Accessing other users archives

[Wasp_man]

As part of an IT Security investigation I have granted an IT security user access to multiple users archives. I have done this in two ways. Granted permission at exchange level and synchronised the mailboxes successfully for current live users and at the archive by manually setting permissions on leavers mailboxes.

The problem is although the user has the permission granted and this has been confirmed using permission browser, on some of the accounts the archived email cannot be expanded in archive explorer. The names is listed but the mail cannot be accessed.

 When I check on the evault server I get the following in event vwr

Search request refused because the user does not have sufficient permissions to search any folder in the archive.

User: xx\xxxxx

Required Permissions: Read

Archive: xxxxxx,xxxxxxxx

Archive Id: xxx etc..

Any ideas?

[RahulG]

Are the index for the user in question marked as failed ? You can check that by going to the properties of the users archive --Index tab.

refer the following document http://www.symantec.com/business/support/index?page=content&id=TECH55999

Can the user himself  expand his archive when he open the Archive explorer from outlook.

[Wasp_man]

Hi Rahul

There are no failed indexes.

In archive explorer the IT security user can see all the names in the left hand column and can expand most of the users. There are 4 or 5 they are having issues with.

I have tested this on the vault server by granting the VSA account access to the archives and have no problem.

is there a limit to how many archives can be accessed?

[RahulG · Accepted solution]

No there is no limit as such . Just make sure there is not explicit deny permission on the archive and check if the user himself can access the archived email .

If the users is not able to expand him folder in Archive explorer it might be because of some incorrect SQL entries .you may refer http://www.symantec.com/business/support/index?page=content&id=TECH52763 if it the same issue .

[Wasp_man]

Much appreciated