Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Cannot archive or retrieve messages

Created: 20 Dec 2011 • Updated: 21 Dec 2011 | 8 comments
This issue has been solved. See solution.

Until recently, Vault (10.0) was working well. Now, I cannot store or retrieve mail. From Outlook 2010, I get a 'A server error has occured'. In the eventlog on the EV server, I'm seeing;

 

The EnterpriseVault.DirectoryConnection object reported an error.
 
Unspecified error

Internal references:
Error 0x80004005
CDirectoryConnectionObject::ReadArchiveRetrievalTaskByMailboxDN .\DirectoryConnectionObject.cpp [lines {7326,7335,7337}], built Jul  5 21:04:12 2011

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp?...

And in the system event log:

The application-specific permission settings do not grant Remote Launch permission for the COM Server application with CLSID
{F4D3EB5B-C7C5-11D1-90DB-0000F879BE6A}
 and APPID
{95DCB63F-C982-11D1-90E0-0000F879BE6A}
 to the user IMSTT2\evault_svc SID (S-1-5-21-88408675-2906291502-1480561724-9742) from address 192.168.25.27. This security permission can be modified using the Component Services administrative tool.

 

Dtrace doesn't show anything especially helpful:

49    15:59:35.185     [7480]    (DirectoryService)    <7924>    EV:H    CDirectoryServiceObject::ReadArchiveRetrievalTaskByMailboxDN - HRXEX fn trace : Error 0x80004005, .\DirectoryServiceObject.cpp [lines {21928,21937,21940,21943,21973,21976,21979,22004}], built Jul  5 21:04:12 2011.
50    15:59:35.185     [7480]    (DirectoryService)    <7924>    EV~E    Event ID: 8391 The EnterpriseVault.DirectoryService object reported an error.| |Unspecified error| |

Can anyone suggest where I might head first? I've tried re-setting the EV Service Account.

Comments 8 CommentsJump to latest comment

JesusWept3's picture

What i would suggest is just try reinstall the binaries to get it to re-register each of the DCOM packages, DLL files etc

But to be honest though, it seems like its more to do with SQL Connectivity and permissions

Mike Bordignon's picture

Strangely, I'm able to restore/view messages via the web interface, just not via Outlook.

JesusWept3's picture

Weird, any chance to get a client trace?
Also what happens if you synchronize the user and reopen outlook and try again?

Mike Bordignon's picture

How do I get a client trace?

Synchronisation - is this done via the Mailbox Archive Task - Synchronisation?

The fact I can get the messages via the web interface suggests it's not SQL permission or connectivity. We have a (windows failover) cluster of vault servers, and the behaviour is occuring on both, so I'm really lost as to the cause.

