Greetings, Exchange 2010 SP3 UR3 Two Node DAG 1400+ mailboxes in two databases All mailboxes are configured by default with a 270 day retention tag ( TAG1). We have a second retention tag we apply in rare cases that includes and on line archive ( TAG2). In very rare cases, we manually remove all retention tags. We also have a handful we have applied litigation holds to.
Doing some routine work in EMC, I noticed today that many mailboxes that had TAG1 now had TAG2. Worse, I found several mailboxes that no longer had retention tags at all. At this point, we have no idea when this happened. We are now running several Exchange shell scripts against all 1400+ mailboxes to determine the magnitude of the issue and we know how to gather this data and sort in a CSV. Once we have reviewed all the reports, we know how to get the proper tags applied again to the mailboxes. My bigger concern is determining what caused this so it does not happen again. First question is, has anyone heard of this before? Quick thought and question is - is there an attribute to determine a date that tag may have changed on a mailbox? - at least that would provide a clue to work backwards and see if it had to do with SP install or whatever. I have never had to figure out anything like this before in EXCHANGE. Suggestions on how to investigate what caused this? Thanks for all your help. Dana
