Strange issue with permissions

When you open their archive do they still have the Automatic inherited permissions from their mailbox still in place on their archive?

If you open PermissionBrowser.exe what permissions are shown in here?

Taking my archive as an example..There are a couple of enteries for my SID in permissions broswer.

When I open the Archive in EV console and check the permissions, yes I do have the automatic inherited permissions.

 Header:
      AceType: ACCESS_ALLOWED_ACE_TYPE
      AceFlags: CONTAINER_INHERIT_ACE
    Mask: 0xF07FF
      DV_DS_HIDE_FOLDER
      DV_DS_CONTROL_ARCHIVE
      DV_DS_DELETE_ARCHIVE
      DV_DS_SEARCH_ARCHIVE
      DV_DS_CONTROL_FOLDER
      DV_DS_DELETE_FOLDER
      DV_DS_ADD_FOLDER
      DV_DS_READ_FOLDER
      DV_DS_DELETE_ITEM
      DV_DS_ADD_ITEM
      DV_DS_READ_ITEM
    Sid:
      SID: S-1-5-21-1844237615-308236825-682003330-3631
      Name: cstyles
      DomainName: PANINT

 Header:
      AceType: ACCESS_ALLOWED_ACE_TYPE
      AceFlags:
    Mask: 0x4FF
      DV_DS_HIDE_FOLDER
      DV_DS_SEARCH_ARCHIVE
      DV_DS_CONTROL_FOLDER
      DV_DS_DELETE_FOLDER
      DV_DS_ADD_FOLDER
      DV_DS_READ_FOLDER
      DV_DS_DELETE_ITEM
      DV_DS_ADD_ITEM
      DV_DS_READ_ITEM
    Sid:
      SID: S-1-5-21-1844237615-308236825-682003330-3631
      Name: cstyles
      DomainName: PANINT

that looks OK...what i would suggest is enable client trace and dtrace at the same time and try and open an archived message and post the traces.

dtrace the retrieval task...you can enable this via the console using the advanced features view.

http://www.symantec.com/business/support/index?page=content&id=TECH38122

the client and trace will hopefully show more indepth details.

EVLog from the client.. You can see the item URL, If I paste this in the browser I get prompted for my credentials to the FQDN of the server.. not vaultserver1. My Credentials do not work but the vault service ones do. I'll do a dtrace.

