Enterprise Vault PST Locator Task fails to find PST

[twiinart]

We are facing the problem that the PST Locator Task says it has run successfully. No error. PST Locator Task is running with Administrator Rights and performing a Registry Search. For approximately 100 clients pst files have been detected and they have been successfully archived by the following PST Collector and PST Migrator Tasks. Now the PST Locator Task does not seem to work for some reason.

Lets say the client name is the following: MSNEV39

In the Log file of the EV Server it states for most of the clients the following:

   11.01.2012 11:03:05 Registry search on MSNEV39 is starting...
   11.01.2012 11:03:08 Registry search on MSNEV39 is complete

If I look in the local log file on the client unter \\MSNEV39\c$\Users\username\AppData\Local\Temp it states the following:

11/01/2012 07:17:45.917[6036]: Log file created (level 1).
11/01/2012 07:17:45.918[6036]: Module path: C:\Program Files\Enterprise Vault\EVClient\valkyrie.dll
11/01/2012 07:17:45.920[6036]: Found 1 Desktop resource DLLs
11/01/2012 07:17:46.018[6036]: Resource module [c:\program files\enterprise vault\evclient\valkyrie_de.dll] was loaded successfully.
11/01/2012 07:17:46.021[6036]: RPC over HTTP is not enabled (flags = 0)
11/01/2012 07:17:46.093[6036]: PST profile entry for - M:\Exchange\Archive_alt.pst, will not be removed (File Attribs 0x00002000)
11/01/2012 07:17:46.164[6036]:
11/01/2012 07:17:46.164[6036]: Environment:
11/01/2012 07:17:46.164[6036]:     Enterprise Vault Client 9.0.2.1061.0 (HTTP)
11/01/2012 07:17:46.164[6036]:     Microsoft Windows Vista Professional Service Pack 2 (Build 6002)
11/01/2012 07:17:46.165[6036]:     Intel(R) Core(TM)2 Duo CPU     P9300  @ 2.26GHz x86 Family 6 Model 23 Stepping 6;
11/01/2012 07:17:46.165[6036]:     Microsoft Outlook 2007
11/01/2012 07:17:46.166[6036]:         [RPC over HTTP not enabled]
11/01/2012 07:17:46.166[6036]:     Microsoft Internet Explorer 8.0.6001.19154
11/01/2012 07:17:46.166[6036]:     Computer name: MSNEV39.server.domain
11/01/2012 07:17:46.167[6036]:
11/01/2012 07:17:46.167[6036]: Contents of Desktop Settings:
11/01/2012 07:17:46.167[6036]:     ;SERVER; = exchange.server.domain
11/01/2012 07:17:46.167[6036]:     ALLOWSCRIPTPUBLICFOLDERS = 1
11/01/2012 07:17:46.168[6036]:     ALLOWSCRIPTSHAREDFOLDERS = 1
11/01/2012 07:17:46.168[6036]:     ARCHIVEBTNVISIBLE = 0
11/01/2012 07:17:46.168[6036]:     ARCHIVEDELITEMSFOLDER = 0
11/01/2012 07:17:46.169[6036]:     ARCHIVEEXPLORERBTNVISIBLE = 1
11/01/2012 07:17:46.169[6036]:     ARCHIVEMANAGEDFOLDERS = 0
11/01/2012 07:17:46.169[6036]:     ARCHIVEONLYWITHATTACH = 0
11/01/2012 07:17:46.169[6036]:     ARCHIVESETTINGSLOCKED = 1
11/01/2012 07:17:46.170[6036]:     BROWSERSEARCHLINK = 0
11/01/2012 07:17:46.170[6036]:     CANCELBTNVISIBLE = 0
11/01/2012 07:17:46.170[6036]:     DEFAULTARCHIVEID = 1E0BB12761780DB4FB361F398A5BC60291110000evsrv01
11/01/2012 07:17:46.171[6036]:     DEFAULTDOUBLECLICKVIEW = 0
11/01/2012 07:17:46.171[6036]:     DEFAULTRETENTIONCATEGORYID = 1A4F10F7E04CB9C46AEB47AF2FBA513411b10000evsrv01
11/01/2012 07:17:46.171[6036]:     DEFAULTWEBAPPURL = https://evsrv01.server.domain/EnterpriseVault
11/01/2012 07:17:46.172[6036]:     DELETEBTNVISIBLE = 0
11/01/2012 07:17:46.172[6036]:     DEPLOYFORMSLOCALLY = 2
11/01/2012 07:17:46.172[6036]:     EVSERVERS = evsrv01.server.domain;SERVERNAME1;evsrv02.server.domain;SERVERNAME2;
11/01/2012 07:17:46.173[6036]:     INACTIVITYPERIOD = 30
11/01/2012 07:17:46.173[6036]:     INACTIVITYPERIODUNITS = 0
11/01/2012 07:17:46.173[6036]:     LARGEITEMSSIZEKB = 10240
11/01/2012 07:17:46.174[6036]:     LOCALISEDRESOURCES = c:\program files\enterprise vault\evclient\valkyrie_de.dll
11/01/2012 07:17:46.174[6036]:     MAILBOXDN = /o=ExMedia/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=Username
11/01/2012 07:17:46.175[6036]:     MAILBOXSERVER = MSCS-BEGIA-0022
11/01/2012 07:17:46.175[6036]:     MAILBOXSTATE = 1
11/01/2012 07:17:46.175[6036]:     MAILBOXTYPE = PrimaryUser
11/01/2012 07:17:46.176[6036]:     MANAGEDFOLDERHANDLING = 2
11/01/2012 07:17:46.176[6036]:     MARKPSTS = 1
11/01/2012 07:17:46.176[6036]:     MINAGEPERIOD = 30
11/01/2012 07:17:46.176[6036]:     MINAGEPERIODUNITS = 0
11/01/2012 07:17:46.177[6036]:     OVENABLED = 0
11/01/2012 07:17:46.177[6036]:     OVMESSAGECLASSINCLUDE = IPM.Post*;IPM.Note*;IPM.Document*;
11/01/2012 07:17:46.177[6036]:     OWA2003ARCHIVEEXPLORERFROMBASICNAVBAR = 0
11/01/2012 07:17:46.177[6036]:     OWA2003ARCHIVEEXPLORERFROMPREMIUMNAVBAR = 0
11/01/2012 07:17:46.178[6036]:     OWA2003ARCHIVEFROMCONTEXTMENU = 0
11/01/2012 07:17:46.178[6036]:     OWA2003ARCHIVEFROMTOOLBAR = 0
11/01/2012 07:17:46.178[6036]:     OWA2003CANCELFROMCONTEXTMENU = 0
11/01/2012 07:17:46.179[6036]:     OWA2003CANCELFROMTOOLBAR = 0
11/01/2012 07:17:46.179[6036]:     OWA2003DELETEFROMCONTEXTMENU = 0
11/01/2012 07:17:46.179[6036]:     OWA2003DELETEFROMTOOLBAR = 0
11/01/2012 07:17:46.180[6036]:     OWA2003DELETEMODE = 0
11/01/2012 07:17:46.180[6036]:     OWA2003HELPFROMTOOLBAR = 0
11/01/2012 07:17:46.180[6036]:     OWA2003RESTOREFROMCONTEXTMENU = 0
11/01/2012 07:17:46.180[6036]:     OWA2003RESTOREFROMTOOLBAR = 0
11/01/2012 07:17:46.181[6036]:     OWA2003SEARCHFROMBASICNAVBAR = 0
11/01/2012 07:17:46.181[6036]:     OWA2003SEARCHFROMPREMIUMNAVBAR = 0
11/01/2012 07:17:46.181[6036]:     OWAWEBAPPURL = https://evsrv01.server.domain/EVAnon
11/01/2012 07:17:46.182[6036]:     PFINACTIVITYPERIOD = 6
11/01/2012 07:17:46.182[6036]:     PFINACTIVITYPERIODUNITS = 2
11/01/2012 07:17:46.182[6036]:     PFLARGEITEMSSIZEKB = 10240
11/01/2012 07:17:46.182[6036]:     PFMINAGEPERIOD = 2
11/01/2012 07:17:46.183[6036]:     PFMINAGEPERIODUNITS = 1
11/01/2012 07:17:46.183[6036]:     PFUSELARGEITEMSSIZE = 0
11/01/2012 07:17:46.183[6036]:     POLICYENTRYID = 1191503E3DF1CD64088CD2FF3CF077CBF1012700evsrv01
11/01/2012 07:17:46.184[6036]:     PSTIMPORTENABLED = 0
11/01/2012 07:17:46.184[6036]:     PSTPOLICYENTRYID = 17A03D2CB8C97C341A4D01A2D8FDA61CD1012700evsrv01
11/01/2012 07:17:46.184[6036]:     REMOVEPSTENTRIES = 7
11/01/2012 07:17:46.184[6036]:     RESTOREBTNVISIBLE = 0
11/01/2012 07:17:46.185[6036]:     SERVERVERSION = 9.02
11/01/2012 07:17:46.185[6036]:     SITEENTRYID = 1D8BEBE8AF392CC4CB6B41824EA289B4A1d10000evsrv01
11/01/2012 07:17:46.185[6036]:     SYSTEMMAILBOX = SMTP:mailbox@server.domain
11/01/2012 07:17:46.186[6036]:     USEINACTIVITYPERIOD = 1
11/01/2012 07:17:46.186[6036]:     USELARGEITEMSSIZE = 0
11/01/2012 07:17:46.186[6036]:     USEQUOTALIMIT = 0
11/01/2012 07:17:46.187[6036]:     USERSCANDELETEITEMS = 0
11/01/2012 07:17:46.187[6036]:     USESELFINSTALLFUNCT = 1
11/01/2012 07:17:46.187[6036]:
11/01/2012 07:17:46.187[6036]:
11/01/2012 07:17:46.308[6036]: Installed Outlook preview pane registry keys fix for Outlook V12
11/01/2012 07:17:46.308[4184]: PSTMIG:
11/01/2012 07:17:46.309[6036]: Unable to add/remove Outlook ForceFormReload registry key fix for Outlook: 0x80070005
11/01/2012 07:17:46.309[4184]: PSTMIG: PST Importer started.
11/01/2012 07:17:46.309[6036]: Set SharedFolderScript = 1
11/01/2012 07:17:46.310[6036]: Set PublicFolderScript = 1
11/01/2012 07:17:46.309[4184]: PSTMIG:
11/01/2012 07:17:46.316[6036]: [Offline Config] Enabled: false
11/01/2012 07:18:06.914[3644]:
11/01/2012 10:18:47.103[4184]:

