Access to Enterprise Vault Search fails after applying a hardening Group Policy Object to the Enterprise Vault Server.
Article ID: 100045670
Updated On:
Description
Error Message
On-screen errors:
Unable to load user preferences. Check whether Enterprise Vault Directory Service is running.
Error loading user preferences. If the problem persists, contact your Enterprise Vault Administrator.
Enterprise Vault Event Log Error:
Event ID: 41519
Unable to load user preferences. Check whether Enterprise Vault Directory Service is running.
Cause
This issue is caused by the Vault Service Account (VSA) having been removed from the Debug programs privilege on the EV server and its User Access Control setting not being set to the minimum level.
To check for the Debug programs privilege condition:
- Log onto the EV server using an account that is a member of the local Administrators group.
- Launch the Local Security Policies applet.
- Expand the Local Policies folder.
- Expand the User Rights Assignment folder.
- Scroll through the Security Setting column contents for the Debug Programs policy.
- Note if the Vault Service Account is listed. Note that this privilege is automatically added during the start of the Enterprise Vault Admin Service, unless blocked by a GPO.
Resolution
Add the following exceptions to the hardening GPO to allow the Vault Service Account to be assigned the needed privileges:
- DisableUAC
- EnableDebugPrograms
After these GPO exceptions are in place, the GPO will need to be refreshed on the EV server. This refresh can be accomplished through any of the following methods:
- Force the GPO update using the Command Prompt
gpupdate /force - Restart the EV server.
- Wait for the next automatic GPO refresh period to occur.
Note that option 1 may still require a server restart to fully implement the hardening GPO exceptions.
Issue/Introduction