11/07/2012 12:21:37.579[2156]: CDesktop::FinalConstruct: 0x0
11/07/2012 12:21:37.579[2156]: DesktopCommonConfig::LogonToMAPI: 0x0
11/07/2012 12:21:37.579[2156]: ~DesktopCommonConfig::LogonToMAPI: 0x0
11/07/2012 12:21:37.579[2156]: Connections now on Desktop object: 2
11/07/2012 12:21:37.580[2156]: ~CDesktop::FinalConstruct: 0x0
11/07/2012 12:21:37.580[2156]: CDesktop::get_Setting: 0x0
11/07/2012 12:21:37.580[2156]: DesktopCommonConfig::GetSetting: 0x0
11/07/2012 12:21:37.580[2156]: DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.581[2156]: ~DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.581[2156]:     Desktop Setting: ForwardOriginalItem
11/07/2012 12:21:37.581[2156]:     No Value
11/07/2012 12:21:37.581[2156]: ~DesktopCommonConfig::GetSetting: 0x1
11/07/2012 12:21:37.581[2156]: ~CDesktop::get_Setting: 0x1
11/07/2012 12:21:37.582[2156]: CDesktop::get_Setting: 0x0
11/07/2012 12:21:37.582[2156]: DesktopCommonConfig::GetSetting: 0x0
11/07/2012 12:21:37.582[2156]: DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.582[2156]: ~DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.582[2156]:     Desktop Setting: ReplyToOriginalItem
11/07/2012 12:21:37.582[2156]:     No Value
11/07/2012 12:21:37.582[2156]: ~DesktopCommonConfig::GetSetting: 0x1
11/07/2012 12:21:37.583[2156]: ~CDesktop::get_Setting: 0x1
11/07/2012 12:21:37.583[2156]: CDesktop::OpenStore: 0x0
11/07/2012 12:21:37.584[2156]: DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.584[2156]: ~DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.584[2156]: ~CDesktop::OpenStore: 0x0
11/07/2012 12:21:37.585[2156]: CStore::OpenShortcut: 0x0
11/07/2012 12:21:37.603[2156]: CShortcutItem::ReadItemProps: 0x0
11/07/2012 12:21:37.606[2156]: ~CShortcutItem::ReadItemProps: 0x0
11/07/2012 12:21:37.606[2156]: ~CStore::OpenShortcut: 0x0
11/07/2012 12:21:37.606[2156]: CDesktop::get_Setting: 0x0
11/07/2012 12:21:37.606[2156]: DesktopCommonConfig::GetSetting: 0x0
11/07/2012 12:21:37.606[2156]: DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.606[2156]: ~DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.607[2156]:     Desktop Setting: DefaultDoubleClickView
11/07/2012 12:21:37.607[2156]:     Value: 0
11/07/2012 12:21:37.607[2156]: ~DesktopCommonConfig::GetSetting: 0x0
11/07/2012 12:21:37.607[2156]: ~CDesktop::get_Setting: 0x0
11/07/2012 12:21:37.608[2156]: CShortcutItem::Display: 0x0
11/07/2012 12:21:37.608[2156]: CDesktop::CheckIfClientDisabled: 0x0
11/07/2012 12:21:37.608[2156]: DesktopCommonConfig::GetConfigValue: 0x0
11/07/2012 12:21:37.608[2156]: DesktopCommonConfig::GetSetting: 0x0
11/07/2012 12:21:37.608[2156]: DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.608[2156]: ~DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.609[2156]:     Desktop Setting: RESTRICTPOLICYLOOKUP
11/07/2012 12:21:37.609[2156]:     No Value
11/07/2012 12:21:37.609[2156]: ~DesktopCommonConfig::GetSetting: 0x1