So the local log file says, that a PST file has been found. But the Administration Console does not  show any psts found. I need help on this.

Thank you in advance for any help.

Best Martin
 

[Rob_Wilcox1]

Okay have you enabled the users for client driven migration, or is this locate/collect/migrate from the server side?

Assuming it's the server side, then the scan for new PSTs won't take place again immediately.  You can see in the PST Locator Task properties how often the scanning is set to repeat.  You can update SQL entries to 'force' the task do it again today [at which point you will want to do a DTRACE of the PST Locator task to see why it's not finding particular PSTs].

If it's the locate/collect/migrate method, then it's nothing to do with the client trace.

[twiinart]

Thank you Rob for your answer.

I can't tell, I am only the executing person. I did not setup the environment.

I have a server with the administration console, from where i can run 3 tasks:
- PST Locator Task (Registry Search)
- PST Collector Task
- PST Migrator Task

On this console I also define which clients have to be searched for (the client list comes from the AD).

Thank you for your help.

[TonySterling]

So the pst is on the M: drive, is that a mapped drive?

Can you locate the PSTLocTask_server_datetime.txt normally in the C:\Program Files (x86)\Enterprise Vault\Reports folder

[twiinart]

Yes, the M is a mapped drive and yes I can access the log files on the server.

Is there any log you will need to help me?

[TonySterling]

Running a dtrace as Rob suggest and also we can take a look at the log PSTLocTask_server_datetime.txt from the last time the locator ran.  That might shed a few clues to what's going on.

[twiinart]

PST Locator Task Report File: D:\Enterprise Vault\Reports\PstLocTask_SERVERNAME_20120111133716.txt

   11.01.2012 13:37:16 PST Locator Task started

Configuration Settings
----------------------

   11.01.2012 13:37:16 Search for new computers at start of new search cycle: True
   11.01.2012 13:37:16 Number of retries after a networking error: 7
   11.01.2012 13:37:16 Delay time before a retry after a networking error: 1 Day
   11.01.2012 13:37:16 Identify NetApp Filers: True
   11.01.2012 13:37:16 By default search for PSTs on each computer: False
   11.01.2012 13:37:16 Registry search: True
   11.01.2012 13:37:16 Interval between registry searches: 1 Day
   11.01.2012 13:37:16 Hard disk search: False
   11.01.2012 13:37:16 Interval between hard disk searches: 1 Day
   11.01.2012 13:37:16 Using Active Directory to find domains and computers
   11.01.2012 13:37:16 Location of the holding folder: \\SERVERNAME\PSTHolding

   11.01.2012 13:37:16 Run Now setting to search registries: True
   11.01.2012 13:37:16 Run Now setting to search hard disks: False
   11.01.2012 13:37:16 Run Now setting to search for new computers: False
   11.01.2012 13:37:16 Run Now setting to search for new domains: False

   11.01.2012 13:37:17 Registry search on all computers has started

   11.01.2012 13:37:17 Registry search on MSCN9F0X94J is starting...
   11.01.2012 13:37:19 Registry search on MSCN9F0X94J is complete
   11.01.2012 13:37:20 Registry search on MSCNJ4CX94J is starting...
   11.01.2012 13:37:28 Registry search on MSCNJ4CX94J is complete
   11.01.2012 13:37:28 Registry search on MSCNC1XV94J is starting...
   11.01.2012 13:37:48 Registry search on MSCNC1XV94J is complete
   11.01.2012 13:37:48 Registry search on MSCN665X94J is starting...
   11.01.2012 13:38:06 Registry search on MSCN665X94J is complete
   11.01.2012 13:38:06 Registry search on MSCD1LRM94J is starting...
   11.01.2012 13:38:09 Registry search on MSCD1LRM94J is complete
   11.01.2012 13:38:10 Registry search on MSCN914W94J is starting...

** 11.01.2012 13:38:15 Registry search failure on MSCN914W94J : The network path was not found. **

   11.01.2012 13:38:15 Registry search on MSCND3CX94J is starting...

** 11.01.2012 13:38:57 Registry search failure on MSCND3CX94J : The network path was not found. **

   11.01.2012 13:38:57 Registry search on MSCDJYWM94J is starting...
   11.01.2012 13:39:00 Registry search on MSCDJYWM94J is complete
   11.01.2012 13:39:00 Registry search on MSCNJD0X94J is starting...
   11.01.2012 13:39:13 Registry search on MSCNJD0X94J is complete
   11.01.2012 13:39:14 Registry search on MSCD330N94J is starting...

** 11.01.2012 13:39:19 Registry search failure on MSCD330N94J : The network path was not found. **

   11.01.2012 13:39:19 Registry search on MSCNCF0X94J is starting...
   11.01.2012 13:39:21 Registry search on MSCNCF0X94J is complete
   11.01.2012 13:39:21 Registry search on MSCNDL2X94J is starting...
   11.01.2012 13:39:39 Registry search on MSCNDL2X94J is complete
   11.01.2012 13:39:40 Registry search on MSCNB09N74J is starting...
   11.01.2012 13:39:50 Registry search on MSCNB09N74J is complete
   11.01.2012 13:39:50 Registry search on MSCD2ZWM94J is starting...
   11.01.2012 14:09:57 Registry search on MSCN95CX94J is starting...
   11.01.2012 14:10:03 Found PST: \\MSCN95CX94J\C$\Users\username\AppData\Local\Microsoft\Outlook\archive.pst
   11.01.2012 14:10:03 Registry search on MSCN95CX94J is complete
   11.01.2012 14:10:03 Registry search on MSCN3G0X94J is starting...
   11.01.2012 14:10:07 Registry search on MSCN3G0X94J is complete
   11.01.2012 14:10:07 Registry search on MSCNBJ2X94J is starting...

