Enterprise Vault move archive fails with exception in the report

book

Article ID: 100031932

calendar_today

Updated On:

Description

Error Message

The following events appear in the Symantec Enterprise Vault Event Log: 

On Source EV Server:

Source: Enterprise Vault
Date: XXXXX
Event ID: 41226
Task Category: Move Archive Task
Level: Error
Keywords: Classic
User: N/A
Computer:XXXXXXXX
Description:
An error was encountered while processing an item. Enterprise Vault will try again later unless the retry count has been reached.
Item: B0B265XXXXXXXXX42CA3A3561
Archive: 1709B90EAXXXXXXX9562D63F9B1F378A1110000EVSite
Exception: System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

at KVS.EnterpriseVault.Interop.DirectoryConnectionObjectClass.AddExtensionEntry(String dirComputerOrEntryId, Object vExtensionEntryParams)
at KVS.EnterpriseVault.MoveArchiveTask.MAGlobals.AddExtensionEntryToDestinationDirectory(String srcContentProviderId)
at KVS.EnterpriseVault.MoveArchiveTask.ItemProcessor.CopyContentProviderId(String srcContentProviderId)
at KVS.EnterpriseVault.MoveArchiveTask.ItemProcessor.CopyItem(QueuedSourceItem sourceitem, IContentManagementAPI4 cmAPImaThread, String& srcSSID, String& destSSID, Int32 localRetryCount)
at KVS.EnterpriseVault.MoveArchiveTask.ItemProcessor.CopyItem(QueuedSourceItem sourceitem, IContentManagementAPI4 cmAPImaThread, Int32 localRetryCount)
at KVS.EnterpriseVault.MoveArchiveTask.MoveArchiveItem.ProcessItem(QueuedSourceItem sourceitem, IContentManagementAPI4 cmAPImaThread, Boolean& itemSecurityCheckRequired, Int32 localRetryCount)
at KVS.EnterpriseVault.MoveArchiveTask.SourceArchiveProcessor.SourceArchiveItemProcessorThread().

On Destination EV Server:

Source: Enterprise Vault
Date: XXXXXX
Event ID: 41226
Task Category: Directory Service
Level: Warning
Keywords: Classic
User: N/A
Computer:XXXXXXXX
Description:
Access denied. User is not in a role that allows '{DIR} Can create Extension Content Provider'.
User: 'DOMAIN(Source)\USER(Source)'

Cause

This is a scenario where the Power Administrator group on the Destination Server (where Source Server EV Admin is added) lacks a granular permission that allows '{DIR} Can create Extension Content Provider'.

Resolution

On Destination EV server, follow the below steps to provide granular permission for Power Administrators group to '{DIR} Can create Extension Content Provider':
  1. Open Vault Admin Console as EV Admin on Destination EV Server
  2. Right click on Directory on
  3. Open Authorization Manager
  4. Expand EvAzStore.xml -> Enterprise Vault -> Role assignments
  5. Right click on Power Adminsitrators -> Properties -> General tab -> Show Definition
  6. Go to Definition tab -> Click on add
  7. Go to Operations tab -> Check the entry '{DIR} Can create Extension Content Provider'
  8. Click on OK three times
  9. Close Authorization Manager and select Save when prompted to save the changes
  10. Restart the EV Administrator service on Destination EV Server
  11. Retry the failed move archive

Issue/Introduction

While attempting to move an Archive from one Enterprise Vault server to another, the move task fails with the errors shown below.
Powered by Wolken Software