11/07/2012 12:21:37.609[2156]: DesktopCommonConfig::GetSetting: 0x0
11/07/2012 12:21:37.609[2156]: DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.609[2156]: ~DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.610[2156]:     Desktop Setting: AUTOREENABLE
11/07/2012 12:21:37.610[2156]:     Value: 2
11/07/2012 12:21:37.610[2156]: ~DesktopCommonConfig::GetSetting: 0x0
11/07/2012 12:21:37.610[2156]:  AUTOREENABLE = 2 [Desktop Setting]
11/07/2012 12:21:37.610[2156]: ~DesktopCommonConfig::GetConfigValue: 0x0
11/07/2012 12:21:37.610[2156]: CDesktopUI::GetOutlookWindowHandle
11/07/2012 12:21:37.611[2156]: ~CDesktopUI::GetOutlookWindowHandle
11/07/2012 12:21:37.611[2156]: Verifying that the EV client has not been disabled by Outlook...
11/07/2012 12:21:37.611[2156]:     ...EV client is correctly enabled and registered
11/07/2012 12:21:37.611[2156]: ~CDesktop::CheckIfClientDisabled: 0x0
11/07/2012 12:21:37.611[2156]: DesktopCommon::GetWebAppURL: 0x0
11/07/2012 12:21:37.612[2156]: DesktopCommonConfig::GetSetting: 0x0
11/07/2012 12:21:37.612[2156]: DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.612[2156]: ~DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.612[2156]:     Desktop Setting: WebAppURL[vault]
11/07/2012 12:21:37.612[2156]:     No Value
11/07/2012 12:21:37.612[2156]: ~DesktopCommonConfig::GetSetting: 0x1
11/07/2012 12:21:37.613[2156]: DesktopCommon::GetWebAppURL: 0x0
11/07/2012 12:21:37.613[2156]: DesktopCommon::GetWebAppURLEx: 0x0
11/07/2012 12:21:37.613[2156]: ~DesktopCommon::GetWebAppURLEx: 0x0
11/07/2012 12:21:37.613[2156]: ~DesktopCommon::GetWebAppURL: 0x0
11/07/2012 12:21:37.613[2156]: ~DesktopCommon::GetWebAppURL: 0x0
11/07/2012 12:21:37.613[2156]: DesktopCommon::GetClientVersionParam: 0x0
11/07/2012 12:21:37.613[2156]: DesktopCommon::GetClientDLLVersion: 0x0
11/07/2012 12:21:37.618[2156]: ~DesktopCommon::GetClientDLLVersion: 0x0
11/07/2012 12:21:37.618[2156]: ~DesktopCommon::GetClientVersionParam: 0x0
11/07/2012 12:21:37.618[2156]: CDesktop::DCCThreadsStarted: 0x0
11/07/2012 12:21:37.618[2156]: ~CDesktop::DCCThreadsStarted: 0x0
11/07/2012 12:21:37.618[2156]: CDesktop::get_Setting: 0x0
11/07/2012 12:21:37.618[2156]: DesktopCommonConfig::GetSetting: 0x0
11/07/2012 12:21:37.619[2156]: DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.619[2156]: ~DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.619[2156]:     Desktop Setting: DefaultDoubleClickView
11/07/2012 12:21:37.619[2156]:     Value: 0
11/07/2012 12:21:37.619[2156]: ~DesktopCommonConfig::GetSetting: 0x0
11/07/2012 12:21:37.619[2156]: ~CDesktop::get_Setting: 0x0
11/07/2012 12:21:37.620[2156]: Downloading from: http://vaultserver1.panint.com/EnterpriseVault/download.asp?VaultID=1A40C12997874F84085E0A563F5024FA01110000vault&SaveSetID=201110067937443~201104051631150000~Z~E086E26BBFE5C73779D6867117300D61&FormatType=Unicode&Client=EV9.0.1.1073-Outlook14&Format=MUD&AttachmentID=0
