Account cannot be removed (Automatically Set Permissions)
Hey All,
I have 2 similar issues one with a current active user and one deleted AD user.
I went into my Archive explorer in Outlook and noticed I had a couple of people archives attached to me and i went to go remove the and was unable to.
First user a "Active Employee"
I go into EVAULT console , go to Archives, select Exchange Mail and go into the permissions for "Active Employee" I see my name there but i cannot remove it as it shows "Automatically Set"
I've checked the users mailbox and i dont see my name listed anywhere under full mailbox access?
2nd user "Deleted Employee"
I go into EVAULT console , go to Archives, select Exchange Mail and go into the permissions for "Deleted Employee" I see my name there but i cannot remove it as it shows "Automatically Set"
This user does not have an AD account anymore, so i can't check anything.
Any clue, what i need to do?
My account is a regular domain user ( not exch admin or domain admin)
As Gabe informed, automatic permission cannot be remove from archive manually via VAC by simply deleting it. You need to simply zap the permission by running EVPM script
Open notepad, save this file with '.ini' extension and encoding must be 'unicode'. Put following content.
[Directory]
DirectoryComputerName=kvsvault
SiteName=archivesite
[ArchivePermissions]
ArchiveName=Mary Jones
Zap=True
you need to replace 'kvsvault' with your EV server's name, replace EV site and Archive name would be affected archive. You can put multiple archive or all archive, following values can be put.
ALL (permissions are applied to all journal, shared, and mailbox archives in the specified vault site)
ALL_JOURNAL (permissions are applied to all journal archives)
ALL_SHARED (permissions are applied to all shared archives)
ALL_MAILBOX (permissions are applied to all mailbox archives)
Once you do that, in order see the changes, please REFRESH the vault admin console. Next time you synchronize the correct automatic permission should come from exchange. Please also have a look at below forum link.
http://www.symantec.com/connect/forums/automatically-set-permissions