** 11.01.2012 14:10:12 Registry search failure on MSCNBJ2X94J : The network path was not found. **

   11.01.2012 14:10:12 Registry search on MSCD61XM94J is starting...
   11.01.2012 14:10:13 Registry search on MSCD61XM94J is complete
   11.01.2012 14:10:13 Registry search on MSCN1D0X94J is starting...
   11.01.2012 14:10:18 Registry search on MSCN1D0X94J is complete
   11.01.2012 14:10:18 Registry search on MSCJR3L24J is starting...
   11.01.2012 14:10:19 Registry search on MSCJR3L24J is complete
   11.01.2012 14:10:19 Registry search on MSCNGK2X94J is starting...

** 11.01.2012 14:10:24 Registry search failure on MSCNGK2X94J : The network path was not found. **

   11.01.2012 14:10:24 Registry search on MSCN7M2X94J is starting...
   11.01.2012 14:10:29 Registry search on MSCN7M2X94J is complete
   11.01.2012 14:10:29 Registry search on MSCN809N74J is starting...

** 11.01.2012 14:11:11 Registry search failure on MSCN809N74J : The network path was not found. **

   11.01.2012 14:11:11 Registry search on MSCN2ZWV94J is starting...
   11.01.2012 14:11:14 Registry search on MSCN2ZWV94J is complete
   11.01.2012 14:11:15 Registry search on MSCDDNRM94J is starting...
   11.01.2012 14:11:21 Registry search on MSCDDNRM94J is complete
   11.01.2012 14:11:22 Registry search on MSCNDD2G4R1 is starting...
   11.01.2012 14:11:24 Registry search on MSCNDD2G4R1 is complete
   11.01.2012 14:11:24 Registry search on MSCN4C0X94J is starting...
   11.01.2012 14:11:29 Registry search on MSCN4C0X94J is complete
   11.01.2012 14:11:29 Registry search on MSCN41XV94J is starting...

** 11.01.2012 14:11:34 Registry search failure on MSCN41XV94J : The network path was not found. **

   11.01.2012 14:11:34 Registry search on MSCN40XV94J is starting...

** 11.01.2012 14:12:16 Registry search failure on MSCN40XV94J : The network path was not found. **

   11.01.2012 14:12:16 Registry search on MSCDJL7P94J is starting...
   11.01.2012 14:12:19 Registry search on MSCDJL7P94J is complete
   11.01.2012 14:12:19 Registry search on MSCN73CX94J is starting...
   11.01.2012 14:12:22 Registry search on MSCN73CX94J is complete
   11.01.2012 14:12:22 Registry search on MSCD90XM94J is starting...
   11.01.2012 14:12:23 Registry search on MSCD90XM94J is complete
   11.01.2012 14:12:24 Registry search on MSCN8P4W94J is starting...
   11.01.2012 14:12:28 Registry search on MSCN8P4W94J is complete
   11.01.2012 14:12:28 Registry search on MSCNJYWV94J is starting...
   11.01.2012 14:12:32 Registry search on MSCNJYWV94J is complete
   11.01.2012 14:12:32 Registry search on MSCNBK2X94J is starting...
   11.01.2012 14:12:37 Registry search on MSCNBK2X94J is complete
   11.01.2012 14:12:37 Registry search on MSCN755X94J is starting...

** 11.01.2012 14:12:42 Registry search failure on MSCN755X94J : The network path was not found. **

   11.01.2012 14:12:42 Registry search on MSCN306W94J is starting...

** 11.01.2012 14:12:47 Registry search failure on MSCN306W94J : The network path was not found. **

   11.01.2012 14:12:47 Registry search on MSCN5VY35Q1 is starting...

** 11.01.2012 14:12:51 Registry search failure on MSCN5VY35Q1 : The network path was not found. **

   11.01.2012 14:12:52 Registry search on MSCNBYV11P1 is starting...

** 11.01.2012 14:12:56 Registry search failure on MSCNBYV11P1 : The network path was not found. **

   11.01.2012 14:12:57 Registry search on MSCN455X94J is starting...

** 11.01.2012 14:13:39 Registry search failure on MSCN455X94J : The network path was not found. **

   11.01.2012 14:13:39 Registry search on MSCNC75X94J is starting...

** 11.01.2012 14:14:21 Registry search failure on MSCNC75X94J : The network path was not found. **

   11.01.2012 14:38:27 Registry search on all computers is complete

   11.01.2012 14:38:32 PST Locator Task normal completion after a stop request or at end of schedule

[Rob_Wilcox1]

Well, you can see from the report that the locator task is working - at least on some machines :

   11.01.2012 14:09:57 Registry search on MSCN95CX94J is starting...
   11.01.2012 14:10:03 Found PST:\\MSCN95CX94J\C$\Users\username\AppData\Local\Microsoft\Outlook\archive.pst
   11.01.2012 14:10:03 Registry search on MSCN95CX94J is complete

So, which machine(s) isn't it working for?  And a DTRACE is the next port of call, possibly also look in the PST Computer table in the Directory Database and for the machine(s) in question look for the last scan times.

[twiinart]

Log:

    11.01.2012 17:23:49 Registry search on MSCNHC0X94J is starting...
    11.01.2012 17:24:00 Registry search on MSCNHC0X94J is complete

DTrace Log:

