the same message tracking logs? or we may get different
    Your information is much valuable to better understand on MT

    Hi Rush,
    Please checkout this technet blog available at below link which clarify your concern in depth:
    http://blogs.technet.com/b/messaging_with_communications/archive/2011/04/22/how-to-track-message-in-exchange-2003-2007-2010.aspx
    http://exchangeserverpro.com/exchange-2010-message-tracking/
    However, a helpful resource you can checkout at here(http://www.exchangereports.net/) which comes with similar features while need to track mailboxes(sent/received emails), server traffic reports or folder reports in exchange server. It facilitates to produce
    the reports in various format which suits better in our environment.

  • Apply Retention Policy to All New Mailboxes

    I have created a retention policy tag to “Delete and Allow Recovery” after 14 days of all items in the “Deleted Items” folder.
    I then created a Retention Policy to apply the tag. I see using the EMS I can run a command “Get-Mailbox | Set-Mailbox –RetentionPolicy “Empty Trash” to apply to all existing mailboxes but how do I apply this to all new mailboxes as
    well?
    I see a posting at
    http://www.proexchange.be/blogs/exchange2010/archive/2011/08/31/using-the-scripting-agent-to-automate-some-basic-housekeeping-tasks.aspx
    that describes using the Scripting Agent to automate this processes but it seems overkill for my simple requirement. If I go this route does this need to be applied to each Exchange Server? Is this the only way or is there a simpler way to apply a recipient
    policy to all existing and future mailboxes?
    Pacerfan9

    Hi,
    Any updates on this issue?
    If anything is unclear, please feel free to let us know. 
    Thanks,
    Evan Liu
    TechNet Subscriber Support
    in forum
    If you have any feedback on our support, please contact
    [email protected]  
    Evan Liu
    TechNet Community Support

  • Finding mailboxes with no retention policy applied and apply a policy?

    We manually apply retention policies at the time accounts are created.  However, some get missed and therefore, I assume that means they have no retention policy at all.  So, there is no true "default" policy that is automatically applied
    when you do not manually choose one?
    How can we find the ones that were missed and apply a retention policy to those?

    Hi
    This will return all the mailboxes without any policy set:
    Get-Mailbox -Filter 'retentionpolicy -eq $null'
    So you could do this:
    Get-Mailbox -Filter 'retentionpolicy -eq $null' | Set-Mailbox -RetentionPolicy <name of your policy>
    Steve

  • Audit & System Log Retention Policy

    Hello Everyone,
    I am trying to collect informatiion from various sources to see what the standard industry practice is to maintain the Audit & Systems Logs? This information will be crucial for us determine how many days worth of logs we should keep and what we can delete. Any information will be highly appreicated.
    Thanks!
    RK

    #THIS DOES NOT WORK
    CONFIGURE RETENTION POLICY TO REDUNDANCY 2;
    CONFIGURE BACKUP OPTIMIZATION OFF; # default
    CONFIGURE DEFAULT DEVICE TYPE TO DISK; # default
    CONFIGURE CONTROLFILE AUTOBACKUP ON;
    CONFIGURE CONTROLFILE AUTOBACKUP FORMAT FOR DEVICE TYPE DISK TO '\\medabdb2\rmandisk\%F';
    CONFIGURE DEVICE TYPE DISK PARALLELISM 1; # default
    CONFIGURE DATAFILE BACKUP COPIES FOR DEVICE TYPE DISK TO 1; # default
    CONFIGURE ARCHIVELOG BACKUP COPIES FOR DEVICE TYPE DISK TO 1; # default
    CONFIGURE MAXSETSIZE TO UNLIMITED; # default
    CONFIGURE SNAPSHOT CONTROLFILE NAME TO 'C:\ORACLE\ORA92\DATABASE\SNCFABANO.ORA'; # default
    #THIS WORKS
    CONFIGURE RETENTION POLICY TO REDUNDANCY 1; # default
    CONFIGURE BACKUP OPTIMIZATION OFF; # default
    CONFIGURE DEFAULT DEVICE TYPE TO DISK; # default
    CONFIGURE CONTROLFILE AUTOBACKUP OFF; # default
    CONFIGURE CONTROLFILE AUTOBACKUP FORMAT FOR DEVICE TYPE DISK TO 'D:\RmanDisk\%F';
    CONFIGURE DEVICE TYPE DISK PARALLELISM 1; # default
    CONFIGURE DATAFILE BACKUP COPIES FOR DEVICE TYPE DISK TO 1; # default
    CONFIGURE ARCHIVELOG BACKUP COPIES FOR DEVICE TYPE DISK TO 1; # default
    CONFIGURE MAXSETSIZE TO UNLIMITED; # default
    CONFIGURE SNAPSHOT CONTROLFILE NAME TO 'D:\ORACLE\ORA92\DATABASE\SNCFORCL.ORA';# default
    System that works has redundancy to 1; nothing changes even if I set the redundancy to 1 for the system that does not work...
    Bye.
    Message was edited by:
    Stefano IT