11/07/2012 12:21:37.620[2156]: CDownloadSTA::RequestCallback
11/07/2012 12:21:37.620[2156]: ::CInternetReconnect
11/07/2012 12:21:37.621[2156]: ::CInternetReconnect - refCount : 1
11/07/2012 12:21:37.621[2156]: ~::CInternetReconnect
11/07/2012 12:21:37.621[2156]: CDownloadBytesImpl::CDownloadBytesImpl
11/07/2012 12:21:37.621[2156]: ~CDownloadBytesImpl::CDownloadBytesImpl
11/07/2012 12:21:37.621[2156]: CDownloadBytes::CDownloadBytes
11/07/2012 12:21:37.621[2156]: ~CDownloadBytes::CDownloadBytes
11/07/2012 12:21:37.621[2156]: CDownloadSTA::CDownloadSTA
11/07/2012 12:21:37.622[2156]: ~CDownloadSTA::CDownloadSTA
11/07/2012 12:21:37.622[2156]: CCOMCallback<struct IShortcutItem,&struct _GUID const IID_IShortcutItem,&struct _GUID const CLSID_ShortcutItem>::CreateApartment
11/07/2012 12:21:37.623[2156]: CThreadManager::Add thread THID=7780
11/07/2012 12:21:37.623[7780]: CCOMCallback<struct IShortcutItem,&struct _GUID const IID_IShortcutItem,&struct _GUID const CLSID_ShortcutItem>::_Apartment
11/07/2012 12:21:37.624[7780]: CDownloadSTA::MakeCallback
11/07/2012 12:21:37.625[7780]: CDownloadSTA::MakeCallbackImpl: 0x0
11/07/2012 12:21:37.625[2156]: ~CCOMCallback<struct IShortcutItem,&struct _GUID const IID_IShortcutItem,&struct _GUID const CLSID_ShortcutItem>::CreateApartment
11/07/2012 12:21:37.625[2156]: ~CDownloadSTA::RequestCallback
11/07/2012 12:21:37.625[2156]: ~CShortcutItem::Display: 0x0
11/07/2012 12:21:37.639[2156]: CoClassIDispatchBase::Invoke: 0x0
11/07/2012 12:21:37.640[2156]: ~CoClassIDispatchBase::Invoke: 0x80020003
11/07/2012 12:21:37.642[7780]: Downloading: http://vaultserver1.panint.com/EnterpriseVault/download.asp?VaultID=1A40C12997874F84085E0A563F5024FA01110000vault&SaveSetID=201110067937443~201104051631150000~Z~E086E26BBFE5C73779D6867117300D61&FormatType=Unicode&Client=EV9.0.1.1073-Outlook14&Format=MUD&AttachmentID=0
11/07/2012 12:21:37.642[7780]: CDownloadSTA::DoDownload: 0x0
11/07/2012 12:21:37.642[7780]: DesktopTls::TlsData::FindDownloadBytes
11/07/2012 12:21:37.643[7780]: ~DesktopTls::TlsData::FindDownloadBytes
11/07/2012 12:21:37.643[7780]: DesktopTls::TlsData::PushDownloadBytes
11/07/2012 12:21:37.643[7780]: ~DesktopTls::TlsData::PushDownloadBytes
11/07/2012 12:21:37.643[7780]: CDownloadBytes::Begin
11/07/2012 12:21:37.643[7780]: CDownloadBytesImpl::Begin
11/07/2012 12:21:37.644[7780]: CThreadManager::Add thread THID=6604
11/07/2012 12:21:37.644[7780]: ~CDownloadBytesImpl::Begin
11/07/2012 12:21:37.644[7780]: ~CDownloadBytes::Begin
11/07/2012 12:21:37.644[7780]: DesktopCommonConfig::GetConfigValue: 0x0
11/07/2012 12:21:37.644[7780]: DesktopCommonConfig::GetSetting: 0x0
11/07/2012 12:21:37.644[7780]: DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.644[6604]: CDownloadBytesImpl::FetchDataInThread
11/07/2012 12:21:37.645[6604]: CDownloadBytesImpl::ThreadMain
11/07/2012 12:21:37.645[6604]: CDownloadBytesImpl::InitCritSect
11/07/2012 12:21:37.645[6604]: ~CDownloadBytesImpl::InitCritSect
