Email Archive permissions - when a users changes Domains

[Alan_Cote]

We have had recent scenarios where a users are active email archive users and they will

join another Business Unit and change to another Domain. When this happens we will need

to apply permissions manually to this new domain. Is there a method by which this should happen

automatically or a change I can update within the EV configuration so this is automatic? 

[JesusWept3]

will the archive still be associated with the mailbox?
For it to be automatic, it can read the non inherited permissions from AD and also Delegate users set through outlook, but that needs to be associated with a mailbox for that archive.

Otherwise you can either go through the Vault Admin Console and manually assign a windows user Read/Write/Delete access to the archive or you can do it through EVPM, but you may find that things such as Virtual Vault do not work correctly due to extra permissions it can only get from the mailbox itself

[Alan_Cote]

Is there a procedure to follow to set the automated process up correctly? Would you know of any Symantec tech note on this?

[EdLacey]

So it's just the user getting an account in a different Domain?

Does their mailbox stay where it is or does that move with the user?

If the mailbox doesn't move you must be somehow adding permissions from the users new Domain to their existing mailbox in which case as long as the policy is set correctly when the archive is sync'd this new permissions will filter down to their archive. Then as long as you set a DNS Alias in this new domain to point back to the EV server it will be seemless to the user

[Alan_Cote · Accepted solution]

yes this is what were are looking into now, thanks.