
The w3wp dtrace contains
(w3wp) <11020> EV-H {SOAPSearchService} Exception: Resolution of the dependency failed, type = "Symantec.EnterpriseVault.Indexing.Search.SOAPSearchClient", name = "(none)".|Exception occurred while: Calling constructor Symantec.EnterpriseVault.Common.AuthClient.AuthClient().|Exception is: UnauthorizedAccessException - Retrieving the COM class factory for component with CLSID {941DCD2E-4053-11D4-8685-0008C7DF84BC} failed due to the following error: 80070005 Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
Similarly the EV Search client log with the highest verbosity like explained in Technote 100014193 contains:
Exception is: UnauthorizedAccessException - Retrieving the COM class factory for component with CLSID {941DCD2E-4053-11D4-8685-0008C7DF84BC} failed due to the following error: 80070005 Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)).
The aforementioned could happen if the CLSID {941DCD2E-4053-11D4-8685-0008C7DF84BC} (Enterprise Vault ClientAuthenticate Class) does not have the proper permissions, supposedly the normal inheritance of such permissions was blocked by a third party security software or by some restrictive GPO.
The registry key HKEY_CLASSES_ROOT\CLSID\{941DCD2E-4053-11D4-8685-0008C7DF84BC} should have the Windows local group 'Users' with Read permissions and it is normally inherited by the parent object.
Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.
It is possible to edit the permissions of the key HKEY_CLASSES_ROOT\CLSID\{941DCD2E-4053-11D4-8685-0008C7DF84BC} adding to the local Windows 'Users' group the Read permissions


After the permission edit it is required to restart the Enterprise Vault services