Exchange archive folders loosing permissions

Question

Hello,&nbsp;

a customer is having the problem that sometimes some of the exchange archives are loosing the inherited folder&nbsp;permissions from exchange. Synchronization takes place at 12 am&nbsp;and 12&nbsp;pm. From what I understand the folder hierarchy and permissions should be synchronized on an exchange mailbox archiving task Run which is scheduled between 3 and 7 am. Am I&nbsp;right here?&nbsp;

So the normal synchronization at 12 am&nbsp;and 12&nbsp;pm should not be respsonsible for the loose of the permissions.&nbsp;

We tried tracing the archiving task and it shows:

{CFolderHelper::GetFolderSettings:#1192} Synchronising folder permissions for folder [Posteingang]

....

{CSynchHelper::SynchroniseFolderPermissions:#1054} (Posteingang) - add permissions to dacl

....

CSynchHelper::APTEVD(Posteingang) - Adding SID [&lt;SID&gt;] to Security Descriptor, Grant Mask = 0x0000007F, Deny Mask = 0x0000000

....

{CSynchHelper::SynchroniseFolderPermissions:#1094} (Posteingang) - Set the dacl in the security descriptor

{CSynchHelper::SynchroniseFolderPermissions:#1106} (Posteingang) - Calling UpdateArchive as it has changed from the copy stored in the database

&nbsp;

Does this mean that the archiving tasks detects that permissions have changed?&nbsp;

If this is the case - What could have changed the permissions on the folders in the archive? Nothing has changed on exchange side.&nbsp;

Is this a common problem or does anyone know how to investigate further on this?&nbsp;

Enterprise Vault version is 11.0.1.3474

&nbsp;

Regards

Marc&nbsp;

&nbsp;

ben_watts · Accepted Answer

I would hazard a guess and say that it is connectivity being broken during the operation somewhere along the line, being that unpredictable points along that path to me.

Try hardcoding a GC into the mix on the EV Server to see if that helps.

&nbsp;

ben_watts · Answer

You are right that the perms are synced during the Archiving run but you can also sync perms on a manual Sync of the mailbox via the properties of the Task - Sync tab.

How often do the perms get stripped?

Is it all mailboxes when it does happen or just some?

Do you have a NLB in the mix anywhere? (Reason I ask is that it has been seen where NLB have helped to cause issues like this in the past at times)

&nbsp;

marcde · Answer

It's varying. Sometimes there weren't any permission problems for days and sometimes it&nbsp;was one after the other day.&nbsp;

Customer uses a single multirole exchange 2010 system without a nlb.&nbsp;

&nbsp;

marcde · Answer

I've checked the environment again. GC is not hardcoded in VAC and DS Server&nbsp;or&nbsp;Closest GC are not&nbsp;set in the registry.&nbsp;

I will give it a try and enter the GC in der Vault Admin Console.&nbsp;

marcde · Answer

Hello Ben,

I just want to give you an update on this. Since hardcoding the gc&nbsp;in vac everything is fine.

marcde · Answer

Hello Ben,&nbsp;

after some weeks without problems the error now reoccured.&nbsp;

Do you have further ideas or other troubleshooting steps?&nbsp;

&nbsp;

Forum Discussion

Exchange archive folders loosing permissions

11 Replies

Related Content

Remove Archive Permission SQL

Archive Permission

modify security permission

Public Folder archive permissions empty

VSA Exchange Permissions

Recent Discussions

EV Client Reset for MAC book

Attachments in Mails - EnterprsieVault

Enterprise Vault MPIP encrypted email decryption is not working

Defender 365 detecting malware in a CAB/DVSSP file

Broken link