17744 17:23:49.278  [6940] (PstLocatorTask) <LocateRegistryThread:3368> EV-L {PstLogFile.LogMessage} Registry search on MSCNHC0X94J is starting...
 17746 17:23:49.278  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 17747 17:23:49.278  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 17748 17:23:49.278  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 17749 17:23:49.278  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 17750 17:23:49.278  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 17751 17:23:49.278  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 17752 17:23:49.278  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: SELECT PstComputerEntryId,ComputerName,DomainName,ExchangeMailboxEntryId,LastHardDiskScan,LastRegistryScan,LastNetworkFailure,SearchThisComputer,HardDiskSearchInProgress,RegistrySearchInProgress,HardDiskFailureText,RegistryFailureText,ComputerType FROM PstComputer WHERE (ComputerName = ?) |
 17753 17:23:49.278  [6940] (PstLocatorTask) <3368> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list for type ArchiveView : RootIdentity,VaultStoreEntryId,ArchiveName,ArchiveDescription,ArchiveAdminNote,ArchiveStatus,ArchiveLimitSize,ArchiveLimitOperation,ArchiveLimitStatus,ArchiveNotifyOperation,ArchiveNotifySize,DeleteExpiredItems,DeleteProtected,Structured,ArchiveFull,IndexingLevel,LocaleId,SID,VaultEntryId,Type,Hidden,ContainerRootIdentity,OwningTrusteeIdentity,AutoSecurityDesc,ManualSecurityDesc,IndexItemsMode,ConvertedContentMode,IgnoreIndexingPolicy,RetainArchiveHistory,HasHistory
 17755 17:23:49.278  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 17756 17:23:49.278  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 17757 17:23:49.278  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 17758 17:23:49.278  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 17759 17:23:49.278  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 17760 17:23:49.278  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 17761 17:23:49.278  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: SELECT PstDomainEntryId,DomName,SearchThisDomain,SiteEntryId,DnsDomainName FROM PstDomain WHERE (DomName = ?) |
 17762 17:23:49.294  [6940] (PstLocatorTask) <3368> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list for type ArchiveView : RootIdentity,VaultStoreEntryId,ArchiveName,ArchiveDescription,ArchiveAdminNote,ArchiveStatus,ArchiveLimitSize,ArchiveLimitOperation,ArchiveLimitStatus,ArchiveNotifyOperation,ArchiveNotifySize,DeleteExpiredItems,DeleteProtected,Structured,ArchiveFull,IndexingLevel,LocaleId,SID,VaultEntryId,Type,Hidden,ContainerRootIdentity,OwningTrusteeIdentity,AutoSecurityDesc,ManualSecurityDesc,IndexItemsMode,ConvertedContentMode,IgnoreIndexingPolicy,RetainArchiveHistory,HasHistory
 17763 17:23:50.888  [6940] (PstLocatorTask) <LocateRegistryThread:3368> EV-L {LocateRegistryThread.Search} Accessed Users key on MSCNHC0X94J OK
 17764 17:23:50.966  [6940] (PstLocatorTask) <LocateRegistryThread:3368> EV-L {LocateRegistryThread.Search} Examining user .DEFAULT
 17765 17:23:50.997  [6940] (PstLocatorTask) <LocateRegistryThread:3368> EV-L {LocateRegistryThread.Search} Examining user S-1-5-19
 17766 17:23:51.044  [6940] (PstLocatorTask) <LocateRegistryThread:3368> EV-L {LocateRegistryThread.Search} Examining user S-1-5-20
 17767 17:23:51.091  [6940] (PstLocatorTask) <LocateRegistryThread:3368> EV-L {LocateRegistryThread.Search} Examining user S-1-5-21-600833887-2581495124-4064593129-3811
 17769 17:23:51.231  [4348] (PstMigratorTask) <3952> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 17770 17:23:51.231  [4348] (PstMigratorTask) <3952> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 17771 17:23:51.231  [3592] (DirectoryService) <4868> EV:M DirectoryService: Method call: CDirectoryServiceObject::ReadDirectoryEntry, param (1C0B4B17E5F80FE4F87695B9FCE46854E1012400evsrv01) |
 17772 17:23:51.231  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 17773 17:23:51.231  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 17774 17:23:51.231  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 17775 17:23:51.231  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 17776 17:23:51.231  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: SELECT TaskEntryId,SiteEntryId,ComputerEntryId,TaskType,Name,Description,AdminNote,Schedule,UseSiteSchedule,NumberOfThreads,RetryCount,ReportingMode,StartupType,RetryIntervalPeriod,RetryIntervalUnit,ReportFiles,PstForMigration,MigrationDirectory,UserDataEntryId,UserDataDescription,UN,PW FROM PstMigratorTaskView WHERE TaskEntryId = ? |
 17777 17:23:51.231  [4348] (PstMigratorTask) <3952> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list for type PstMigratorTaskView : (null)
 17778 17:23:51.231  [4348] (PstMigratorTask) <3952> EV:L CDirectoryVaultObject::GetAttributeListFromType Unknown type - PstMigratorTaskView
 17779 17:23:51.997  [6940] (PstLocatorTask) <LocateRegistryThread:3368> EV-L {LocateRegistryThread.Search} Ignoring home drive since user has multiple profiles
 17780 17:23:52.544  [6940] (PstLocatorTask) <LocateRegistryThread:3368> EV-M {PstRegHelper.GetRealPath} Invalid PST on computer MSCNHC0X94J:  M:\Exchange\Luethire.pst
 17782 17:23:52.856  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 17783 17:23:52.856  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 17784 17:23:52.856  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 17785 17:23:52.856  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 17786 17:23:52.856  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 17787 17:23:52.856  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 17788 17:23:52.856  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: SELECT PstFileEntryId,FileSpecification,PstFileIdentity,PstComputerEntryId,StorageServiceEntryId,ExchangeMailboxEntryId,FileSize,Password,LastAccessedTime,LastModifiedTime,LastCopiedTime,PstLanguage,ProfileConnected,MigrationStatus,RetryCount,FailureText,HoldingLocation,MigrateLocation,ClientMigrationFlag,ClientMigrationStatus,ClientMigrationStarted,ClientMigrationCompleted,VaultId,RetentionCategoryId,IndexSequenceNumber,ClientFailureCount,PstDisplayName FROM PstFile WHERE FileSpecification = ? |
 17789 17:23:52.872  [6940] (PstLocatorTask) <3368> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list for type PstFile : PstFileEntryId,FileSpecification,PstFileIdentity,PstComputerEntryId,StorageServiceEntryId,ExchangeMailboxEntryId,FileSize,Password,LastAccessedTime,LastModifiedTime,LastCopiedTime,PstLanguage,ProfileConnected,MigrationStatus,RetryCount,FailureText,HoldingLocation,MigrateLocation,ClientMigrationFlag,ClientMigrationStatus,ClientMigrationStarted,ClientMigrationCompleted,VaultId,RetentionCategoryId,IndexSequenceNumber,ClientFailureCount,PstDisplayName
 17790 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::CorrelatePSTFile} (Entry)
 17791 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::GetVaultIdAndRetentionCategoryIdFromPST} (Entry)
 17792 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::Deinitialise} (Entry)
 17793 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::FreeFolderRestrictions} (Entry)
 17794 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::FreeFolderRestrictions} (Exit)
 17795 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::FreeMsgRestrictions} (Entry)
 17796 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::FreeMsgRestrictions} (Exit)
 17797 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::Deinitialise} (Exit)
 17798 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::Initialise} (Entry)
 17799 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::ResetCounts} (Entry)
 17800 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::ResetCounts} (Exit)
 17801 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::GetCodePageSettings} (Entry)
 17802 17:23:52.888  [4428] (MigratorServer) <6464> EV:M CMigrator::GetCodePageSettings(): Processing native codepage messages only
 17803 17:23:52.888  [4428] (MigratorServer) <6464> EV:M CMigrator::GetCodePageSettings(): Processing no additional codepage
 17804 17:23:52.888  [4428] (MigratorServer) <6464> EV:M CMigrator::GetCodePageSettings(): Processing missing codepages
