Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Policy has disabled client from running when Outlook is configured to use RPC over HTTP

Updated: 21 May 2010 | 12 comments
EugeneH's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

Hi all,

I have an EV 8.0SP2 (Windows 2003 SP2) environment running OWA extensions on Exchange 2003.  Outlook client is 2007 SP2, OWA access works fine with Add-ins, RPC over HTTPS seems to work when opening an archived item within Outlook. (Prompted for EV password)

The issue I have is there are no Search vault or Archive Explorer buttons.  When viewing the EV client log I have the following error;

02/11/2009 05:45:53.846[2688]: Log file created (level 1).
02/11/2009 05:45:53.868[2688]: RPC over HTTP is enabled (flags = 47)
02/11/2009 05:45:53.891[2688]: Policy has disabled client from running when Outlook is configured to use RPC over HTTP

I have only one desktop policy and it is configured to allow access via RPC.  Oh, also the OWA server does not have any proxy in front of it. (ISA or the like)

Any ideas?

Can somebody please confirm the exact policy settings that should be set?

Thanks,

Eugene.

discussion Filed Under:

Comments

GCox's picture
01
Nov
2009
0 Votes 0
Login to vote

Try this setting in desktop

Try this setting in

desktop policy\adv tab\outlook\rpc over http restrictions = none

Symantec EV Support Engineer EMEA

EugeneH's picture
02
Nov
2009
0 Votes 0
Login to vote

Hi GCox, I have reset the

Hi GCox,

I have reset the policy and sync'd mailboxes, will see how it goes in a couple of hours.

Thks.  

EugeneH's picture
02
Nov
2009
0 Votes 0
Login to vote

Still no luck. Does anybody

Still no luck.

Does anybody know if the Outlook extensions are disabled by default?  How do I know if the client is receiving any Policy?

Thanks.

GCox's picture
02
Nov
2009
0 Votes 0
Login to vote

change you logging to max. If

change you logging to max. If you get any icons hold ctrl + shift and left click on an EV icon, this will produce the client infomation window. put logging to max and restart outlook. Do excatly the same again with ctrl+shift and the EV icon. Then open log and look for the follwoing settings

02/11/2009 21:23:43.969[5520]:     Desktop Setting: RPCOVERHTTPRESTRICTIONS
02/11/2009 21:23:43.970[5520]:     No Value

Or just slap the client log here.

You can also run the provisioning report on full and then check the name of the user you are having an issue with.

Symantec EV Support Engineer EMEA

EugeneH's picture
02
Nov
2009
0 Votes 0
Login to vote

Hi GCox, No icons in Outlook

Hi GCox,

No icons in Outlook as the extensions are disabled in RPC over HTTPS.

The user was provisioned weeks ago, OWA and "Local" network access are fine.  No errors in the provisioing task.....

Any other ideas?

The computer is a non domain member, can that make a difference?

Thanks.. 

GCox's picture
02
Nov
2009
0 Votes 0
Login to vote

1. run the prov task with

1. run the prov task with full logging, open the log and confirm the policy that the user gets. You may not get errors but that doesn't prove this user is doing what it should.

2. So if you disable rpc over http for this user icons work?

3. Client log should be in C:\Documents and Settings\Guy_Cox\Local Settings\Temp\ev_clientlog_datestamp. see if there is one that is recent, then open it.

Symantec EV Support Engineer EMEA

JesusWept's picture
02
Nov
2009
0 Votes 0
Login to vote

no need to run the

no need to run the provisioning task to see their policy
in the Vault Admin Console, expand out Targets then right click Exchange and select Display Policies Assigned to Mailboxes
then put in the user you are testing with and this will show the policy assigned to the user, as well as desktop policy if EV8 etc

Putting the logging to full through the registry won't output more than what you are seeing, the policy is set to disable by default and thats as much you will get no matter the logging level.

Make sure when you sync the user you do it by selecting the user and not just hitting All Users so that way you can tell it is definitely syncing it.
Also check Cached mode vs non cached mode and that the OST is getting the hidden message with the changes on board etc

EugeneH's picture
02
Nov
2009
0 Votes 0
Login to vote

Hi GCox, 1) Ran the

Hi GCox,

1) Ran the provisioning task with full logging, the correct desktop policy is applied to the user.  (I have only two anyway, one is a catch all for users no longer in the company, the second is the standard desktop policy.

2) I am connecting remotely, only the PC is not a domain member and has not been on the corporate network.

3) yes that's the log I'm looking at.

Any other ideas?

Thanks.

EugeneH's picture
02
Nov
2009
0 Votes 0
Login to vote

Hi JesusWept, I don't see

Hi JesusWept,

I don't see that option in the EV console?

Thanks. 

EugeneH's picture
02
Nov
2009
0 Votes 0
Login to vote

Hi JesusWept, Found the

Hi JesusWept,

Found the option you suggested.  Yes the correct polciy is assigned to the user.

Also did a re-sync on the targeted user to be sure, still no Search or Archive Explorer.

Thanks.

JesusWept's picture
03
Nov
2009
0 Votes 0
Login to vote

if you are absolutely 100%

if you are absolutely 100% sure you are changing the correct policy and the correct option then you should check Cached mode vs non cached

EugeneH's picture
04
Nov
2009
0 Votes 0
Login to vote

Hi all, Thought I would post

Hi all,

Thought I would post an update as it is now working.

Policies were all correct, the only thing I did was run a Sync as suggested against the individual not all users.  I left it for an hour then, logged back into Outlook, buttons now appear.

Thanks for the assistance.

Eugene.