Error Message

The following error is displayed when clicking on the yellow banner of the shortcut:

"You are being redirected to "http://webmail.domain.com/enterpriseVault". This website may not be trusted and may be used to collect personal information, such as user name and password. Are you sure that you want to continue to this website?"

OWA logging shows the following error:

4/6/2011 10:14:24 AM [3924,3] [RestoreRequest::Send] Exception sending request to restore item: System.Net.WebException: The remote server returned an error: (552) ERR Creation of the basket by the Shopping Service failed. Ask the Enterprise Vault Administrator to check the Shopping Service configuration.. at System.Net.HttpWebRequest.GetResponse() at Symantec.EnterpriseVault.Owa.EVServerRequests.RestoreRequest.Send()

4/6/2011 10:14:24 AM [3924,3] [RequestProcessor::RestoreAndActOnItem] Item not restored

4/6/2011 10:14:24 AM [3924,3] [Id::OwaId] Returning cached OwaId:
RgAAAADgVae9Iic+T7gbWz8eUy89BwCv46G7fuTRQIapSpmABdoxAA//HdufAACYN1PpFU6BRqdyEA5bCfPtAF5+SVGXAAAJ

4/6/2011 10:14:24 AM [3924,3] [RequestProcessor::RestoreAndActOnMailboxItem] Redirecting client to: /owa/?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAADgVae9Iic%2bT7gbWz8eUy89BwCv46G7fuTRQIapSpmABdoxAA%2f%2fHdufAACYN1PpFU6BRqdyEA5bCfPtAF5%2bSVGXAAAJ&EVItemUnavailable=1

Within the IIS log on the Enterprise Vault Server will show HTTP error 552 0 0.

GET /EVAnon/restoreo2k.asp vaultid=11A3B18D7304D8542BC84A8B5C24B0FE11110000EVServer&savesetid=201201045636400~201201031713250000~Z~003124F5D1BDB4344EA3EE1C5CB74F21&mbx=Username@Domain.com&server=EVServername&restorelocation=3&foldername=Deleted%20Items 80 - - 552 0 0

Note: 552 is an EV-based IIS code response for 'No basket was created'. See Related document TECH48441 for further details.

A Dtrace of w3wp on the Enterprise Vault server may show the following:

(w3wp) <9684> EV~E Event ID: 5137 Failed to create file| Name: \\EVSERVER\C$\Program Files\Enterprise Vault\Shopping\DOMAIN\evanon\20111025084035835.bsk| Error: 0x80030005 |
(w3wp) <9684> EV~E Event ID: 5143 Failed to create a new basket| Shopper: DOMAIN\evanon| BasketName:  |

Notes: 
    a. The Events listed in the above Dtrace, 5137 and 5143, may not appear in the Event Viewer.
    b. The error code 0x80030005 translates to "Access denied."

The retrieval process failed due to an issue with the Enterprise Vault (EV) Anonymous account (Data Access Account) and the utilization of the EV Shopping Basket during a retrieval of an archived item through OWA. This may also be caused by the shopping basket data location is specified as a UNC path to an Administrative share, rather than as a local path.

Note: The Shopping basket data location contains temporary references of items being restored through the EV webapp functions (Search and Archive Explorer) as well as OWA and may be changed with limited interruption.

A. Confirm the EVAnon Virtual Directory (VD) is utilizing the correct Anonymous account.
Note:  Below are steps for IIS 7.

1. Open Internet Information Services (IIS) Manager.
2. Select the EVAnon VD in the tree on the left.
3. Open Authentication options for the EVAnon site under the IIS settings by double clicking Authentication or right-click on Authentication and select Open Feature.
4. Right-click Anonymous Authentication and select Edit.
5. Note the account information listed in the Specific User field.
6. Click Cancel.

B. Ensure the Anonymous Account in IIS and the DataAccess account within the EV Vault Administration Console match:

1. Open Enterprise Vault Administration console.
2. Right-click on Directory and select Properties
3. Select the Data Access Account tab at the top.
4. Set the username and password to the same account as previously noted in step 5 from the EVAnon VD in IIS.
5. Click OK.
6. Restart the Enterprise Vault Admin Service.

C. Locate the Shopping Basket data path location and ensure the location and permissions are set properly:

1. In the Enterprise Vault Admininstration Console, expand Enterprise Vault Servers > [EV_SERVER_NAME] > Services.
2. Right-click the Enterprise Vault Shopping Service and select properties.
3. Identify the path of the Data files and select Change if this is not a local path.
    a. Enter the path to the desired shopping data location as a local path and select Apply.
    b. If the path has been changed, restart the EV Shopping Service.
    Note: If a UNC path must be used (for example, in a highly-available configuration for a clustered environment), ensure that the share permissions allow all users to write to the configured shopping location.
4. Open Windows Explorer and browse to the Data files folder noted in step C-3.
5. Access the Properties of folder > Security tab > Advanced.
6. Grant 'Full Control' permissions to "Authenticated Users".
7. Check the option "Replace all child object permissions with inheritable permissions from this object".
8. Click OK and Click OK again.
10. Open a command console on the EV Server.
11. Run the command IISReset.