A Dtrace of the W3WP shows:
180 14:19:33.110 [7208] (w3wp) <7228> EV:M IndexQueryServerRequest: OnResponseComplete - HR=Access is denied. (0x80070005)
181 14:19:33.110 [7208] (w3wp) <10856> EV:L IndexQueryServerRequest: WaitForSingleObject returned 0.
182 14:19:33.110 [7208] (w3wp) <10856> EV:M Response received. Result = Access is denied. (0x80070005), Status = 500
The user account does not have permissions to any folder in the archive.
A Dtrace of the EVIndexQueryServer shows:
155 14:19:33.047 [10188] (EVIndexQueryServer) <11256> EV-M {USERSEARCHABLEFOLDERS.EN_US} User DOMAIN\User does not have read item access to any folders in archive 98316F99D8008A24955DF35563C9C09758110000EVSERVER.
156 14:19:33.047 [10188] (EVIndexQueryServer) <11256> EV-M {USERSEARCHABLEFOLDERS.EN_US} [17ms] GetSearchableFoldersForStructuredArchive: archiveID=98316F99D8008A24955DF35563C9C09758110000EVSERVER, UseGlobalFolderID=False
157 14:19:33.047 [10188] (EVIndexQueryServer) <11256> EV-M {USERSEARCHABLEFOLDERS.EN_US} GetSearchableFolders: Caller DOMAIN\User has 0 searchable folders.
158 14:19:33.047 [10188] (EVIndexQueryServer) <11256> EV-M {FOLDERRESTRICTIONQUERYTRANSFORM.EN_US} Caller has permission in 0 folders
159 14:19:33.047 [10188] (EVIndexQueryServer) <11256> EV-M {SEARCHPIPELINE.EN_US} [25ms] [6/13] Completed FolderRestrictionQueryTransformCommand, search 2, user DOMAIN\User, source Xtender-Recipient01 (DOMAIN\User) (98316F99D8008A24955DF35563C9C09758110000EVSERVER/13)
160 14:19:33.047 [10188] (EVIndexQueryServer) <11256> EV-L {SOURCESINUSE.EN_US} Remove: Source 98316F99D8008A24955DF35563C9C09758110000EVSERVER/13 is no longer in use. 0 total sources in use.
161 14:19:33.110 [10188] (EVIndexQueryServer) <11256> EV-H {SEARCHTASK.EN_US} Exception: Caller does not have access to any folders in structured archive 98316F99D8008A24955DF35563C9C09758110000EVSERVER Info:Search 2 failed, Attempt=1 Diag: Type:Symantec.EnterpriseVault.Indexing.Search.SearchPermissionException ST: at Symantec.EnterpriseVault.Indexing.Search.FolderRestrictionQueryTransform.Transform(StructuredQuery query)| at Symantec.EnterpriseVault.Indexing.Search.QueryTransformer.FolderRestrictionTransform(StructuredQuery query, String archiveID, Boolean skipFolderCache)| at Symantec.EnterpriseVault.Indexing.Search.FolderRestrictionQueryTransformCommand.Execute(SearchPipelineContext context)| at Symantec.EnterpriseVault.Indexing.Search.SearchPipeline.Execute(SearchPipelineContext context)| at Symantec.EnterpriseVault.Indexing.Search.SearchTask.Execute() Inner:None
162 14:19:33.110 [10188] (EVIndexQueryServer) <11256> EV-L {SEARCHTASKTHREAD.EN_US} [147ms] ThreadMain: Search execution has completed
163 14:19:33.110 [10188] (EVIndexQueryServer) <11256> EV-H {SEARCHTASKPROCESSOR.EN_US} Search 2 failed, but not due to 'too busy' or intermittent error, so not re-queuing.
