05-22-2013 01:45 AM
Hi there,
a customer have a problem that since a few weeks new items in public folder will not be archived. When I run the archiving task in report mode it shows me no items to archive. How can I troubleshoot this issue? When I start Outlook with EV System Mailbox I cant see the Public Folders (permissions were not changed so I dont think there are any folderpermissions necessary or?)
Kind regards
Patrick
05-22-2013 02:40 AM
So what's the policy say in terms of age etc?
05-22-2013 03:26 AM
Hi Rob,
Policy was not changed, archiving after 0 days (= immediatly).
Thanks
05-22-2013 03:31 AM
I would ...
a/ Check the task isn't configured to be in report-mode
b/ grab and post a screenshot of that policy... and include the messages class tab (remember that PF's often have different message classes in them, because you can POST and you can EMAIL) them
c/ Do a dtrace of the PF task
05-22-2013 06:13 AM
Do you have multiple policies? You said report mode says no items to archive, does it mean your task is able to scan the PF for new items? But not considering them for archiving for now? You can confirm this by using dtrace log.
Any events logged on EV Server for PF task run?
05-22-2013 07:26 AM
Hi,
@Rob: Task is not running in report-mode and I already checked the message classes, seems to be ok. Screenshots are requested and I will upload them when the customer sends them to me. How can I dtrace the PF task? I dont see any PF category when creating a new trace, just mailbox archiving categories or what category should i choose?
@Advisor: There is only one PF Archiving Policy. Task is able to scan, no errors in eventlog that the scan is not possible, I dont get any events about PF Archiving except of pf-task start. After starting the task it is completed instantly.
Thanks for you help
Patrick
05-22-2013 07:37 AM
> It's called PublicFolderTask
(in dtrace)
05-22-2013 07:43 AM
Hi,
I don't have a category like PublicFolderTask (see attached screenshot).
05-22-2013 07:45 AM
Run DTrace from the command prompt instead.
05-23-2013 12:26 AM
Ah, nice tipp :)
Customer will run a dtrace and send it to me afterwards.
Attached are the screenshots of the public folder archiving policy. Seems to be fine for me.
Thanks
05-23-2013 12:30 AM
Okay so yep you need the DTrace then now.
05-23-2013 07:36 AM
Hi there,
I got the dtrace logfile from the customer and I found the following errors for every public folder.
Should I contact the support or does anyone know what that means? Cant find anything with the error code.
Thanks
05-23-2013 08:52 AM
Does it do the same for EVERY public folder? Towards the bottom of that trace the task appears to start to move on to the next folder.
Have you checked tha Vault Service account permissions on the folder?
05-24-2013 01:56 AM
Yes, I can find every public folder in the dtrace logfile with the error.
Interessting question, which permissions does the account need for Public Folders? I dont find any explicit public folder permissions in the installation guide? I thought the PF permissions are given by adding the service account to the Organization Management group?
Thanks
05-24-2013 01:58 AM
It _used to be_ that the VSA needed 'owner' rights on the Public Folder. But before going down that route...
What permission does the Vautl Service Account have on one, or two, of those folders?
05-27-2013 06:55 AM
I dont think the VSA has any specific permissions at the public folders right now. Is it written anywhere (documentation) that it needs any permissions like ownership? I told the customer to give the VSA (not the system mailbox) owner-permission at one of the public folder and test if this works. I will let you know when I get an answer.
Thanks,
Patrick
05-27-2013 12:49 PM
I haven't been able to find an article ... and I don't really have time to set this up in my lab right now. I'd suggest either:
a/ Try it in your own lab.
b/ Contact Symantec Support.
In some ways when you think about the Vault Service Account needs to be able to access the public folder to be able to read items, archive them, and replace the item with a shortcut. On top of that it will want to add a hidden message to the folder to indicate the archiving settings ... so to me that (largely) means 'owner' rights on the folder.
If I get chance later in the week then I may be able to try it, but it's not looking likely as it is a short work-week in the UK this week.
06-04-2013 06:20 AM
Hi,
Just to let you know I'm seeing exactl the same issue on lab box. It is 10 sp3 that I'm running with. It's a newly added public folders so I can't say whether it's ever worked.
In the dtrace below it states a mailbox "srv-ev7ee". I'm not at all sure where it's getting that from, as that's not the service account mailbox I've specified. I'll go and investigate that...
For what it's worth there is definately one defect at least here because EV doesn't go and log an event log entry for this. So you get no outward sign of failure what so ever. I only saw an error in the dtrace
:37:03.805 [5084] (PublicFolderTask) <6456> EV:L {CMAPISession::CreateMapiSession:#383} Getting privileged mbx owner (MAPI property PR_MAILBOX_OWNER_ENTRYID)
238 13:37:03.807 [5084] (PublicFolderTask) <6456> EV:L {CMAPISession::CreateMapiSession:#388} Opening privileged mailbox's owner MailUser object
239 13:37:03.811 [5084] (PublicFolderTask) <6456> EV:L {CMAPISession::CreateMapiSession:#399} Reading MailUser 'PR_EMAIL_ADDRESS' MAPI property
240 13:37:03.814 [5084] (PublicFolderTask) <6456> EV:L {UnEncodeCurlyBraces:#5854} String: /o=TVSQA-ORG/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=srv-ev7ee
241 13:37:03.814 [5084] (PublicFolderTask) <6456> EV:L {CMAPISession::CreateMapiSession:#407} MailUser 'PR_EMAIL_ADDRESS' MAPI property = /o=TVSQA-ORG/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=srv-ev7ee
242 13:37:03.814 [5084] (PublicFolderTask) <6456> EV:L {CMAPISession::CreateMapiSession:#413} Getting IExchangeManageStore object from the privileged mbx
243 13:37:03.814 [5084] (PublicFolderTask) <6456> EV:L {CMAPISession::CreateMapiSession} (Exit) Status: [Success]
244 13:37:03.814 [5084] (PublicFolderTask) <6456> EV:L {CMAPISession::GetMapiSessionFromPoolEx} (Exit) Status: [Success]
245 13:37:04.016 [5084] (PublicFolderTask) <6456> EV:H HrMAPIOpenFolderExKvs - COM error caught 0x80070005
246 13:37:04.021 [5084] (PublicFolderTask) <6456> EV:L {CTargetStateList::SetState} (Entry)
247 1
06-04-2013 07:11 AM
So, as it's a lab .. can you share the permissions via a screenshot? And try explicitly adding the Vault Service Account?
06-04-2013 09:49 AM
In Outlook. It's already on there as an Owner.