11/07/2012 12:21:37.645[6604]: CDownloadBytesImpl::OutlookExiting
11/07/2012 12:21:37.645[6604]: ~CDownloadBytesImpl::OutlookExiting
11/07/2012 12:21:37.645[6604]: CDownloadBytesImpl::Connect: 0x0
11/07/2012 12:21:37.645[7780]: ~DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.646[7780]:     Desktop Setting: RESTRICTPOLICYLOOKUP
11/07/2012 12:21:37.646[7780]:     No Value
11/07/2012 12:21:37.646[7780]: ~DesktopCommonConfig::GetSetting: 0x1
11/07/2012 12:21:37.646[7780]: DesktopCommonConfig::GetSetting: 0x0
11/07/2012 12:21:37.647[7780]: DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.647[7780]: ~DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:37.647[7780]:     Desktop Setting: DOWNLOADSHORTCUTHIDEPROGRESS
11/07/2012 12:21:37.647[7780]:     No Value
11/07/2012 12:21:37.647[7780]: ~DesktopCommonConfig::GetSetting: 0x1
11/07/2012 12:21:37.647[7780]:  DOWNLOADSHORTCUTHIDEPROGRESS = 1 [default]
11/07/2012 12:21:37.648[7780]: ~DesktopCommonConfig::GetConfigValue: 0x1
11/07/2012 12:21:37.648[7780]: Download progress dialog delay set to 1 seconds.
11/07/2012 12:21:37.648[7780]: CDownloadBytes::WaitComplete
11/07/2012 12:21:37.648[7780]: CDownloadBytesImpl::WaitComplete
11/07/2012 12:21:37.647[6604]: DesktopCommon::GetEVUserAgent: 0x0
11/07/2012 12:21:37.648[6604]: DesktopCommon::GetClientDLLVersion: 0x0
11/07/2012 12:21:37.653[6604]: ~DesktopCommon::GetClientDLLVersion: 0x0
11/07/2012 12:21:37.653[6604]: ~DesktopCommon::GetEVUserAgent: 0x0
11/07/2012 12:21:37.654[6604]: CInternetHelper::OpenURL
11/07/2012 12:21:37.655[6604]: DesktopCommon::GetIELanguageHeader: 0x0
11/07/2012 12:21:37.656[6604]: sHeader = [Accept-Language:en]
11/07/2012 12:21:37.656[6604]: ~DesktopCommon::GetIELanguageHeader: 0x0
11/07/2012 12:21:38.120[2156]: CoClassIDispatchBase::Invoke: 0x0
11/07/2012 12:21:38.120[2156]: ~CoClassIDispatchBase::Invoke: 0x80020003
11/07/2012 12:21:38.647[7780]: ~CDownloadBytesImpl::WaitComplete
11/07/2012 12:21:38.648[7780]: ~CDownloadBytes::WaitComplete
11/07/2012 12:21:38.648[7780]: DesktopCommon::IsCustomLoginMessageRequired: 0x0
11/07/2012 12:21:38.648[7780]: DesktopCommonConfig::GetSetting: 0x0
11/07/2012 12:21:38.648[7780]: DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:38.649[7780]: ~DesktopCommonConfig::LoadSettingsFromHiddenMessage: 0x0
11/07/2012 12:21:38.649[7780]:     Desktop Setting: CUSTOMLOGINMESSAGE
11/07/2012 12:21:38.649[7780]:     No Value
11/07/2012 12:21:38.650[7780]: ~DesktopCommonConfig::GetSetting: 0x1
11/07/2012 12:21:38.650[7780]: ~DesktopCommon::IsCustomLoginMessageRequired: 0x0
11/07/2012 12:21:38.667[7780]: CDownloadSTA::DialogMsg: WM_INITDIALOG
11/07/2012 12:21:38.667[7780]: CDownloadBytes::SetDlg
11/07/2012 12:21:38.668[7780]: CDownloadBytesImpl::SetDlg
11/07/2012 12:21:38.669[7780]: ~CDownloadBytesImpl::SetDlg
11/07/2012 12:21:38.670[7780]: ~CDownloadBytes::SetDlg
11/07/2012 12:21:38.670[7780]: ~CDownloadSTA::DialogMsg: WM_INITDIALOG