 17805 17:23:52.888  [4428] (MigratorServer) <6464> EV:M CMigrator::GetCodePageSettings(): Processing codepages safely
 17806 17:23:52.888  [4428] (MigratorServer) <6464> EV:M CCMigrator::GetCodePageSettings(): ANSI default system codepage is 1252
 17807 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::GetCodePageSettings} (Exit) Status: [Success]
 17808 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::GetAgentsRegistrySettings} (Entry)
 17809 17:23:52.888  [4428] (MigratorServer) <6464> EV:M {CMigrator::GetAgentsRegistrySettings}|Agents registry settings|MaxNumofRecipients: 5000
 17810 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::GetAgentsRegistrySettings} (Exit)
 17811 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::Initialise} (Exit) Status: [Success]
 17812 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::SetupPST} (Entry)
 17813 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CSecurityWrapper::CSecurityWrapper:#118} Creating security wrapper. Role checks required: [True]
 17814 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CSecurityWrapper::IsServerClientTheVSA:#674} Checking if server client is VSA...
 17815 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CSecurityWrapper::IsServerClientTheVSA:#704} Client server is running as VSA: [True] (in a client COM call: [True]).
 17816 17:23:52.888  [4428] (MigratorServer) <6464> EV:L {CMigrator::CheckFileExists} (Entry)
 17817 17:23:52.950  [4428] (MigratorServer) <6464> EV:L {CMigrator::CheckFileExists} (Exit) Status: [Success]
 17818 17:23:52.950  [4428] (MigratorServer) <6464> EV:L {CMigrator::OpenPSTStore} (Entry)
 17819 17:23:53.528  [4428] (MigratorServer) <6464> EV:L {CMigrator::OpenPSTStore} (Exit) Status: [Success]
 17820 17:23:53.528  [4428] (MigratorServer) <6464> EV:L {CMigrator::IsUnicodePst} (Entry)
 17821 17:23:53.528  [4428] (MigratorServer) <6464> EV:L {CMigrator::IsUnicodePst} (Exit) Status: [Success]
 17822 17:23:53.528  [4428] (MigratorServer) <6464> EV:M {CMigrator::SetupPST}|PST file supports UNICODE
 17823 17:23:53.935  [4428] (MigratorServer) <6464> EV:L {CMigrator::OpenPSTStore} (Entry)
 17824 17:23:54.997  [4428] (MigratorServer) <6464> EV:L {CMigrator::OpenPSTStore} (Exit) Status: [Success]
 17825 17:23:54.997  [4428] (MigratorServer) <6464> EV:L {CMigrator::GetPSTFilterSettingsMsg} (Entry)
 17826 17:23:54.997  [4428] (MigratorServer) <6464> EV:H {CMigrator::GetPSTFilterSettingsMsg} (Exit) Status: [The PST file has not been marked for migration.      (0xc0041a4d)]
 17827 17:23:54.997  [4428] (MigratorServer) <6464> EV:L {CMigrator::GetPSTFilterCodePage} (Entry)
 17828 17:23:54.997  [4428] (MigratorServer) <6464> EV:H {CMigrator::GetPSTFilterCodePage} (Exit) Status: [The PST file has not been marked for migration.      (0xc0041a4d)]
 17829 17:23:54.997  [4428] (MigratorServer) <6464> EV:H {CMigrator::SetupPST} (Exit) Status: [The PST file has not been marked for migration.      (0xc0041a4d)]
 17830 17:23:54.997  [4428] (MigratorServer) <6464> EV:L {CMigrator::Deinitialise} (Entry)
 17831 17:23:54.997  [4428] (MigratorServer) <6464> EV:L {CMigrator::FreeFolderRestrictions} (Entry)
 17832 17:23:54.997  [4428] (MigratorServer) <6464> EV:L {CMigrator::FreeFolderRestrictions} (Exit)
 17833 17:23:54.997  [4428] (MigratorServer) <6464> EV:L {CMigrator::FreeMsgRestrictions} (Entry)
 17834 17:23:54.997  [4428] (MigratorServer) <6464> EV:L {CMigrator::FreeMsgRestrictions} (Exit)
 17835 17:23:54.997  [4428] (MigratorServer) <6464> EV:M CMAPISession::ClearProfileCache()
 17836 17:23:54.997  [4428] (MigratorServer) <6464> EV:M CMAPISession::CloseMapiSession - Entry
 17837 17:23:54.997  [4428] (MigratorServer) <6464> EV:M CMAPISession::CloseMapiSession - [1]
 17838 17:23:54.997  [4428] (MigratorServer) <6464> EV:M CMAPISession::CloseMapiSession - [2]
 17839 17:23:54.997  [4428] (MigratorServer) <6464> EV:M CMAPISession::CloseMapiSession - [3]
 17840 17:23:55.200  [4428] (MigratorServer) <6464> EV:L {CMigrator::Deinitialise} (Exit)
 17841 17:23:55.200  [4428] (MigratorServer) <6464> EV:H {CMigrator::GetVaultIdAndRetentionCategoryIdFromPST} (Exit) Status: [The PST file has not been marked for migration.      (0xc0041a4d)]
 17842 17:23:55.200  [4428] (MigratorServer) <6464> EV:L {CMigrator::GetUniqueSidWithWriteAccess} (Entry)
 17843 17:23:55.231  [4428] (MigratorServer) <6464> EV:L {CMigrator::GetThreadUser} (Entry)
 17844 17:23:55.231  [4428] (MigratorServer) <6464> EV:L {CMigrator::GetThreadUser} (Exit)
 17845 17:23:55.247  [4428] (MigratorServer) <6464> EV:L {CMigrator::GetUniqueSidWithWriteAccess} (Exit)
 17846 17:23:55.247  [4428] (MigratorServer) <6464> EV:L {CMigrator::CorrelatePSTFile} (Exit)
 17847 17:23:55.247  [6940] (PstLocatorTask) <3368> EV:H Flatten::Flatten
 17848 17:23:55.247  [6940] (PstLocatorTask) <3368> EV:M CFolderPermSyncWrapper SynchronizeEveryoneSID is 1
 17849 17:23:55.247  [6940] (PstLocatorTask) <3368> EV:H CFolderPermSyncWrapper::CFolderPermSyncWrapper - Expand local groups:0
 17850 17:23:55.247  [6940] (PstLocatorTask) <3368> EV:M CFolderPermSyncWrapper::CFolderPermSyncWrapper - UseGWAccessToResetLADate: 1
 17851 17:23:55.247  [6940] (PstLocatorTask) <3368> EV:L CFolderPermSyncWrapper::CFolderPermSyncWrapper - ArcFileNoInheritPermOwnerAdmGrp: 1
 17852 17:23:55.247  [6940] (PstLocatorTask) <3368> EV:L {CFolderPermSyncWrapper::ResetFileDates} (Entry)
 17853 17:23:55.247  [6940] (PstLocatorTask) <3368> EV:L {CFolderPermSyncWrapper::_ResetFileDates} (Entry)
 17854 17:23:55.278  [6940] (PstLocatorTask) <3368> EV:L {CFolderPermSyncWrapper::_ResetFileDates} (Exit) Status: [Success]
 17855 17:23:55.278  [6940] (PstLocatorTask) <3368> EV:L {CFolderPermSyncWrapper::ResetFileDates} (Exit) Status: [Success]
 17856 17:23:55.278  [6940] (PstLocatorTask) <3368> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list already set. Type:PstFile
 17860 17:23:55.278  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 17861 17:23:55.278  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 17862 17:23:55.278  [3592] (DirectoryService) <4868> EV:M DirectoryService: Method call: CDirectoryServiceObject::UpdateDirectoryEntry, param  (PstFile, 1B9B66818AEE4D948A9ED7FF63F6D6F121011800evsrv01) |
 17863 17:23:55.278  [3592] (DirectoryService) <4868> EV:M DIR_ADMIN_FN: CDirectoryServiceObject::UpdateDirectoryEntry : params: ( PstFile, 1B9B66818AEE4D948A9ED7FF63F6D6F121011800evsrv01 )
 17864 17:23:55.278  [3592] (DirectoryService) <4868> EV:H DirectoryService: Method call: CheckPermissions() |
 17865 17:23:55.278  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::HasServerClientGotPermission:#458} Checking role access for admin operation [1542]...
 17866 17:23:55.278  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::IsServerClientTheVSA:#674} Checking if server client is VSA...
 17867 17:23:55.278  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::IsServerClientTheVSA:#704} Client server is running as VSA: [True] (in a client COM call: [True]).
 17868 17:23:55.278  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::HasServerClientGotPermission:#476} Client is VSA. Access granted.
 17869 17:23:55.278  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 17870 17:23:55.278  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 17871 17:23:55.278  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 17872 17:23:55.278  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 17873 17:23:55.278  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: UPDATE PstFile SET  FileSpecification = ? , PstComputerEntryId = ? , StorageServiceEntryId = ? , ExchangeMailboxEntryId = ? , FileSize = ? , LastAccessedTime = ? , LastModifiedTime = ? , LastCopiedTime = NULL , PstLanguage = NULL , ProfileConnected = NULL , MigrationStatus = ? , RetryCount = ? , FailureText = NULL , HoldingLocation = NULL , MigrateLocation = NULL , ClientMigrationFlag = ? , ClientMigrationStatus = ? , ClientMigrationStarted = NULL , ClientMigrationCompleted = NULL , VaultId = ? , RetentionCategoryId = NULL , IndexSequenceNumber = NULL , ClientFailureCount = ? , PstDisplayName = NULL  WHERE PstFileEntryId = ? |
 17874 17:23:55.278  [3592] (DirectoryService) <4868> EV:M CDSO::GCN hr=0 user:domain\evUserAdmin