  • Clear Retention Policy Tags from mailbox items

    Hello Experts
    I searched for this but didn't find clear answer so I decided to re word
    running - exchange 2010 sp3 RU4
    background - we had email retention policy applied to all mailboxes in the environment during 2010 migration project w/ retention hold enabled except for pilot batch users
    there will be changes coming soon from the business regarding amending existing policy tags
    currently testing this scenario
    user A - policy enabled for 1 yr but on hold.. 50% items are expired
    If policy gets removed from user A mailbox
    question 1
    how to clean existing tags from individual items in the mailbox? Can it be done or items are left like this forever
    if yes, how long will it take to clear up automatically.. once you remove the retention policy from a mailbox, my guess is running MFA on demand will not do anything
    question 2
    Ex -if initial retention tag for inbox folder was 90 days and now changed to 270 days, during mfa re evaluation, will the "start date" be still calculated from first time message was stapmed
    or when it was re evaluated again
    Thanks in advance

    Question 2 is described here:  
    How Retention Age is Calculated
    The MFA works against messages according to their tags/policy.  If there are no policies applied to a user, the MFA will not process items for that user.  
    "The Managed Folder Assistant, a mailbox assistant that runs on Mailbox servers, processes mailboxes that have a retention
    policy applied"
    src: http://technet.microsoft.com/en-us/library/dd297955.aspx#MFA
    Mike Crowley | MVP
    My Blog --
    Planet Technologies

  • SCEP Client Activity Logs Files - Retention Policy?

    In SCEP 2012....
    1. Where are client activity log files stored?  
    2. What is the default retention policy?  
    I remember with FCS, I think the historical data was stored for 14 months (by default).  Is that the same for SCEP?
    Andrew Marcos

    Logs are in c:\program data\Microsoft\Microsoft Antimalware\Support.
    Not sure on retention as I am working in non-persistent VDI's that get their logs reset after a log off!
    Cheers
    Paul | sccmentor.wordpress.com

  • Retention Policy between Mailbox and Archive Mailbox level

    Dear All
    I have some questions about the Retention Policy between Mailbox and Archive Mailbox.
    I want to apply different retention tag on different Mailbox level. 
    In normal case , I would like apply the Retention Policy for Mailbox after 28 days moving to archive Mailbox and over 365 days to be deleted.
    And the Archive Mailbox should be liked deleted the mail over 90 or 180 days.
    But I found that the archive Mailbox is applied the same Retention Policy as the Mailbox one.
    Is it Normal case ? How can I set another retention Policy for My archive Mailbox ?
    Best Regards
    Vincent Chi

    You cannot have a different retention policy for primary and archive mailbox. The policy applied to the primary mailbox also applies
    to the archive mailbox.
    http://blogs.technet.com/b/vikass_blog/archive/2013/07/04/retention-policy-on-archive-mailbox.aspx
    Regards
    John

  • Tracking logs for shared mailbox

    Is it possible with 2010 exchange tracking logs to prove the following
    We have a mailbox which has been made accesible in terms of permissions so a number of users havve access and control over the mailbox. We need to prove which of those users with access to that mailbox has sent/forwarded information from that mailbox elsewhere
    (i.e. external mailbox recipient). Can the logs prove who did these actions? Or will they just show the mailbox itself sent/forwarded them on?                            