DTrace :-(

EV:L CVaultStoreDb::GetConnectionString() connection string: Provider=SQLOLEDB;Server=PANSQL-CL01;Database=EVMailboxVaultStore;Trusted_Connection=Yes
906 13:34:44.311  [1996] (StorageOnlineOpns) <2004> EV:L CVaultStoreDB::GetSavesetProperties Information: Total 1 SISParts found for saveset having TID:'41438FBC-FE56-EA85-7143-5D603A2F3B01'.
907 13:34:44.311  [1996] (StorageOnlineOpns) <2004> EV:L CVaultStoreDB::GetSavesetProperties Information: Total 1 SISParts added to output vector for saveset having TID:'41438FBC-FE56-EA85-7143-5D603A2F3B01'.
908 13:34:44.311  [1996] (StorageOnlineOpns) <2004> EV:M CStore::LocateSaveset(2)|Selector:201202169377225~201108150705130000~Z~41438FBCFE56EA8571435D603A2F3B01 HRESULT:Success  [0] Found:TRUE
909 13:34:44.311  [1996] (StorageOnlineOpns) <2004> EV:M CStore::LocateSaveset(2) (Exit) |Success  [0] |
910 13:34:44.311  [1996] (StorageOnlineOpns) <2004> EV:M CStore::LocateSaveset(1)|Selector:201202169377225~201108150705130000~Z~41438FBCFE56EA8571435D603A2F3B01 HRESULT:Success  [0] Found:TRUE
911 13:34:44.311  [1996] (StorageOnlineOpns) <2004> EV:M CStore::LocateSaveset(1)| Saveset Descriptor:1A40C12997874F84085E0A563F5024FA01110000vault+201202169377225~201108150705130000~Z~41438FBCFE56EA8571435D603A2F3B01+7++0+2+40955.31041666666700000+34+140411++361+361+20418622+1?1+119+1543526528+0+41438FBCFE56EA8571435D603A2F3B01+7+2+40955.31041666666700000+0+0+++0+0+0+1+1
912 13:34:44.311  [1996] (StorageOnlineOpns) <2004> EV:M CStore::LocateSaveset(1) (Exit) |Success  [0] |
913 13:34:44.311  [1996] (StorageOnlineOpns) <2004> EV:M CStoreAccessor::LocateItem (Exit) |Success  [0] |
914 13:34:44.311  [1996] (StorageOnlineOpns) <2004> EV:L CStorageOnline::CheckCallersVaultAccess (Entry) |
915 13:34:44.311  [1996] (StorageOnlineOpns) <2004> EV:L CClientIdentity::CheckAccess (Entry) |
916 13:34:44.311  [1996] (StorageOnlineOpns) <2004> EV:L CClientIdentity::DetermineIdentity (Entry) |
917 13:34:44.311  [1996] (StorageOnlineOpns) <2004> EV:L CClientIdentity::DetermineIdentity|Timing check
918 13:34:44.311  [1996] (StorageOnlineOpns) <2004> EV:M VaultCoCreateInstanceEx: IsLocalMachineExtendedCheck returned true for server [172.30.1.187]  as the IP Address matched that of the local machine
919 13:34:44.326  [1996] (StorageOnlineOpns) <2004> EV:L ClientAuthHelperImpl::ValAuthString AuthToken:172.30.1.187 +leM***** ==> User:PANINT\cstyles (hr=Success  [0])
920 13:34:44.326  [1996] (StorageOnlineOpns) <2004> EV:L CAuthHelper::Reset Cancel registration? true CancelId: 0
921 13:34:44.326  [1996] (StorageOnlineOpns) <2004> EV:M CClientIdentity::DetermineIdentity (Exit) |Success  [0] |
922 13:34:44.326  [1996] (StorageOnlineOpns) <2004> EV:L CClientIdentity::CheckAccess(vSIDS) (Entry) |
923 13:34:44.326  [1996] (StorageOnlineOpns) <2004> EV:M CClientIdentity::IsCallerInSidList - Found caller SID in SID list - caller:PANINT\cstyles, SID:S-1-5-21-1844237615-308236825-682003330-3631 - returning true
924 13:34:44.326  [1996] (StorageOnlineOpns) <2004> EV:L CClientIdentity::CheckAccess(vSIDS)|Check details|Caller: PANINT\cstyles|VaultID: 1A40C12997874F84085E0A563F5024FA01110000vault|Permission: 1
926 13:34:44.326  [1996] (StorageOnlineOpns) <2004> EV:M CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
927 13:34:44.326  [1996] (StorageOnlineOpns) <2004> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
929 13:34:44.326  [1996] (StorageOnlineOpns) <2004> EV:M CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
930 13:34:44.342  [1996] (StorageOnlineOpns) <2004> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