Mike Bordignon's picture
21/12/2011 04:10:25.383[6364]: Log file created (level 1).
21/12/2011 04:10:25.384[6364]: Module path: D:\Program Files (x86)\Enterprise Vault\EVClient\Valkyrie.dll
21/12/2011 04:10:25.385[6364]: Found 0 Desktop resource DLLs
21/12/2011 04:10:25.385[6364]: No resource module was loaded and the default English resources in Valkyrie.dll will be used.
21/12/2011 04:10:25.386[6364]: RPC over HTTP is not enabled (flags = 0)
21/12/2011 04:10:25.578[6364]:
21/12/2011 04:10:25.578[6364]: Environment:
21/12/2011 04:10:25.578[6364]:     Enterprise Vault Client 10.0.0.1316.0 (HTTP)
21/12/2011 04:10:25.579[6364]:     Microsoft Windows 7 Professional Service Pack 1 (build 7601), 64-bit
21/12/2011 04:10:25.579[6364]:     Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz Intel64 Family 6 Model 42 Stepping 7;
21/12/2011 04:10:25.579[6364]:     Microsoft Outlook 2010, 32-bit (14.0.0.6109)
21/12/2011 04:10:25.579[6364]:         [EV WDS plugin disabled - 64 bit OS and 32 bit Outlook not supported]
21/12/2011 04:10:25.580[6364]:         [RPC over HTTP not enabled]
21/12/2011 04:10:25.580[6364]:     Microsoft Internet Explorer 8.0.7601.17514
21/12/2011 04:10:25.580[6364]:     Computer name: asset223.imstt2.lan
21/12/2011 04:10:25.580[6364]:
21/12/2011 04:10:25.581[6364]: Contents of Desktop Settings:
21/12/2011 04:10:25.581[6364]:     ;SERVER; = exchwlg-ha.imstt2.lan
21/12/2011 04:10:25.581[6364]:     ALLOWSCRIPTPUBLICFOLDERS = 1
21/12/2011 04:10:25.581[6364]:     ALLOWSCRIPTSHAREDFOLDERS = 1
21/12/2011 04:10:25.581[6364]:     ARCHIVEDELITEMSFOLDER = 0
21/12/2011 04:10:25.581[6364]:     ARCHIVEEXPLORERBTNVISIBLE = 1
21/12/2011 04:10:25.581[6364]:     ARCHIVEMANAGEDFOLDERS = 0
21/12/2011 04:10:25.581[6364]:     ARCHIVEONLYWITHATTACH = 0
21/12/2011 04:10:25.581[6364]:     ARCHIVESETTINGSLOCKED = 1
21/12/2011 04:10:25.582[6364]:     DEFAULTARCHIVEID = 1CD750AC92E60D342BD2063F9E9C20D041110000evault-vip
21/12/2011 04:10:25.582[6364]:     DEFAULTDOUBLECLICKVIEW = 0
21/12/2011 04:10:25.582[6364]:     DEFAULTRETENTIONCATEGORYID = 14F41CFBA9AD31F478193BF4C7252D6AA1b10000evault-vip
21/12/2011 04:10:25.582[6364]:     DEFAULTWEBAPPURL = https://evault-vip.imstt2.lan/EnterpriseVault
21/12/2011 04:10:25.582[6364]:     DELETEBTNVISIBLE = 0
21/12/2011 04:10:25.582[6364]:     DEPLOYFORMSLOCALLY = 2
21/12/2011 04:10:25.582[6364]:     EVSERVERS = evault-vip.imstt2.lan;EVAULT-STORAGE;
21/12/2011 04:10:25.583[6364]:     INACTIVITYPERIOD = 6
21/12/2011 04:10:25.583[6364]:     INACTIVITYPERIODUNITS = 2
21/12/2011 04:10:25.583[6364]:     LARGEITEMSSIZEKB = 10240
21/12/2011 04:10:25.583[6364]:     LOCALISEDRESOURCES = D:\Program Files (x86)\Enterprise Vault\EVClient\Valkyrie.dll
21/12/2011 04:10:25.583[6364]:     MAILBOXDN = /o=IMSTT2/ou=first administrative group/cn=Recipients/cn=mbordignon
21/12/2011 04:10:25.583[6364]:     MAILBOXSERVER = EXCHWLG-2
21/12/2011 04:10:25.583[6364]:     MAILBOXSTATE = 1
21/12/2011 04:10:25.583[6364]:     MAILBOXTYPE = PrimaryUser
21/12/2011 04:10:25.584[6364]:     MANAGEDFOLDERHANDLING = 2
21/12/2011 04:10:25.584[6364]:     MARKPSTS = 1
21/12/2011 04:10:25.584[6364]:     MINAGEPERIOD = 4
21/12/2011 04:10:25.584[6364]:     MINAGEPERIODUNITS = 1
