Error Message

This part of the error will be seen in the "Server.log" file...

[#422243] An error occurred while running a collection task - Scandir failed with exit code -1,073,741,502 - Unexpected error
 

The other part of the same error will be seen in the "ScanDir.log" file...

ERROR ScanDir - Exiting Scandir with exit code: 1115

eDiscovery Platform prerequisites / permissions are not set properly

The eDiscovery Platform prerequisite checklist can also be found in any version of the eDiscovery Platform Installation Guide

1. Verify that all service accounts have been added to the Local Administrator group.
2. Log in to the Administrator account, and set up the following security settings for the Administrator account in Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignments:
   • Act as part of the operating system
   • Log on as a Service
   • Allow log on locally
3. Verify that User Account Control (UAC) is set to “Never Notify”.
4. Verify that the following Local Security Policies are disabled in Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options
   • User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode
   • User Account Control: Detect application installations and prompt for elevation
   • User Account Control: Run all administrators in Admin Approval Mode
   • User Account Control: Only elevate UIAccess applications that are installed in secure locations

** Note regarding UAC settings **

• In rare cases, it has been observed that the UAC setting is already set to 'Never Notify', but Windows had not registered it as being disabled. If the UAC setting is already set to off when it's checked, make sure to click on "OK" when closing the UAC settings window instead of cancel.  Windows needs to be restarted for the change to take affect.
• It is possible that some GPO policy (or some anti-virus policy, i.e., the McAfee agent) might be affecting permissions, so check with the system / network administrator