Setting the Cache Location as the Enterprise Vault (EV) Installation folder will stop user functionality due to Access permissions being removed when EV Admin Service starts.

book

Article ID: 100008325

calendar_today

Updated On:

Description

Error Message

When Dtracing AdminService, the following function is called to update the Permissions of the Cache Location:
 

(AdminService) <2224> EV:L SetDACLToCacheLoc - Set EV DACL to the Server Cache Location
(AdminService) <2224> EV:M GetCacheLocation - Entry...
(AdminService) <2224> EV:M GetCacheLocation - Exit...
(AdminService) <2224> EV:M SetEVDACLToPath()...
 

If the \Enterprise Vault\Webapp folder does not have the Users Access Rights assigned, IIS requests from users will return a "401 5".
 

Example:
GET /EnterpriseVault/download.asp VaultID=&SaveSetID=&Format=EML&AttachmentID=0 80 EnterpriseVaultOutlookExt-V9.0.1.1073 401 5 

Cause

The Cache location settings are configured in Cache tab from Computer Properties in Enterprise Vault Administration Console. As a security feature in EV 9 and above, the EV Admin Service will confirm and update the Cache Location folder permissions to only allow Local Administrators and SYSTEM, removing Users from having access.  If the Cache Location is set to the Installation Folder (Ex. C:\Program Files (x86)\Enterprise Vault), this will remove the 'Users' group.
 

Note: If access permissions to the folder are changed manually, these permission settings are overwritten and reset when Enterprise Vault Admin Service starts to guarantee required permissions are given to the folder.

Resolution

The Cache location folder must be a dedicated folder for Cache location. The specified folder must be empty and not be utilized for any other function (Ex. Indexing, Vault Store Data, Installation Directory).
 

Note: Please refer to the Installing and Configuring Guide for further details on the configuration of the Cache Location.
 

 

Veritas Corporation has acknowledged that the above-mentioned issue is present in the current version(s) of the product(s) mentioned at the end of this article. Veritas Corporation is committed to product quality and satisfied customers.

 

This issue is currently under investigation by Veritas Corporation. Pending the outcome of the investigation, this issue may be resolved by way of a patch or hotfix in current or future revisions of the software. However, this particular issue is not currently scheduled for any release.  If you feel this issue has a direct business impact for you and your continued use of the product, please contact your Veritas Sales representative or the Veritas Sales group to discuss these concerns.  For information on how to contact Veritas Sales, please see https://www.veritas.com .

 

Please be sure to refer back to this document periodically as any changes to the status of the issue will be reflected here.

 

 

Issue/Introduction

The Cache location folder is used as temporary file storage to increase performance during Vault Cache, PST and FSA Enterprise Vault processes. Enterprise Vault removes Inheritance from the Folder Security and assigns Access Rights for the Administrators group and SYSTEM account to the Cache location folder. If other groups or users are manually given permissions to Cache location folder, Enterprise Vault Admin Service will reset the access right settings when it starts.
Remote user actions access files within the \Enterprise Vault and \Enterprise Vault\Webapp folders. If the Installation Folder is specified as the Cache Location, the required User rights to access these locations are removed.

Additional Information

ETrack: 2805239