Users are able to access files that they do not have NTFS permissions to access.

book

Article ID: 100029928

calendar_today

Updated On:

Resolution

To revert back to the version 5.0 functionality and perform a synchronize on the root archive point folder permissions, modify the SynchroniseFSASharePermissions registry key value to 0.
 
  1. Set the following registry key on all Enterprise Vault servers:

Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.

HKLM\SOFTWARE\KVS\Enterprise Vault
DWORD value - SynchroniseFSASharePermissions
Value Data - 0

Note: For 64-bit versions set the following registry key on all Enterprise Vault servers:


HKLM\SOFTWARE\Wow6432Node\KVS\Enterprise Vault\
DWORD value - SynchroniseFSASharePermissions
Value Data - 0

2. Restart all Enterprise Vault services.

3. Perform a synchronization from the File System Archiving Task.

 

Note: The values for the entry and their function are listed below.  

0 - Do not synchronize archive permissions to the file server share permissions. On synchronization, assign to an archive the NTFS permissions of the corresponding archive point folder.

1 or greater, or registry key not present - (Default) Synchronize archive permissions to the file server share permissions. On synchronization, assign to an archive the permissions of the corresponding archive point folder, if it is a share. Otherwise, assign the permissions of the target volume share.

 

Issue/Introduction

When files are archived with Enterprise Vault File System Archiving (FSA), permissions are synchronized from the share permissions of the folder by default.