MS-Exchange policy restore error (2810)

Mike_Gavrilov · ‎01-31-2020

Symptoms

Sometimes when you have mailboxes from several domains (i.e. internal and external) restore might fail with error 2810:

Jan 9, 2020 3:28:18 PM - Error bpbrm (pid=25335) from client EXCHANGE004.DOMAIN.LOCAL: ERR - unable to create object for restore: \\DAG01\Microsoft Information Store\MDB\Database\User1 [user1], rai error = 6
Jan 9, 2020 3:29:38 PM - Error bpbrm (pid=25335) from client EXCHANGE004.DOMAIN.LOCAL: ERR - unable to create object for restore: \\DAG01\Microsoft Information Store\MDB\Database\User1 [user1],\xxxxxxxxxxxxx>, rai error = 6
Jan 9, 2020 3:29:48 PM - Info tar (pid=0) done. status 0
Jan 9, 2020 3:29:48 PM - restored from image DAG01_1578491606; restore time: 0:03:05
Jan 9, 2020 3:29:48 PM - Info tar (pid=0) done. status: 5
Jan 9, 2020 3:29:48 PM - Info tar (pid=0) done. status: 5: the restore failed to recover the requested files
Jan 9, 2020 3:29:48 PM - Error bpbrm (pid=25335) client restore EXIT STATUS 5: the restore failed to recover the requested files
Jan 9, 2020 3:29:48 PM - end Restore; elapsed time 0:03:07
MS-Exchange policy restore error  (2810)

It looks like a permission problem during object creation.

Diagnosis

In BEDS log on the DAG node we get:

[39220] [0001] 09/23/2019 17:20:48 Remote: Set-ADServerSettings -ViewEntireForest is: False 
............................................................................................
[39220] [0001] 09/23/2019 17:21:09 non-terminal: The operation couldn't be performed because object 'user1' couldn't be found on 'dcs003.domain.local'.

Now it looks like there is no such mailbox.

First check:

[PS] C:\Windows\system32>Get-Mailbox user@domain.com

The operation couldn't be performed because object 'user@domain.com' couldn't be found on 'dcs001.domain.local'.
    + CategoryInfo          : NotSpecified: (:) [Get-Mailbox], ManagementObjectNotFoundException
    + FullyQualifiedErrorId : [Server=DC001,RequestId=64c8f184-7020-4e20-af71-a9e19e1c772e,TimeStamp=23.09.2019 11:39:51] [FailureCategory=Cmdlet-ManagementObjectNotFoundException] 38
   5700CF,Microsoft.Exchange.Management.RecipientTasks.GetMailbox
    + PSComputerName        : exchange003.domain.local

but next check gives us possible problem reason:

[PS] C:\Windows\system32>Get-Mailbox -DomainController dc012.domain.local user@domain.com
 
Name                      Alias                ServerName       ProhibitSendQuota
----                      -----                ----------       -----------------
user1                     user1                exchange002       10 GB (10,737,418,240 bytes)

Ignoring default scope also helps:

[PS] C:\Windows\system32>Get-Mailbox -IgnoreDefaultScope -ResultSize Unlimited  | findstr user1
user1                 user1             exchange002       10 GB (10,737,418,240 bytes)
 

[PS] C:\Windows\system32>Get-ADServerSettings
 
ConfigurationDomainController PreferredDomainControllers PreferredGlobalCatalog RecipientViewRoot ViewEntireForest
----------------------------- -------------------------- ---------------------- ----------------- ----------------
                              {}                                                domain.local       False

DAG used dag-user@domail.local user for communications.

Solution

Creating registry entry:

Key: HKEY_LOCAL_MACHINE\SOFTWARE\Veritas\NetBackup\BEDS\Engine\Exchange
Value name: PowerShellOptions
Value type: DWORD
Value: 1

on DAG nodes fixs the problem.

This option is used to tell the BEDS "monad" component to use a local PowerShell session rather than creating a remote session.

VOX