When the Enterprise Vault Journaling task receives a journaled message from Exchange 2000 or Exchange Server 2003:

• The complete list of recipients is extracted from the envelope message contents.

• This list is compared with recipients in the header of the attached message. Recipients found in the envelope message but not the attached message header are classed as Undisclosed Recipients.

• If a BCC recipient is also in the TO or CC fields and the message arrives over SMTP, then Enterprise Vault will store the recipient in the TO or CC field but not in the Undisclosed field.

• When messages are addressed to Alternate Recipients and BCC recipients and sent over SMTP, these recipients will be included in the body of the envelope message but not in the message header of the original message. As there is no way of discovering the original category of such recipients, Enterprise Vault will store them as Undisclosed Recipients.

• When a message is redirected to an Alternate Recipient (that is, forwarded to the Alternate recipient without actually being delivered to the original recipient), then the message headers will show the originally intended recipient and not the final (Alternate) recipient. Both recipients will be indexed, even though the originally intended recipient never actually received the message. This is because it is not possible to determine from the journal message that the original recipient was skipped.

• If an Alternate recipient also appears as an originally intended recipient (TO or CC), then the recipient will not be stored as an Undisclosed Recipient.

• A copy of the envelope message, complete with original message attached, will be passed to any external filters (for selective journaling or the Compliance Accelerator Journaling Connector).

• When the message is archived, only the original message is stored in the Journal archive, not the envelope message.

• The journaling task cannot archive an envelope message from the journal mailbox if it cannot find the message body or the Message-ID, Recipients, and Sender tags in the envelope. For example, these can be stripped by antivirus applications that find suspicious messages.

• The journaling task copies any envelope messages that it cannot archive to the folder Enterprise Vault Journaling Service/Failed To Copy.