    Hi,
    One more thing, mailbox Audit Logging feature can track mailbox owner, delegate, and administrator logons to a mailbox, as well as what actions are taken while the user is logged on.
    Document for reference
    Mailbox Audit Logging for a Mailbox
    https://technet.microsoft.com/en-us/library/ff461937(v=exchg.141).aspx
    And when you use Search-MailboxAuditLog cmdlet to search mailbox audit log entries, remember to add -ShowDetails parameter to see who did actions in that
    mailbox.
    Best Regards.
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
    Lynn-Li
    TechNet Community Support

  • Script set to auto apply Retention policy to all new mailbox created and run everyday

      Script to set auto apply Retention policy to all new mailbox created and run everyday on Exchange 2007 , 2010 , and 2013.
     Could you please help me with the script will rename the policy name please help me with script..
     Thanks,
     Chandu

    Hi Chandu,
    Have you find the solution finally? Have you tried Pavan's suggestion?
    Sorry for my lacking of code and script. If your requirement still haven't been achieved, I suggest we can ask a question in Exchange Development forum and Script Center for more professional suggestion:
    Microsoft Exchange Development forum
    http://social.technet.microsoft.com/Forums/en-US/exchangesvrdevelopment/threads
    Script Center
    http://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?forum=ITCG
    Regards,
    Winnie Liang
    TechNet Community Support

  • Archive Log Backups Retention Policy

    How can I define Retention Policy for archive log backups?

    The question asked and answer you have marked as "Correct answer" is misleading.
    For archived log deletion policy, look below.
    Configuring the RMAN Environment
    For the actual question posted "How can I define Retention Policy for archive log backups?", look below link.
    http://docs.oracle.com/cd/E11882_01/backup.112/e10642/rcmconfb.htm#i1019318
    Also, did you start the thread to clear your doubt or test the other forum users?
    Thank you!!

  • Retention Policy problems

    Hello,
    i am trying to set up the automated archival of Exchange 2013.
    So that e-mails, which are older than e.g. 1 year are get moved to the archive.
    What i did:
    1.  Create a archive database
    2.  Create a archive mailbox
    3.  Create a retention tag
    4.  Create a retention policy
    4.1 Including a Default tag and a personal tag
    5. Linked it to a user: Set-mailbox “administrator” -RetentionPolicy "Movetoarchivpolicy"
    6. Checked the User: Get-Mailbox “administrator” | Select RetentionPolicy
    7. Started the ManagedFolderAssistant: Start-ManagedFolderAssistant -Identity “administrator”
    8. But all Mails stayed in the Mailbox
    9. I tryed to manually assign a retention tag to a Mail, but I dont have the button. (OWA and Outlook 2013 ProPlus).
    Have anyone an idea, why i don't have the "assign policy" button?
    And why all Mails stay in the Mailbox?
    Thanks,

    Hi,
    Event 9018 means that Mailbox Assistant has processed the mailbox successfully. But retention policy still didn't work.
    I recommend you create a new test mailbox and apply retention policy to this new mailbox to check if it works.
    And please increase diagnostic logging level for MRM, and then monitor application log to check if there is any related events.
    Best regards,
    Belinda
    Belinda Ma
    TechNet Community Support

Maybe you are looking for

  • How can I run 2 Dreamweaver windows at the same time?

    How can I run 2 Dreamweaver windows at the same time on my PC? basically I have 2 monitors and I want to edit CSS on one monitor and have the html page open on the other so I can quickly look from one to another with in a split second instead of taki

  • STRANGE!!! Script in a Workbench Request.

    Hi All, Generally i am told: 1. All Client Dependent objects (Table Entries) ask for customizing request. 2. All Client Independent objects (Cross-Client table entries) ask for Workbench Request. The SAP Script which is a client dependent object, but

  • Creating pdf

    I down loaded an app from HP to create pdf docs, called "Open office to PDF"   with no luck in working or contacting the app provider, does anyone know another way to create PDF docs from office documents on my new cool touchpad? Post relates to: HP

  • Accessing Interactive Report Fields

    I have an interactive report with a SQL query to generate data for the region. I want to hide the region and search for records using the interactive search fields. Is this possible? Thanks Ijaz

  • ABAP program/Function module to assign the roles in SU01

    Hi, Is there any ABAP program/function module to assign the roles in SU01. And program/function module which does all teh SU01 related activities. Thanks and Regards, Rashmi