932 13:34:44.342  [1996] (StorageOnlineOpns) <2004> EV:M CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
933 13:34:44.357  [1996] (StorageOnlineOpns) <2004> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
934 13:34:44.357  [1996] (StorageOnlineOpns) <2004> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list for type ArchiveView : RootIdentity,VaultStoreEntryId,ArchiveName,ArchiveDescription,ArchiveAdminNote,ArchiveStatus,ArchiveLimitSize,ArchiveLimitOperation,ArchiveLimitStatus,ArchiveNotifyOperation,ArchiveNotifySize,DeleteExpiredItems,DeleteProtected,Structured,ArchiveFull,IndexingLevel,LocaleId,SID,VaultEntryId,Type,Hidden,ContainerRootIdentity,OwningTrusteeIdentity,AutoSecurityDesc,ManualSecurityDesc,IndexItemsMode,ConvertedContentMode,IgnoreIndexingPolicy,RetainArchiveHistory,HasHistory
935 13:34:44.357  [1996] (StorageOnlineOpns) <2004> EV~W Event ID: 6940 Client request refused due to insufficient privileges, user PANINT\cstyles attempted to access the Archive: |Archive name: Chris Styles |Vault Id: 1A40C12997874F84085E0A563F5024FA01110000vault but does not have permission(s) (Read). |A frequent cause of this Warning is a user attempting an operation on a forwarded, moved, or copied shortcut to a Vault for which they do not have the required permission(s). |
936 13:34:44.357  [1996] (StorageOnlineOpns) <2004> EV:M CClientIdentity::CheckAccess - User PANINT\cstyles does not have permissions (Read) to Archive [Name = Chris Styles VaultId = 1A40C12997874F84085E0A563F5024FA01110000vault]
937 13:34:44.357  [1996] (StorageOnlineOpns) <2004> EV:M AuditInterface::FAILED_AUDIT (Category) called.
938 13:34:44.357  [1996] (StorageOnlineOpns) <2004> EV:M AuditInterface::CreateAuditRecord About to call Audit interface routine
939 13:34:44.357  [1996] (StorageOnlineOpns) <2004> EV:M CEVAudit::WillPerformAudit Determine whether to audit or not.
940 13:34:44.357  [1996] (StorageOnlineOpns) <2004> EV:M CEVAudit::WillPerformAudit Auditing is off, current status '1'
941 13:34:44.357  [1996] (StorageOnlineOpns) <2004> EV:M CClientIdentity::CheckAccess(vSIDS) (Exit) |Access is denied.  [0x80070005] |
942 13:34:44.357  [1996] (StorageOnlineOpns) <2004> EV:M CClientIdentity::CheckAccess (Exit) |Access denied      [0xc0041801] |
943 13:34:44.357  [1996] (StorageOnlineOpns) <2004> EV:M CStorageOnline::CheckCallersVaultAccess (Exit) |Access denied      [0xc0041801] |
944 13:34:44.357  [1996] (StorageOnlineOpns) <2004> EV:L CStore::~CStore (Entry) |
945 13:34:44.357  [1996] (StorageOnlineOpns) <2004> EV:L CStore::CloseVault (Entry) |
946 13:34:44.373  [1996] (StorageOnlineOpns) <2004> EV:L CVault::~CVault (Entry) |
947 13:34:44.373  [1996] (StorageOnlineOpns) <2004> EV:M CVault::~CVault (Exit) |Exception occurred.  [0x80020009] |
948 13:34:44.373  [1996] (StorageOnlineOpns) <2004> EV:L CExclusiveUseThread::EndExclusiveUse (Entry) |
949 13:34:44.373  [1996] (StorageOnlineOpns) <2004> EV:M CExclusiveUseThread::EndExclusiveUse (Exit) |Exception occurred.  [0x80020009] |
950 13:34:44.373  [1996] (StorageOnlineOpns) <2004> EV:M CStore::CloseVault (Exit) |Exception occurred.  [0x80020009] |
951 13:34:44.373  [1996] (StorageOnlineOpns) <2004> EV:L CStore::CloseIndexerNotifier (Entry) |
952 13:34:44.373  [1996] (StorageOnlineOpns) <2004> EV:M CStore::CloseIndexerNotifier (Exit) |Exception occurred.  [0x80020009] |
953 13:34:44.373  [1996] (StorageOnlineOpns) <2004> EV:L CStore::CloseDatabase (Entry) |

Users having issues appear to be in domain admins.. Where does it inherit from?