21/12/2011 04:10:25.584[6364]:     OVENABLED = 2
21/12/2011 04:10:25.584[6364]:     OVMESSAGECLASSINCLUDE = IPM.Post*;IPM.Note*;IPM.Document*;
21/12/2011 04:10:25.584[6364]:     OWA2003CANCELFROMTOOLBAR = 0
21/12/2011 04:10:25.584[6364]:     OWA2003DELETEFROMCONTEXTMENU = 0
21/12/2011 04:10:25.584[6364]:     OWA2003DELETEFROMTOOLBAR = 0
21/12/2011 04:10:25.585[6364]:     OWA2003DELETEMODE = 0
21/12/2011 04:10:25.585[6364]:     OWAWEBAPPURL = https://evault-vip.imstt2.lan/EnterpriseVault
21/12/2011 04:10:25.585[6364]:     PFINACTIVITYPERIOD = 5
21/12/2011 04:10:25.585[6364]:     PFINACTIVITYPERIODUNITS = 3
21/12/2011 04:10:25.585[6364]:     PFLARGEITEMSSIZEKB = 10240
21/12/2011 04:10:25.585[6364]:     PFMINAGEPERIOD = 4
21/12/2011 04:10:25.585[6364]:     PFMINAGEPERIODUNITS = 1
21/12/2011 04:10:25.585[6364]:     PFUSELARGEITEMSSIZE = 0
21/12/2011 04:10:25.586[6364]:     POLICYENTRYID = 1CF8817131C65CA48970E33DD2E59E1991012700evault-vip
21/12/2011 04:10:25.586[6364]:     PSTIMPORTENABLED = 0
21/12/2011 04:10:25.586[6364]:     PSTPOLICYENTRYID = 153B3F9F38E63B24C889A9D616E84627C1012700evault-vip
21/12/2011 04:10:25.586[6364]:     SERVERVERSION = 10.00
21/12/2011 04:10:25.586[6364]:     SITEENTRYID = 1FBA32F6B5DF1D14BB266122CA02C5A2A1d10000evault-vip
21/12/2011 04:10:25.586[6364]:     SYSTEMMAILBOX = SMTP:ev_system_wlgmbx02@imstt2.lan
21/12/2011 04:10:25.586[6364]:     USEINACTIVITYPERIOD = 0
21/12/2011 04:10:25.587[6364]:     USELARGEITEMSSIZE = 0
21/12/2011 04:10:25.587[6364]:     USEQUOTALIMIT = 1
21/12/2011 04:10:25.587[6364]:     USERSCANDELETEITEMS = 0
21/12/2011 04:10:25.587[6364]:     USESELFINSTALLFUNCT = 1
21/12/2011 04:10:25.587[6364]:     VVREADINGPANECONTENT = 1
21/12/2011 04:10:25.587[6364]:
21/12/2011 04:10:25.587[6364]:
21/12/2011 04:10:25.599[4104]: PSTMIG:
21/12/2011 04:10:25.599[4104]: PSTMIG: PST Importer started.
21/12/2011 04:10:25.599[4104]: PSTMIG:
21/12/2011 04:10:25.601[6364]: Installed Outlook preview pane registry keys fix for Outlook V14
21/12/2011 04:10:25.601[6364]: Installed Outlook ForceFormReload registry key fix for Outlook under 14.0
21/12/2011 04:10:25.602[6364]: Set SharedFolderScript = 1
21/12/2011 04:10:25.602[6364]: Set PublicFolderScript = 1
21/12/2011 04:10:25.607[6364]: List of Enterprise Vault servers written to the IE Registry key ProxyOverride.
21/12/2011 04:10:25.607[6364]: [Offline Config] Enabled: true
21/12/2011 04:10:25.608[6364]: [Offline Config] Root Directory: C:\Users\michaelb\AppData\Local\KVS\Enterprise Vault\
21/12/2011 04:10:25.771[6364]: [Offline Config] Working Directory: C:\Users\michaelb\AppData\Local\KVS\Enterprise Vault\03EF7BED80854B4EAA65165857C2CE46\
21/12/2011 04:10:25.772[6364]: Adding folder (Deleted Items) to the list of folders the trawler will ignore
21/12/2011 04:10:25.772[6364]: Adding folder (Conflicts) to the list of folders the trawler will ignore
21/12/2011 04:10:25.772[6364]: Adding folder (Sync Issues) to the list of folders the trawler will ignore
21/12/2011 04:10:25.773[6364]: Adding folder (Local Failures) to the list of folders the trawler will ignore
21/12/2011 04:10:25.778[2820]: HDR:SCHED: LastGoodSyncTime:21/12/2011 03:22:11.000 (129689113310000000)
