Exchange 2010 GRT restore of individual emails fails with error "The resource credentials for the restore job were unable to create a role assignment for ApplicationImpersonation"

Article:TECH199611  |  Created: 2012-11-12  |  Updated: 2012-11-12  |  Article URL http://www.symantec.com/docs/TECH199611
NOTE: If you are experiencing this particular known issue, we recommend that you Subscribe to receive email notification each time this article is updated. Subscribers will be the first to learn about any releases, status changes, workarounds or decisions made.
Article Type
Technical Solution


Issue



Granular Recovery Technology (GRT) based restore of Exchange 2010 data from Remote agent (RAWS) backup set fails with the error mentioned below:


Error



Final error: 0xe0000389 - The resource credentials for the restore job were unable to create a role assignment for ApplicationImpersonation. Review the credentials to ensure that it has the rights that are required for ApplicationImpersonation.
Final error category: Resource Errors

For additional information regarding this error refer to link V-79-57344-905

Beremote log from Client Access Server shows the following errors:

[10164]  [fsys\shared]        - EnsureEwsPermissions returned e00003c3
[10164]  [fsys\mb2]            - FATAL: failed to aquire EWS ApplicationImpersonation rights
[10164]  [fsys\shared]        - GetMailboxInfo returned e00003c3 ->
[10164]  [fsys\shared]        - GetMailboxInfo returned e00003c3 ->
[10164]  [fsys\mb2]            - EWS::GetMailboxTable(/o=/ou=/cn=servers/cn=<DAG Name> <BESA account> [<BESA ACCOUNT>]) Failed ... 0x80131600
[10164]  [ndmp\loops]         - Error: CreateObj returns extended error e0000389


Environment



BE 2012 and Exchange 2010 having software NLB configured for Client Access Server(s)


Solution



Workaround:
Restore the database to Recovery Database and extract individual emails required.

 

Symantec Corporation has acknowledged that the above-mentioned issue is present in the current version(s) of the product(s) mentioned at the end of this article. Symantec Corporation is committed to product quality and satisfied customers. This issue is currently under investigation by Symantec Corporation. Pending the outcome of the investigation, this issue may be resolved by way of a patch or hotfix in current or future revisions of the software. However, this particular issue is not currently scheduled for any release.  If you feel this issue has a direct business impact for you and your continued use of the product, please contact your Symantec Sales representative or the Symantec Sales group to discuss these concerns.  For information on how to contact Symantec Sales, please see  http://www.symantec.com Please be sure to refer back to this document periodically as any changes to the status of the issue will be reflected here.

NOTE:
Customers experiencing this issue are encouraged to contact Symantec Technical Support as data is still being collected to assist in resolving this issue.


Supplemental Materials

SourceETrack
Value2993972
Description

EXCH: Exchange 2010 GRT restore of individual emails fails with error “The resource credentials for the restore job were unable to create a role assignment for ApplicationImpersonation”


SourceUMI
ValueV-79-57344-905
Description

The resource credentials for the restore job were unable to create a role assignment for ApplicationImpersonation. Review the credentials to ensure that it has the rights that are required for ApplicationImpersonation.


SourceError Code
Value0xe0000389
Description

The resource credentials for the restore job were unable to create a role assignment for ApplicationImpersonation. Review the credentials to ensure that it has the rights that are required for ApplicationImpersonation.



Article URL http://www.symantec.com/docs/TECH199611


Terms of use for this information are found in Legal Notices