164 14:19:33.110 [10188] (EVIndexQueryServer) <6176> EV-H {FEDERATEDSEARCH.EN_US} Exception: Caller does not have access to any folders in structured archive 98316F99D8008A24955DF35563C9C09758110000EVSERVER Info:Exception occurred during the execution of the pipeline for source 98316F99D8008A24955DF35563C9C09758110000EVSERVER/13 Diag: Type:Symantec.EnterpriseVault.Indexing.Search.SearchPermissionException ST: at Symantec.EnterpriseVault.Indexing.Search.FolderRestrictionQueryTransform.Transform(StructuredQuery query)| at Symantec.EnterpriseVault.Indexing.Search.QueryTransformer.FolderRestrictionTransform(StructuredQuery query, String archiveID, Boolean skipFolderCache)| at Symantec.EnterpriseVault.Indexing.Search.FolderRestrictionQueryTransformCommand.Execute(SearchPipelineContext context)| at Symantec.EnterpriseVault.Indexing.Search.SearchPipeline.Execute(SearchPipelineContext context)| at Symantec.EnterpriseVault.Indexing.Search.SearchTask.Execute() Inner:None
165 14:19:33.110 [10188] (EVIndexQueryServer) <6176> EV-H {SEARCHSERVICE.EN_US} Exception: Caller does not have access to any folders in structured archive 98316F99D8008A24955DF35563C9C09758110000EVSERVER Info:SearchService.Search failed. Diag: Type:Symantec.EnterpriseVault.Indexing.Search.SearchPermissionException ST: at Symantec.EnterpriseVault.Indexing.Search.FederatedSearch.HandleErrors(Dictionary`2 tasks)| at Symantec.EnterpriseVault.Indexing.Search.FederatedSearch.Search(SearchRequest request, String callerLogin)| at Symantec.EnterpriseVault.Indexing.Search.SearchService.Search(SearchRequest request) Inner:None
166 14:19:33.110 [10188] (EVIndexQueryServer) <6176> EV-H {INDEXSERVERSEARCH.EN_US} Exception: Caller does not have access to any folders in structured archive 98316F99D8008A24955DF35563C9C09758110000EVSERVER Info:Search2 failed. Diag: Type:Symantec.EnterpriseVault.Indexing.Search.SearchPermissionException ST: at Symantec.EnterpriseVault.Indexing.Search.FederatedSearch.HandleErrors(Dictionary`2 tasks)| at Symantec.EnterpriseVault.Indexing.Search.FederatedSearch.Search(SearchRequest request, String callerLogin)| at Symantec.EnterpriseVault.Indexing.Search.SearchService.Search(SearchRequest request)| at Symantec.EnterpriseVault.Indexing.Search.IndexServerSearch.Search2(String searchEntityId, String query, Int32 startResult, Int32 maximumResults, Int32 options, String sortBy, Int32 resultsPropertySet, String extraResultProperties, String resultsProcessingInstruction, Int32 resultsFormatOptionsNOTUSED, String authToken, Int32 timeoutSecs) Inner:None
167 14:19:33.110 [10188] (EVIndexQueryServer) <6176> EV-H {INDEXSERVERSEARCHSERVICE.EN_US} Exception: Caller does not have access to any folders in structured archive 98316F99D8008A24955DF35563C9C09758110000EVSERVER Info:Search via HTTP/POST failed. Diag:HRESULT: 80070005 Type:System.Runtime.InteropServices.COMException ST: at Symantec.EnterpriseVault.Indexing.Search.IndexServerSearch.Search2(String searchEntityId, String query, Int32 startResult, Int32 maximumResults, Int32 options, String sortBy, Int32 resultsPropertySet, String extraResultProperties, String resultsProcessingInstruction, Int32 resultsFormatOptionsNOTUSED, String authToken, Int32 timeoutSecs)| at Symantec.EnterpriseVault.Indexing.Search.IndexServerSearchService.Search(Stream postBodyStream) Inner:None
Granting access via the Vault Administration Console updates the archive but for some reason not the permissions on the folders within it.
1. Remove automatically inherited permissions on the archive by following 000030335.
2. Synchronize the mailbox including the 'Folder hierarchy and permissions'.