Error Message

Different error messages can be seen in different scenarios. 

Scenario 1:  "Enterprise Vault Admin Service" DCOM component misconfiguration.

{ClientAuthImpl::SolicitVaultServiceAccountSid} Failed to determine Vault Site Account. Registry read failed [The system cannot find the file specified.  (0x80070002)]

{ClientAuthImpl::VerifyServerIdentity} Verified [False] AuthServer [S-1-5-21-114880721-4019309880-1094176023-1103 (EVRPSLAB\vsa)], Vault Service Account [Not valid] Process [Not valid], Local AuthServer [Not valid]

{CClientAuthenticate::ValAuthString} Error [Access is denied.  (0x80070005)]

{CDirectoryServiceObject::GetNextLevelArchiveXML} HRXEX fn trace : Error [0x80070005], [d:\builds\57\ev\v-prod-s\sources\source\directory\directoryservice\directoryserviceobject.cpp, lines {10158,10170}, built Aug 29 11:38:52 2023].

{EVS} Exception: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) Info:Failed while getting Archive. || User: EVRPSLAB\testmailbox ||  Diag: Type:System.UnauthorizedAccessException ST:   at KVS.EnterpriseVault.Interop.DirectoryConnectionObjectClass.GetNextLevelArchiveXML(Int32 lArchiveTypes, String reserved, Object& ArchiveXML, Object& ArchiveStatisticsXML)|   at Symantec.EV.Search.Server.Business.ContentSource.PopulateUsersArchiveGroup(List`1 defaultArchiveGroups, Boolean hasUserPreferencesDefined)|   at Symantec.EV.Search.Server.Business.ContentSource.GetArchiveGroups(ArchiveQuery query, UserPreference userPreferences)|   at Symantec.EV.Search.Server.Service.ContentManagementService.GetArchiveGroups(ArchiveQuery query, UserPreference userPreference)|   at Symantec.EV.Search.Client.Presentation.Model.SearchModel.GetArchiveGroups(ArchiveQuery query, UserPreference userPreference)|   at Symantec.EV.Search.Client.Presentation.Presenters.ArchivesPresenter.LoadArchiveGroups(ArchiveQuery query, UserPreference userPreference)|   at Symantec.EV.Search.Client.Host.View.ArchivesView.OnPageLoad(EventArgs args) Inner:None

Scenario 2: User preferences are misconfigured.

{EVS} Archive XML [

{EVS} After ContentSource::GetArchiveGroups() GetNextLevelArchiveXML || User: EVRPSLAB\testmailbox

{EVS} Including extended type : 597EC7E0-B36C-4C94-8891-509754ABEA76 || User: EVRPSLAB\testmailbox

{EVS} Including extended type : 9099697C-5CA3-4E8D-A758-158DFF586C9C || User: EVRPSLAB\testmailbox

{EVS} Before calling GetArchives for the default archive groups. || User: EVRPSLAB\testmailbox

{EVS} Begin ContentSource::GetArchives() || User: EVRPSLAB\testmailbox

{EVS} Archive Query type: 84704288-97B1-4519-B46B-7B4CCEA5ACC7| ,startindex: 0 ,totalrecordcount: 2147483647 ,IsExtendedType: True || User: EVRPSLAB\testmailbox

{EVS} Exception: You does not have access to archives Info:Failed while getting Archive. || User: EVRPSLAB\testmailbox ||  Diag: Type:System.Exception ST:   at Symantec.EV.Search.Server.Business.ContentSource.GetArchives(ArchiveQuery query, Archive& defaultArchive)|   at Symantec.EV.Search.Server.Business.ContentSource.PopulateArchivesInGroup(ArchiveQuery query, ArchiveGroup defaultArchiveGroup)|   at Symantec.EV.Search.Server.Business.ContentSource.GetArchiveGroups(ArchiveQuery query, UserPreference userPreferences)|   at Symantec.EV.Search.Server.Service.ContentManagementService.GetArchiveGroups(ArchiveQuery query, UserPreference userPreference)|   at Symantec.EV.Search.Client.Presentation.Model.SearchModel.GetArchiveGroups(ArchiveQuery query, UserPreference userPreference)|   at Symantec.EV.Search.Client.Presentation.Presenters.ArchivesPresenter.LoadArchiveGroups(ArchiveQuery query, UserPreference userPreference)|   at Symantec.EV.Search.Client.Host.View.ArchivesView.OnPageLoad(EventArgs args) Inner:None

Event ID: 41478 User 'EVRPSLAB\testmailbox' does not have permission on any archive.

Scenario 1: "Enterprise Vault Admin Service" DCOM component configured to run with the System Account and not the VSA (All users on the respective EV Server(s) will be affected):

Scenario 2: This issue can be observed by only one or more users but not all users in the environment, if there has been a misconfiguration of Search preferences.

One of the causes of this is, if the user had permission for a specific type of archive(s) (Mailbox, Shared, FSA, etc) and the user has configured a search preference to show only archives of a specific type. If the permissions for the user are removed from all the archives of that type, EV Search will fail to find any archives of that type for which the user has permissions and will fail with an Access Denied error.

There can also be other reasons for this issue, as the error: You do not have access to archives is a very generic error. Verbose DTrace logs on respective processes will be required to understand the cause of the issue. 

Scenario 1: Issue can be fixed by changing the Enterprise Vault Admin Service DCOM Components Identity account to Vault Service Account (VSA). 

Scenario 2: OWS_UserPreferences entry can be deleted for the specific user using the users SID. However, user will loose all their Search preference data and will have to reconfigure the preferences. Any modification to the SQL databases should only be done after the proper backup of the respective databases. 

Alternatively, users can be given permissions on the type of archive they previously had permissions on and then, user can correct the search preferences post which the permissions can be removed. A test archive should be used for this.

The type of archive can be identified from DTrace by looking for the string below:

{EVS} Archive Query type:

EnterpriseVaultDirectory.dbo.ArchiveType table can be referred to know more about the archive ExtendedType and Archive Type Name.