 17875 17:23:55.278  [3592] (DirectoryService) <4868> EV:L AuditInterface::SUCCESS_AUDIT (with BSTR SubCategory)
 17876 17:23:55.278  [3592] (DirectoryService) <4868> EV:L CEVAudit::WillPerformAudit Determine whether to audit or not.
 17877 17:23:55.278  [3592] (DirectoryService) <4868> EV:L CEVAudit::WillPerformAudit Auditing is off, current status '1'
 17878 17:23:55.372  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 17879 17:23:55.372  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 17880 17:23:55.372  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 17881 17:23:55.372  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 17882 17:23:55.372  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: SELECT vse.VaultStoreEntryId,VaultStoreName,PartitionName,PartitionEntryId,IdPartition,TimeOpened,RolloverType,RolloverOrder,RolloverVolData,RolloverTimeData,RolloverVolSizeUnit,RolloverTimeAfterUnit,RolloverDateTime FROM PartitionEntry part,VaultStoreEntry vse,StorageServiceEntry SSE1,StorageServiceEntry SSE2,ComputerEntry CE1,ComputerEntry CE2 WHERE  SSE1.ServiceEntryId = ? AND SSE1.ComputerEntryId = CE1.ComputerEntryId AND UPPER(CE1.ComputerNameAlternate) = UPPER(CE2.ComputerNameAlternate) AND CE2.ComputerEntryId = SSE2.ComputerEntryId AND SSE2.ServiceEntryId = vse.StorageServiceEntryId AND part.VaultStoreEntryId = vse.VaultStoreEntryId AND part.PartitionStatus = ? ORDER BY part.PartitionName,part.IdPartition |
 17883 17:23:55.560  [6940] (PstLocatorTask) <LocateRegistryThread:3368> EV-L {LocateRegistryThread.Search} Ignoring home drive since user has multiple profiles
 17885 17:23:56.232  [4348] (PstMigratorTask) <3952> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 17886 17:23:56.232  [4348] (PstMigratorTask) <3952> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 17887 17:23:56.232  [3592] (DirectoryService) <4868> EV:M DirectoryService: Method call: CDirectoryServiceObject::ReadDirectoryEntry, param (1C0B4B17E5F80FE4F87695B9FCE46854E1012400evsrv01) |
 17888 17:23:56.232  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 17889 17:23:56.232  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 17890 17:23:56.232  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 17891 17:23:56.232  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 17892 17:23:56.232  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: SELECT TaskEntryId,SiteEntryId,ComputerEntryId,TaskType,Name,Description,AdminNote,Schedule,UseSiteSchedule,NumberOfThreads,RetryCount,ReportingMode,StartupType,RetryIntervalPeriod,RetryIntervalUnit,ReportFiles,PstForMigration,MigrationDirectory,UserDataEntryId,UserDataDescription,UN,PW FROM PstMigratorTaskView WHERE TaskEntryId = ? |
 17893 17:23:56.232  [4348] (PstMigratorTask) <3952> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list for type PstMigratorTaskView : (null)
 17894 17:23:56.232  [4348] (PstMigratorTask) <3952> EV:L CDirectoryVaultObject::GetAttributeListFromType Unknown type - PstMigratorTaskView
 17895 17:23:56.497  [3592] (DirectoryService) <2924> EV:M CMonitorAzStore::DownloadAuthorizationStoreIfNecessary
 17896 17:23:56.497  [3592] (DirectoryService) <2924> EV:L CADOContext::CreateConnection entry
 17897 17:23:56.497  [3592] (DirectoryService) <2924> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 17898 17:23:56.497  [3592] (DirectoryService) <2924> EV:L CADODataAccess::CreateCommand entry
 17899 17:23:56.497  [3592] (DirectoryService) <2924> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 17900 17:23:56.497  [3592] (DirectoryService) <2924> EV:M DirectoryService: ADO: SELECT AzStoreIndex,AzStoreVersion FROM DirectoryEntry |
 17901 17:23:56.497  [3592] (DirectoryService) <2924> EV:M CMonitorAzStore::DownloadAuthorizationStoreIfNecessary : Current store version: 19, Required version: 19, Current store index: 16, Last downloaded index: 16
 17902 17:23:56.497  [3592] (DirectoryService) <2924> EV:M CMonitorAzStore::ThreadRoutine - Waiting for 60 seconds or until service exits.
 17903 17:23:56.607  [6940] (PstLocatorTask) <LocateRegistryThread:3368> EV-L {LocateRegistryThread.Search} Ignoring home drive since user has multiple profiles
 17905 17:23:56.966  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 17906 17:23:56.966  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 17907 17:23:56.966  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 17908 17:23:56.966  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 17909 17:23:56.966  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 17910 17:23:56.966  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 17911 17:23:56.966  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: SELECT PstFileEntryId,FileSpecification,PstFileIdentity,PstComputerEntryId,StorageServiceEntryId,ExchangeMailboxEntryId,FileSize,Password,LastAccessedTime,LastModifiedTime,LastCopiedTime,PstLanguage,ProfileConnected,MigrationStatus,RetryCount,FailureText,HoldingLocation,MigrateLocation,ClientMigrationFlag,ClientMigrationStatus,ClientMigrationStarted,ClientMigrationCompleted,VaultId,RetentionCategoryId,IndexSequenceNumber,ClientFailureCount,PstDisplayName FROM PstFile WHERE FileSpecification = ? |
 17912 17:23:56.966  [6940] (PstLocatorTask) <3368> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list for type PstFile : PstFileEntryId,FileSpecification,PstFileIdentity,PstComputerEntryId,StorageServiceEntryId,ExchangeMailboxEntryId,FileSize,Password,LastAccessedTime,LastModifiedTime,LastCopiedTime,PstLanguage,ProfileConnected,MigrationStatus,RetryCount,FailureText,HoldingLocation,MigrateLocation,ClientMigrationFlag,ClientMigrationStatus,ClientMigrationStarted,ClientMigrationCompleted,VaultId,RetentionCategoryId,IndexSequenceNumber,ClientFailureCount,PstDisplayName
 17913 17:23:56.997  [6940] (PstLocatorTask) <3368> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list already set. Type:PstFile
 17917 17:23:56.997  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 17918 17:23:56.997  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 17919 17:23:56.997  [3592] (DirectoryService) <4868> EV:M DirectoryService: Method call: CDirectoryServiceObject::UpdateDirectoryEntry, param  (PstFile, 12E66EDAD71D62F4CBF589816CC8359C21011800evsrv01) |
 17920 17:23:56.997  [3592] (DirectoryService) <4868> EV:M DIR_ADMIN_FN: CDirectoryServiceObject::UpdateDirectoryEntry : params: ( PstFile, 12E66EDAD71D62F4CBF589816CC8359C21011800evsrv01 )
 17921 17:23:56.997  [3592] (DirectoryService) <4868> EV:H DirectoryService: Method call: CheckPermissions() |
 17922 17:23:56.997  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::HasServerClientGotPermission:#458} Checking role access for admin operation [1542]...
 17923 17:23:56.997  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::IsServerClientTheVSA:#674} Checking if server client is VSA...
 17924 17:23:56.997  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::IsServerClientTheVSA:#704} Client server is running as VSA: [True] (in a client COM call: [True]).
 17925 17:23:56.997  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::HasServerClientGotPermission:#476} Client is VSA. Access granted.
 17926 17:23:56.997  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 17927 17:23:56.997  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 17928 17:23:56.997  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 17929 17:23:56.997  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 17930 17:23:56.997  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: UPDATE PstFile SET  FileSpecification = ? , PstComputerEntryId = ? , StorageServiceEntryId = ? , ExchangeMailboxEntryId = ? , FileSize = ? , LastAccessedTime = ? , LastModifiedTime = ? , LastCopiedTime = NULL , PstLanguage = NULL , ProfileConnected = NULL , MigrationStatus = ? , RetryCount = ? , FailureText = NULL , HoldingLocation = NULL , MigrateLocation = NULL , ClientMigrationFlag = ? , ClientMigrationStatus = ? , ClientMigrationStarted = NULL , ClientMigrationCompleted = NULL , VaultId = ? , RetentionCategoryId = ? , IndexSequenceNumber = NULL , ClientFailureCount = ? , PstDisplayName = NULL  WHERE PstFileEntryId = ? |
 17931 17:23:56.997  [3592] (DirectoryService) <4868> EV:M CDSO::GCN hr=0 user:domain\evUserAdmin
