EV searcher error "-1,073,741,502" or "1073741502" is generated when attempting to collect from Enterprise Vault (EV)

book

Article ID: 100032828

calendar_today

Updated On:

Description

Error Message

<< Job Status Log >>
07/27/2016 11:53:30 Search failed for index sever 1234567890ABCDEF1234567890ABCDEF12345000TESTSITE, ignoring for this run and moving ahead with rest of the index server results if any
07/27/2016 11:53:31 Collection job info:  TaskRunID: 0.34.6.123 Task ID: 0.27.6.992 Message: Failed: com.teneo.esa.icp.collection.ev.EVCollectionException: [#422300] Unexpected error - Error searching for archives - check logs Type: FAIL User: 0.14.3.12:0.14.6.12 Date: Wed Jul 27 11:53:31 EDT 2016

<< Icp-remoteicpjob Log >>
ERROR [collection.ev.EVSearchParallelIterator] (pool-9-thread-2:) [#71000] Admin Services Error : [#422307] EV searcher error - -1,073,741,502 Searcher exited abruptly, check if the source account configured with the associated source is part of Local Administrators group - 422,307


Cause

Restrictions are in place to prevent user accounts from executing batch jobs or the ESA service accounts are local instead of Domain accounts

Resolution

Remove restrictions.

Note there are several ways to restrict user action. Below are three examples and resolutions of restrictions that cause the -1073741502 error:


Example 1: Local User Account Control (UAC) is enabled

Resolution:
Set the UAC level to 'Never notify'

Location:
Start > Run > msconfig > Tools > Change UAC Settings > Launch



Example 2: Registry entry enabling UAC  

Examine the registry to determine if a Policy Object is forcing UAC
Computer\HKEY_LOCAL_MACHINE\Software|Microsoft\Windows\CurrentVersion\policies\system\
Name: EnableUA Value: 1 = enabled, 0 = disabled.
 
LOCATION:
Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > Security Options

Example settings for UAC disabled 
User Account Control: 
- Admin Approval Mode for the Built-in Administrator 'Not Defined'
- Allow UIAccess applications to prompt for elevation without using the secure desktop 'Not Defined'
- Behavior of the elevation prompt for administrators in Admin Approval Mode 'Elevate without prompting'
- Behavior of the elevation prompt for standard users 'Not Defined'
- Detect application installations and prompt for elevation 'Disabled'
- Only elevate executables that are signed and validated 'Not Defined'
- Only elevate UIAccess applications that are installed in secure locations 'Not Defined'
- Run all administrators in Admin Approval Mode 'Disabled'
- Switch to the secure desktop when prompting for elevation 'Not Defined'
- Virtualize file and registry write failures to per-user locations 'Not Defined'
 
NOTE: Reboot the eDP server after making changes.


Example 3: GPO restriction of Windows PowerShell execution

Resolution:
Edit the GPO being applied to the eDP server either set the 'Turn On Script Execution' to 'Not Configured' or 'Enabled > Allow all scripts'

Location:
Computer Configuration -> Administrative Templates-> Windows Components-> Windows PowerShell and configure the Turn On Script Execution setting->allow only signed script OR Disabled

 

Issue/Introduction

The EV collection task fails immediately after acquiring the EV Index Server lease with the error: Search failed for index sever 1234567890ABCDEF1234567890ABCDEF12345000TESTSITE, ignoring for this run and moving ahead with rest of the index server results if any