21/12/2011 04:10:25.778[2820]: HDR:SCHED: LastSyncTime:21/12/2011 03:22:10.000 (129689113300000000)
21/12/2011 04:10:25.778[2820]: HDR:SCHED: NextSyncTime:22/12/2011 03:22:10.000 (129689977300000000)
21/12/2011 04:10:25.783[6996]: DTCC: Successfully lowered the priority of this thread
21/12/2011 04:10:25.783[6996]: HDR:SCHED: Starting MDC Scheduler Thread
21/12/2011 04:10:25.783[6516]: DTCC: Successfully lowered the priority of this thread
21/12/2011 04:10:25.793[6996]: HDR:SCHED: MDC Scheduler starting
21/12/2011 04:10:25.794[6996]: HDR:SCHED: Attempting to add MDC to scheduler for archive: 1CD750AC92E60D342BD2063F9E9C20D041110000evault-vip
21/12/2011 04:10:25.795[6996]: HDR: Opening MDC for archive: 1CD750AC92E60D342BD2063F9E9C20D041110000evault-vip
21/12/2011 04:10:25.831[6996]: HDR: ArchiveInfo has changed for '1CD750AC92E60D342BD2063F9E9C20D041110000evault-vip' - updating
21/12/2011 04:10:25.833[6996]: HDR: Successfully opened cache for archive:1CD750AC92E60D342BD2063F9E9C20D041110000evault-vip
21/12/2011 04:10:25.847[6996]: CONTENT:BUILD: GetWebAppURL Returned:https://evault-vip.imstt2.lan/EnterpriseVault
21/12/2011 04:10:25.847[6996]: CONTENT:BUILD: ActualWebAppURL Is:https://evault-vip.imstt2.lan/EnterpriseVault
21/12/2011 04:10:25.847[6996]: CONTENT:BUILD: VEID:1CD750AC92E60D342BD2063F9E9C20D041110000evault-vip, WebAppURL:https://evault-vip.imstt2.lan/EnterpriseVault
21/12/2011 04:10:25.848[6996]: HDR:SYNC:ARC: Performing Cleanup on archive: 1CD750AC92E60D342BD2063F9E9C20D041110000evault-vip
21/12/2011 04:10:25.851[6996]: HDR:SYNC:ARC: Cleanup not required: Already clean
21/12/2011 04:10:25.852[6996]: HDR:PST: CacheState set to: 1
21/12/2011 04:10:25.852[6996]: HDR:SYNC:ARC: Finished Cleanup on archive: 1CD750AC92E60D342BD2063F9E9C20D041110000evault-vip
21/12/2011 04:10:25.852[6996]: HDR:SCHED: LastSyncTime:21/12/2011 03:22:10.000 (129689113300000000)
21/12/2011 04:10:25.852[6996]: HDR:SCHED: NextSyncTime:22/12/2011 03:22:10.000 (129689977300000000)
21/12/2011 04:10:25.853[6996]: HDR:SCHED: Seconds to next sync:83504
21/12/2011 04:10:32.531[6364]: User initiated manual archive action
21/12/2011 04:10:32.660[2820]: CONTENT:STORE: [Offline Config] Maximum Store Size (MB): 5120
21/12/2011 04:10:32.890[5752]: HTTP request error: 158 (400)
21/12/2011 04:10:32.890[5752]: Connect failed: 0x80004005
21/12/2011 04:10:45.803[5304]:
21/12/2011 04:11:01.194[6996]: DTCC: Suspended
21/12/2011 04:11:01.194[6516]: DTCC: Suspended
21/12/2011 04:11:05.666[6364]: User initiated manual archive action
21/12/2011 04:11:05.849[4088]: HTTP request error: 158 (400)
21/12/2011 04:11:05.850[4088]: Connect failed: 0x80004005
JesusWept3's picture

Check this thread out
Basically you're getting a 400 bad request error from his
Guy resolved by recreating the archive task

https://www-secure.symantec.com/connect/forums/ent...

Mike Bordignon's picture

Looks like a strange quirk of EV. I tried enabling another mailbox (after finding errors saying that a mailbox archive tasks for one of the servers in our DAG wasn't archiving any mail) and found that the mailbox I'd be using (which I was getting the 400's on) appeared to be un-enabled. Enabled the mailbox (again) and now I can store mail again.

Go figure!

SOLUTION