Error Message

A trace of the task (Mailbox Archiving / Journal Task / SMTP) reveals the following errors:

• {StorageObjectProxy::GetObjectW} (Exit) Status: [The requested object does not exist.  (0x80010114)]
• {QueueSavesetCommand::Execute:#58} _com_error exception: [The requested object does not exist.  (0x80010114)]
• {QueueSavesetCommand::Execute} (Exit) Status: [The requested object does not exist.  (0x80010114)]
• {QueueSavesetCommand::QueueIsUnavailable} (Entry) Status: [The requested object does not exist.  (0x80010114)]

This issue can occur when a local security policy has been implemented to restrict the encryption types allowed for Kerberos.

To check for these restrictions:

1. Navigate on the computer to Start > Windows Administrative Tools > Local Security Policy > Local Policies > Security Options. 
2. Locate and click on the Network security: Configure encryption types allowed for Kerberos option.
3. View the configured settings in the Security Setting column or right click and select the Properties option as shown in the screen shot below.
4. Scroll through the list to see which settings have been enabled.

Note: The restriction of encryption types is implemented by modifying the Local Security Policy - Security Options - Network security: Configure encryption types allowed for Kerberos setting on both the Enterprise Vault server(s) as well as the Domain Controller server(s) in the environment. 

Note: By default the above setting is set to Not Defined.  

Allow the Vault Service Account the ability to support the restricted encryption types for Kerberos. This is accomplished by using Active Directory Users and Computers on a domain controller. 

1. Navigate to Start > Windows Administrative Tools > Active Directory Users and Computers. 
2. Click on the Organization Unit (OU) containing the Vault Service Account.
3. Locate and right click on the Vault Service Account.
4. Select the Properties option.
5. Select the Account tab.
6. Scroll down in the Account options: window to locate the appropriate settings.
7. Click on the settings that match those of the Local Security Policy.  For example in the screen show below, the settings This account supports Kerberos AES 128 bit encryption and This account support Kerberos AES 256 bit encryption have been selected.
8. Click the OK button to save and apply the change(s).