User attempting Export from Search receive Export Failed error

book

Article ID: 100034367

calendar_today

Updated On:

Description

Error Message

The user receives the error:
Enterprise Vault Search Export Failed
Enterprise Vault Search
Export Failed.
Try the operation after some time or contact your Enterprise Vault administrator for more details.

A DTrace on the Enterprise Vault server of 'StorageOnlineOpns' and 'W3wp' will show the following lines from the W3wp process:
{EVS} Zip file export started... || User: EVRPSLAB\user1
{EVS} Exception: Access to the path 'C:\Windows\TEMP\EVExport_b909b847-1aef-4f3c-adc2-2b02d4c50a8a.zip' is denied. Info:Zip file export failed.
  User: EVRPSLAB\user1 
    Diag: Type:System.UnauthorizedAccessException ST:   at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
       at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
          at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
             at Telerik.Windows.Zip.ZipPackage.CreateFile(String fileName)
                at Symantec.EV.Search.Server.Business.ZipExportHandler.Create()
                   at Symantec.EV.Search.Server.Business.ItemManager.ExportItems(ExportInput input) Inner:None
{EVS} Exception: Access to the path 'C:\Windows\TEMP\EVExport_b909b847-1aef-4f3c-adc2-2b02d4c50a8a.zip' is denied. Info:Export failed. 
 User: EVRPSLAB\user1 
   Diag: Type:System.UnauthorizedAccessException ST:   at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
      at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
         at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
            at Telerik.Windows.Zip.ZipPackage.CreateFile(String fileName)
               at Symantec.EV.Search.Server.Business.ZipExportHandler.Create()
                  at Symantec.EV.Search.Server.Business.ItemManager.ExportItems(ExportInput input) Inner:None
{EVS} End ItemManager::ExportItems() || User: EVRPSLAB\user1
{EVS} End ContentManagementService::ExportItems() || User: EVRPSLAB\user1
{EVS} Failed to get exported files bytes from service. || User: EVRPSLAB\user1
{EVS} Export failed. Reason: Access to the path 'C:\Windows\TEMP\EVExport_b909b847-1aef-4f3c-adc2-2b02d4c50a8a.zip' is denied. || User: EVRPSLAB\user1

Cause

Exporting to Zip from Search requires that the server's 'Users' group object has the appropriate permissions on the Windows Temp folder (default location:  C:\Windows\Temp), in some environments the 'Users' object is only granted 'Read & execute, List folder contents, and Read' permissions:
Temp Security tab with Users selected showing wrong permisisons
 
However the Export operation is creating a file under the security context of the User making the request and needs at least 'Create files / write data' permission.

Resolution

At a minimum the Enterprise Vault Server's 'Users' group object needs three permissions to allow the export process to succeed:
Traverse folder / execute file
Create files / write data
Create folders / append data
Advanced Permission Entry for Temp showing the three options checked.
 
Once the 'Users' object has these three permissions the Export operation from Search will be successful.

Issue/Introduction

Users are receiving an error when using the Enterprise Vault Search option 'Export->Zip' option:

Enterprise Vault Search Export Zip option