 17932 17:23:56.997  [3592] (DirectoryService) <4868> EV:L AuditInterface::SUCCESS_AUDIT (with BSTR SubCategory)
 17933 17:23:56.997  [3592] (DirectoryService) <4868> EV:L CEVAudit::WillPerformAudit Determine whether to audit or not.
 17934 17:23:56.997  [3592] (DirectoryService) <4868> EV:L CEVAudit::WillPerformAudit Auditing is off, current status '1'
 17936 17:23:57.310  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 17937 17:23:57.310  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 17938 17:23:57.325  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 17939 17:23:57.325  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 17940 17:23:57.325  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 17941 17:23:57.325  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 17942 17:23:57.325  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: SELECT PstFileEntryId,FileSpecification,PstFileIdentity,PstComputerEntryId,StorageServiceEntryId,ExchangeMailboxEntryId,FileSize,Password,LastAccessedTime,LastModifiedTime,LastCopiedTime,PstLanguage,ProfileConnected,MigrationStatus,RetryCount,FailureText,HoldingLocation,MigrateLocation,ClientMigrationFlag,ClientMigrationStatus,ClientMigrationStarted,ClientMigrationCompleted,VaultId,RetentionCategoryId,IndexSequenceNumber,ClientFailureCount,PstDisplayName FROM PstFile WHERE FileSpecification = ? |
 17943 17:23:57.325  [6940] (PstLocatorTask) <3368> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list for type PstFile : PstFileEntryId,FileSpecification,PstFileIdentity,PstComputerEntryId,StorageServiceEntryId,ExchangeMailboxEntryId,FileSize,Password,LastAccessedTime,LastModifiedTime,LastCopiedTime,PstLanguage,ProfileConnected,MigrationStatus,RetryCount,FailureText,HoldingLocation,MigrateLocation,ClientMigrationFlag,ClientMigrationStatus,ClientMigrationStarted,ClientMigrationCompleted,VaultId,RetentionCategoryId,IndexSequenceNumber,ClientFailureCount,PstDisplayName
 17944 17:23:57.357  [6940] (PstLocatorTask) <3368> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list already set. Type:PstFile
 17948 17:23:57.357  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 17949 17:23:57.357  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 17950 17:23:57.357  [3592] (DirectoryService) <4868> EV:M DirectoryService: Method call: CDirectoryServiceObject::UpdateDirectoryEntry, param  (PstFile, 1598C711BED9D444697F83471FECAD37F1011800evsrv01) |
 17951 17:23:57.357  [3592] (DirectoryService) <4868> EV:M DIR_ADMIN_FN: CDirectoryServiceObject::UpdateDirectoryEntry : params: ( PstFile, 1598C711BED9D444697F83471FECAD37F1011800evsrv01 )
 17952 17:23:57.357  [3592] (DirectoryService) <4868> EV:H DirectoryService: Method call: CheckPermissions() |
 17953 17:23:57.357  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::HasServerClientGotPermission:#458} Checking role access for admin operation [1542]...
 17954 17:23:57.357  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::IsServerClientTheVSA:#674} Checking if server client is VSA...
 17955 17:23:57.357  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::IsServerClientTheVSA:#704} Client server is running as VSA: [True] (in a client COM call: [True]).
 17956 17:23:57.357  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::HasServerClientGotPermission:#476} Client is VSA. Access granted.
 17957 17:23:57.357  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 17958 17:23:57.357  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 17959 17:23:57.357  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 17960 17:23:57.357  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 17961 17:23:57.357  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: UPDATE PstFile SET  FileSpecification = ? , PstComputerEntryId = ? , StorageServiceEntryId = ? , ExchangeMailboxEntryId = ? , FileSize = ? , LastAccessedTime = ? , LastModifiedTime = ? , LastCopiedTime = NULL , PstLanguage = NULL , ProfileConnected = NULL , MigrationStatus = ? , RetryCount = ? , FailureText = NULL , HoldingLocation = NULL , MigrateLocation = NULL , ClientMigrationFlag = ? , ClientMigrationStatus = ? , ClientMigrationStarted = NULL , ClientMigrationCompleted = NULL , VaultId = ? , RetentionCategoryId = ? , IndexSequenceNumber = NULL , ClientFailureCount = ? , PstDisplayName = NULL  WHERE PstFileEntryId = ? |
 17962 17:23:57.357  [3592] (DirectoryService) <4868> EV:M CDSO::GCN hr=0 user:domain\evUserAdmin
 17963 17:23:57.357  [3592] (DirectoryService) <4868> EV:L AuditInterface::SUCCESS_AUDIT (with BSTR SubCategory)
 17964 17:23:57.357  [3592] (DirectoryService) <4868> EV:L CEVAudit::WillPerformAudit Determine whether to audit or not.
 17965 17:23:57.357  [3592] (DirectoryService) <4868> EV:L CEVAudit::WillPerformAudit Auditing is off, current status '1'
 17966 17:23:59.622  [6940] (PstLocatorTask) <LocateRegistryThread:3368> EV-M {PstRegHelper.GetRealPath} Invalid PST on computer MSCNHC0X94J: M:\Exchange\Luethire.pst
 17967 17:24:00.138  [6940] (PstLocatorTask) <LocateRegistryThread:3368> EV-L {LocateRegistryThread.Search} Examining user S-1-5-21-600833887-2581495124-4064593129-3811_Classes
 17968 17:24:00.153  [6940] (PstLocatorTask) <LocateRegistryThread:3368> EV-L {LocateRegistryThread.Search} Examining user S-1-5-18
 17969 17:24:00.185  [6940] (PstLocatorTask) <LocateRegistryThread:3368> EV-L {PstLogFile.LogMessage} Registry search on MSCNHC0X94J is complete
 17971 17:24:00.200  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 17972 17:24:00.200  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 17973 17:24:00.200  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 17974 17:24:00.200  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 17975 17:24:00.200  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 17976 17:24:00.200  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 17977 17:24:00.200  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: SELECT PstComputerEntryId,ComputerName,DomainName,ExchangeMailboxEntryId,LastHardDiskScan,LastRegistryScan,LastNetworkFailure,SearchThisComputer,HardDiskSearchInProgress,RegistrySearchInProgress,HardDiskFailureText,RegistryFailureText,ComputerType FROM PstComputer WHERE (ComputerName = ?) |
 17978 17:24:00.200  [6940] (PstLocatorTask) <3368> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list for type ArchiveView : RootIdentity,VaultStoreEntryId,ArchiveName,ArchiveDescription,ArchiveAdminNote,ArchiveStatus,ArchiveLimitSize,ArchiveLimitOperation,ArchiveLimitStatus,ArchiveNotifyOperation,ArchiveNotifySize,DeleteExpiredItems,DeleteProtected,Structured,ArchiveFull,IndexingLevel,LocaleId,SID,VaultEntryId,Type,Hidden,ContainerRootIdentity,OwningTrusteeIdentity,AutoSecurityDesc,ManualSecurityDesc,IndexItemsMode,ConvertedContentMode,IgnoreIndexingPolicy,RetainArchiveHistory,HasHistory
 17979 17:24:00.200  [6940] (PstLocatorTask) <3368> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list already set. Type:PstComputer
 17983 17:24:00.200  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 17984 17:24:00.200  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 17985 17:24:00.200  [3592] (DirectoryService) <4868> EV:M DirectoryService: Method call: CDirectoryServiceObject::UpdateDirectoryEntry, param  (PstComputer, 134E42493D8BD3946AAB38D823866059B1011700evsrv01) |
 17986 17:24:00.200  [3592] (DirectoryService) <4868> EV:M DIR_ADMIN_FN: CDirectoryServiceObject::UpdateDirectoryEntry : params: ( PstComputer, 134E42493D8BD3946AAB38D823866059B1011700evsrv01 )
 17987 17:24:00.200  [3592] (DirectoryService) <4868> EV:H DirectoryService: Method call: CheckPermissions() |
 17988 17:24:00.200  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::HasServerClientGotPermission:#458} Checking role access for admin operation [1540]...
 17989 17:24:00.200  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::IsServerClientTheVSA:#674} Checking if server client is VSA...
 17990 17:24:00.200  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::IsServerClientTheVSA:#704} Client server is running as VSA: [True] (in a client COM call: [True]).
 17991 17:24:00.200  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::HasServerClientGotPermission:#476} Client is VSA. Access granted.
