first thing i would do is enable logging in the owa web.config file so you can get some detailed information on the issue

you can also have a look through this

Enterprise Vault OWA Resource Tool (EVORT)

here's a post with the same issue. try what was recommended there too.

https://www-secure.symantec.com/connect/forums/you-do-not-have-access-vault

There are various document present on how EV works with OWA 2010, Few of them are below.

How do the Enterprise Vault (EV) Toolbar options in Outlook Web Access (OWA) communicate with the EV Server to perform Archival, Retrieval and Restore actions (http://www.symantec.com/docs/TECH78412)

What are the requirements, and modifications made, in order to enable Enterprise Vault (EV) options with Outlook Web Access (OWA) 2007 or Outlook Web App (OWA) 2010 (http://www.symantec.com/docs/TECH78377)

How do the Enterprise Vault (EV) Extensions integrate and process archived items with Outlook Web Access (OWA) 2007 or Outlook Web App 2010

(http://www.symantec.com/docs/TECH78411)

OWA section of Admin guide.

Enterprise Vault 9.0 Web.config options for Microsoft Exchange 2010 Outlook Web Access (OWA) http://www.symantec.com/docs/TECH141519

Based on your error "Symantec Enterprise vault-error-you don't have access to this vault", I would ask first question on When does this error come? When you double click on shortcut then does it gives you complete email, Does this error comes when you click on shortcut link or yellow message at the top stating 'the item is currently unavailable, click here......."? You can send screenshot.

I would also suggest you to enable OWA logging on CAS server by putting following lines in web.config

<add key="EnterpriseVault_LogFolder" value="C:\Program Files\Enterprise Vault\OWA 2010\logs\"/>

<add key="EnterpriseVault_LogEnabled" value="true"/>

<add key="EnterpriseVault_LogMailboxes" value="mailbox@mydomain.local"/>

Replace 'mailbox@mydomain.local' with appropriate SMTP address of user you are doing testing with & save this file (you don't need to restart any service OR IIS) and reproduce the issue by double click on archived email. You can upload this file to forum.

Most probably EV extension are unable to restrive the emails & when you are click on yellow warning message the above error message is observered.

I would also suggest you to check if EVAnon Virtual directory exist on EV server, if not then please create by following steps (detail steps are given in TN http://www.symantec.com/docs/HOWTO38207).

1. Create a text file with name "ExchangeServers.txt" and place all CAS+NLB IP into that, save this file under EV installation directory (c:\program file 86\enterprisevault\ExchangeServer.txt)

2. Run command prompt using run as Administrator & explore to EV installation directory.

c:\program file 86\enterprisevault>cscript owauser.wsf /domain:domain /user:username  /password:password

(need to create a simple domain user a/c which should be used as anonymous a/c)

Restart all EV services and synchronize affected mailbox (open VAC \ Expand EV servers \ select task \ right click on task \ synchronization).

Try to retrieve archived email. If still have issue then please send us OWA log.

Thanks for your reply Andrew

Let me do that

Thanks Jesus for your reply . its helps to understand the work flow

Hello Jesus

Actually when i tried to retrieve the archive E-mail from OWA its connecting to

https:\\website\enterprisevault\viewmessage.asp\vaultid.... but if i see your post (9th point) you have mentioned it will connect to /EVAnon directory.

2) When i try to access archive E-mail from external its working but when i try to open internal network its not working.

Hi

When i try to access archive E-mail from external its working but when i try to open internal network its not working some times it used to work, seems interminent issue

add key="EnterpriseVault_LogFolder" value="C:\Program Files\Enterprise Vault\OWA 2010\logs\"/>

<add key="EnterpriseVault_LogEnabled" value="true"/>

<add key="EnterpriseVault_LogMailboxes" value="mailbox@mydomain.local"/>

from above keys i don't see thrid key existed on config file(web.config). Also i am going to follow the below steps to enable logging  please correct me if there is anything wrong
1) Enable the above keys on Web.config file

2) I will try to re-produce the issue

3) collect the information from IIS logs on both cas and EV servers(Archive server).

I've another query. How exactly virtual directories(Evanon and enterprisevault) reterive data from SQL and partitions.

There is syntax error in your first line, it should be like below (missing '<')

<add key="EnterpriseVault_LogFolder" value="C:\Program Files\Enterprise Vault\OWA 2010\logs\"/>

If you don't put last line then OWA logging would be enable all current archiving enabled users those are using OWA, So keeping our testing with limited with affected few user, we should use followings line.

when user's perform EV action such retrival/Restore/archive/Delete, the request from CAS server hit to EV server on /EVAnon VD.
(restoreO2k.asp for retrival, clientaction.asp for archive/restore, ...etc).

Refer TN http://www.symantec.com/docs/TECH78412 (How do the Enterprise Vault (EV) Toolbar options in Outlook Web Access (OWA) communicate with the EV Server to perform Archival, Retrieval and Restore actions?)

You can share OWA log with us.

Regards
EV-C