Folders moving ON THEIR OWN -HELP! [message #145936] |
Tue, 11 June 2019 23:42  |
McIrish
Messages: 254 Registered: October 2011
|
|
|
|
KC 9.2.7 patch 3 (4225)
Everything has been running fine. Server has not had to restart in over 60 days for any updates. I get a call from someone telling me their mail folders in Outlook are in the wrong place. I take a look at his computer and sure enough, all his mail folders he created are moving on their own to other locations. Seems like a virus, but Sophos running on the server does not show anything. I take a look in the KC logs and in the Operations log, it is filled with MOVE operations for all the 425 users of the domain.
Extremely bad. Any ideas? I will get a case opened
|
|
|
Re: Folders moving ON THEIR OWN -HELP! [message #145940 is a reply to message #145936] |
Wed, 12 June 2019 15:36   |
Maerad
Messages: 275 Registered: August 2013
|
|
|
|
First of all - you don't run antivirus on a mailserver if it's not backed / linked to the mailserver itself. Aside from reducing the overall performance, it also deletes mails with virus in it... you know what happens if some program deletes a mail in the kerio folder and it's not tru kerio itself, so the program doesn't know about it? Really bad idea.
Antivirus should be enabled in the mailserver itself and the client, best with a outlook addin or something like that.
For you problem - the "move" msgs are normal, nothing to worry about. Question is, do the folders for ALL users move? HOW are they moved? New folders? Randomly going from subfolder to the above one? New names?
Enable the debug log!
Also check if there is any auth from external sources and not the internal network, at least for those ppl that connect from the local network.
|
|
|
Re: Folders moving ON THEIR OWN -HELP! [message #145941 is a reply to message #145940] |
Wed, 12 June 2019 16:16   |
McIrish
Messages: 254 Registered: October 2011
|
|
|
|
The antivirus software on the mail server was set to NOT scan within the mail store. So, I don't think that was the issue at all. We do have antivirus running inside KC. We are licensed on that. All clients also have AV. I don't think antivirus was the cause of this headache, but thanks for the advice. It's always good to double check.
After hours of help from support, we narrowed down the major issue to one user. I still have no idea why his mail folders got messed up. Folders were moved inside other folders, etc. The end user claims he did not do that. The massive amount of Move messages in the operations log was due to some other people doing massive amounts of moves, that I was unaware of. This was beyond the normal Move messages I always see in the Operations log. After the initial complaints from the first user, I kind of panicked when I saw all the extra Moves in the logs. I did find a number of mailboxes that had some index corruption but I got that all solved. This morning, everything seems to be normal.Totally odd. I'm hoping it was just user error.
|
|
|
Re: Folders moving ON THEIR OWN -HELP! [message #145951 is a reply to message #145941] |
Thu, 13 June 2019 16:13   |
Maerad
Messages: 275 Registered: August 2013
|
|
|
|
McIrish wrote on Wed, 12 June 2019 16:16The antivirus software on the mail server was set to NOT scan within the mail store.
Thing is, you don't need a virus scanner on the server, if nobody is working there. Maybe for a files share, but even here the client would be enough to scan. Even if you take out the folder itself from scanning, the data etc. is used in memory and I had my fair share of problems, even if the server itself was excluded. It's really not worth the hassle AND a slow down for the server. I only run a virus scan on our terminal servers - there I really need it.
Quote:This morning, everything seems to be normal.Totally odd. I'm hoping it was just user error.
Yeah, I also believed it's a layer 8 > user problem. It mostly is in those cases. But you said others had those problems (moves) too, so I wasn't sure 
If you use outlook, deploy an addin for all users, called CodeTwo Move&Delete Watchdog. It's free, even for companies.
If you move or delete a folder, a msg will poppup and warn you, so the users will stop and think again.
It was like magic. Suddenly, all the problems with the public folders being moved or deleted disappeared. Who would've thought ....
|
|
|
|