After Microsoft Updates KB5034683 and/or KB5035849, eDiscovery Platform (eDP) fails to collect from On-Premise Microsoft Exchange Server.

book

Article ID: 100064517

calendar_today

Updated On:

Description

Error Message

From the Collection Job Report Log (From Veritas Lab):
Job ID:    1.5.6.6590578305840185425
Appliance:    eDP-App1.eDP.lab
03/24/2024 09:47:22   Starting component remoteicpjob and waiting for resources
03/24/2024 09:47:36   Job started in remoteicpjob component running at eDP-App1.eDP.lab:47024 with logfile D:\CW\V102\logs/icp-logs/icp-remoteicpjob@47024.log
03/24/2024 09:47:37   Collection job info:  TaskRunID: 0.34.6.41 Task ID: 0.27.6.41 Message: EXCHANGE job started Type: START User: 0.14.3.1:0.14.6.1 Date: Sun Mar 24 09:47:37 EDT 2024
03/24/2024 09:47:38   Auto Discovery input XML file D:\CW\V102\data\esadb\dataStore_evidence_repo_aznakqhi4m_62627345\0.34.6.41\AutoDiscoveryConfig.xml generated.
03/24/2024 09:47:42   Wrote collection job XML file D:\CW\V102\data\esadb\dataStore_evidence_repo_aznakqhi4m_62627345\0.34.6.41\ClearwellCollectionJob.xml
03/24/2024 09:47:42   Attempting to acquire lock on credentials for user edp\cwexchangecollection
03/24/2024 09:47:42   Waiting for the lease on credentials 
03/24/2024 09:47:43   Started collecting mailbox=0b03d2609c2c4a099d8cd88eb6c4e5fe-Aaliy
03/24/2024 09:47:49   Exception while collecting mailbox 0b03d2609c2c4a099d8cd88eb6c4e5fe-Aaliy. Error code: 15003, Error Message: OpenMsgStore failed.. Make sure that the source account has full access permission on 0b03d2609c2c4a099d8cd88eb6c4e5fe-Aaliy.
03/24/2024 09:47:49   Ended collecting mailbox=0b03d2609c2c4a099d8cd88eb6c4e5fe-Aaliy, Status=Failure
03/24/2024 09:47:59   Collection job info:  TaskRunID: 0.34.6.41 Task ID: 0.27.6.41 Message: Failed: [#422326] Exchange collection task failed; The source account did not have sufficient permissions on one or more mailboxes. Please check the job log for more information. Data might have been collected at: \\edp-ev\eDP Collections\0.27.6.41-20240324-094648-528 Type: FAIL User: 0.14.3.1:0.14.6.1 Date: Sun Mar 24 09:47:59 EDT 2024

 

Cause

Microsoft updates KB5034683 and KB5035849 are making some underlying changes that are negatively impacting eDP collections from Microsoft Exchange Server.  These updates came out on February 13, 2024 and March 12, 2024.

Resolution

This issue can be resolved by uninstalling and reinstalling Microsoft Office.  Use a compatible version (as per  https://www.veritas.com/content/support/en_US/doc/VeritaseDiscoveryPlatformCompatibilityCharts) or can install the free version that comes with eDP base installers.  This is not included with the maintenance releases of eDP.  If eDP 10.2 base installer is extracted to the root of the D: drive, the directory path for Microsoft Office 2019 VL. Example:
D:\Veritas_eDiscovery_Platform_Installer_10.2_Win-EN\20220824_0551_V102\packages\microsoft\Office2019PlusVLK

Steps:
1. Use Clearwell Utility, menu Option 3 to stop all eDiscovery services
2. Uninstall Microsoft Office from Control Panel>Programs and Features
3. Reinstall Microsoft Office by double clicking the installation.bat file found in the above Example folder
4. Use Clearwell Utility, menu Option 4 to start all eDiscovery services
5. Login to eDP
6. Perform a new collection from an On-Premise Microsoft Exchange server

This issue is currently under investigation by Veritas Technologies LLC. Pending the outcome of the investigation, this issue may be resolved by way of a patch or hotfix in current or future revisions of the software. However, this particular issue is not currently scheduled for any release.  If you feel this issue has a direct business impact on you and your continued use of the product, please contact your Veritas Sales representative or the Veritas Sales group to discuss these concerns.
 
Note: Customers experiencing this issue are encouraged to contact Veritas Technical Support as data is still being collected to assist in resolving this issue.

Issue/Introduction

eDiscovery Platform fails to collect from an on-premise Exchange Server after Microsoft updates KB5034683 and KB5035849 are installed.

Additional Information

JIRA: CFT-6241