One of my user tells me that sometimes, some of his messages just disappears from folder he has put them in. Roughly after 7 to 10 days, he looks back into his folders and some messages are missing.
He uses a Blackberry device linked to his Notes mail file, and also has a Pocket PC wich replicates with that Notes file… his secretary also has the rights to open his mail file…
Beside the obvious “check the bb”, “check the pocketpc replication”, “make the secretary talk”, what else could I look into?
Thanks for your input!
Edit : Is there a way to activate an audit trail on that user’s mail file so I could see what process or user did delete the message?
Subject: Not sure if it would provide enough detail
Database Property - User Detail button has some information
e.g.
Database needs to be ODS48 or higher to see the breakout of Deletes…
You could sort by Deletes and maybe get lucky
jpaganet@us.ibm.com
Subject: You could try…
You could trying installing “Process Monitor”; Microsoft Learn: Build skills that open doors in your career tool replaced FileMon. You basically set it up to monitor a particular file/folder to see what processes touch the file. It is very verbose and quickly creates large files. This technote is also very helpful:
Title: How to analyze questionable deletions in a Notes database
Doc #: 1086649
URL: http://www.ibm.com/support/docview.wss?rs=899&uid=swg21086649
Another good technique (mentioned in the technote) is to take daily backups of the mail file. When you notice a document is missing go to the OS back up and search for the document. Write down it’s UNID. Look at the current database using NotesPeek; http://www-01.ibm.com/support/docview.wss?uid=swg24005686
and search deletion stubs for that UNID. This will tell you exactly when it was deleted. Then go to the Application Properties of the database and on the info tab open the “User Detail”. See if you can find an entry roughly around the time of the deletion.
In general you should be suspicious of the following (in order of probability):
Agents are the hardest to determine because it could be in any database. Review the ACL of the database. This will help determine what agents to suspect in terms of agent signature. To get a list of enabled agents on the server look over the administrator client help file:
“Show Schedule”. You can use the command:
Show Schedule -agents >enableagents.txt
This will create a file in your Domino install directory.
Hope that helps.