 17992 17:24:00.200  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 17993 17:24:00.200  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 17994 17:24:00.200  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 17995 17:24:00.200  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 17996 17:24:00.200  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: UPDATE PstComputer SET  ComputerName = ? , DomainName = ? , ExchangeMailboxEntryId = NULL , LastHardDiskScan = NULL , LastRegistryScan = ? , LastNetworkFailure = NULL , SearchThisComputer = ? , HardDiskSearchInProgress = ? , RegistrySearchInProgress = ? , HardDiskFailureText = NULL , RegistryFailureText = ? , ComputerType = ?  WHERE PstComputerEntryId = ? |
 17997 17:24:00.200  [3592] (DirectoryService) <4868> EV:M CDSO::GCN hr=0 user:domain\evUserAdmin
 17998 17:24:00.200  [3592] (DirectoryService) <4868> EV:L AuditInterface::SUCCESS_AUDIT (with BSTR SubCategory)
 17999 17:24:00.200  [3592] (DirectoryService) <4868> EV:L CEVAudit::WillPerformAudit Determine whether to audit or not.
 18000 17:24:00.200  [3592] (DirectoryService) <4868> EV:L CEVAudit::WillPerformAudit Auditing is off, current status '1'
 18002 17:24:00.216  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 18003 17:24:00.216  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 18004 17:24:00.216  [3592] (DirectoryService) <4868> EV:M DIR_ADMIN_FN: CDirectoryServiceObject::UpdatePstLocatorTask
 18005 17:24:00.216  [3592] (DirectoryService) <4868> EV:H DirectoryService: Method call: CheckPermissions() |
 18006 17:24:00.216  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::HasServerClientGotPermission:#458} Checking role access for admin operation [1009]...
 18007 17:24:00.216  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::IsServerClientTheVSA:#674} Checking if server client is VSA...
 18008 17:24:00.216  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::IsServerClientTheVSA:#704} Client server is running as VSA: [True] (in a client COM call: [True]).
 18009 17:24:00.216  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::HasServerClientGotPermission:#476} Client is VSA. Access granted.
 18010 17:24:00.216  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 18011 17:24:00.216  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 18012 17:24:00.216  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 18013 17:24:00.216  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 18014 17:24:00.216  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: UpdatePstLocatorTask |
 18016 17:24:00.216  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 18017 17:24:00.216  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 18018 17:24:00.216  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 18019 17:24:00.216  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 18020 17:24:00.216  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 18021 17:24:00.216  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 18022 17:24:00.216  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: SELECT PstComputerEntryId,ComputerName,DomainName,ExchangeMailboxEntryId,LastHardDiskScan,LastRegistryScan,LastNetworkFailure,SearchThisComputer,HardDiskSearchInProgress,RegistrySearchInProgress,HardDiskFailureText,RegistryFailureText,ComputerType FROM PstComputer WHERE (ComputerName = ?) |
 18023 17:24:00.232  [6940] (PstLocatorTask) <3368> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list for type ArchiveView : RootIdentity,VaultStoreEntryId,ArchiveName,ArchiveDescription,ArchiveAdminNote,ArchiveStatus,ArchiveLimitSize,ArchiveLimitOperation,ArchiveLimitStatus,ArchiveNotifyOperation,ArchiveNotifySize,DeleteExpiredItems,DeleteProtected,Structured,ArchiveFull,IndexingLevel,LocaleId,SID,VaultEntryId,Type,Hidden,ContainerRootIdentity,OwningTrusteeIdentity,AutoSecurityDesc,ManualSecurityDesc,IndexItemsMode,ConvertedContentMode,IgnoreIndexingPolicy,RetainArchiveHistory,HasHistory
 18025 17:24:00.232  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 18026 17:24:00.232  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 18027 17:24:00.232  [3592] (DirectoryService) <4868> EV:M DIR_ADMIN_FN: CDirectoryServiceObject::UpdatePstLocatorTask
 18028 17:24:00.232  [3592] (DirectoryService) <4868> EV:H DirectoryService: Method call: CheckPermissions() |
 18029 17:24:00.232  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::HasServerClientGotPermission:#458} Checking role access for admin operation [1009]...
 18030 17:24:00.232  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::IsServerClientTheVSA:#674} Checking if server client is VSA...
 18031 17:24:00.232  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::IsServerClientTheVSA:#704} Client server is running as VSA: [True] (in a client COM call: [True]).
 18032 17:24:00.232  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::HasServerClientGotPermission:#476} Client is VSA. Access granted.
 18033 17:24:00.232  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 18034 17:24:00.232  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 18035 17:24:00.232  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 18036 17:24:00.232  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 18037 17:24:00.232  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: UpdatePstLocatorTask |
 18039 17:24:00.232  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 18040 17:24:00.232  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 18041 17:24:00.232  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 18042 17:24:00.232  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 18043 17:24:00.232  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 18044 17:24:00.232  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 18045 17:24:00.232  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: SELECT PstComputerEntryId,ComputerName,DomainName,ExchangeMailboxEntryId,LastHardDiskScan,LastRegistryScan,LastNetworkFailure,SearchThisComputer,HardDiskSearchInProgress,RegistrySearchInProgress,HardDiskFailureText,RegistryFailureText,ComputerType FROM PstComputer WHERE (ComputerName = ?) |
 18046 17:24:00.247  [6940] (PstLocatorTask) <3368> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list for type ArchiveView : RootIdentity,VaultStoreEntryId,ArchiveName,ArchiveDescription,ArchiveAdminNote,ArchiveStatus,ArchiveLimitSize,ArchiveLimitOperation,ArchiveLimitStatus,ArchiveNotifyOperation,ArchiveNotifySize,DeleteExpiredItems,DeleteProtected,Structured,ArchiveFull,IndexingLevel,LocaleId,SID,VaultEntryId,Type,Hidden,ContainerRootIdentity,OwningTrusteeIdentity,AutoSecurityDesc,ManualSecurityDesc,IndexItemsMode,ConvertedContentMode,IgnoreIndexingPolicy,RetainArchiveHistory,HasHistory
 18048 17:24:00.247  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 18049 17:24:00.247  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 18050 17:24:00.247  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 18051 17:24:00.247  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 18052 17:24:00.247  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 18053 17:24:00.247  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 18054 17:24:00.247  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: SELECT PstDomainEntryId,DomName,SearchThisDomain,SiteEntryId,DnsDomainName FROM PstDomain WHERE (DomName = ?) |
 18055 17:24:00.247  [6940] (PstLocatorTask) <3368> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list for type ArchiveView : RootIdentity,VaultStoreEntryId,ArchiveName,ArchiveDescription,ArchiveAdminNote,ArchiveStatus,ArchiveLimitSize,ArchiveLimitOperation,ArchiveLimitStatus,ArchiveNotifyOperation,ArchiveNotifySize,DeleteExpiredItems,DeleteProtected,Structured,ArchiveFull,IndexingLevel,LocaleId,SID,VaultEntryId,Type,Hidden,ContainerRootIdentity,OwningTrusteeIdentity,AutoSecurityDesc,ManualSecurityDesc,IndexItemsMode,ConvertedContentMode,IgnoreIndexingPolicy,RetainArchiveHistory,HasHistory
 18057 17:24:00.247  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 18058 17:24:00.247  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 18059 17:24:00.247  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 18060 17:24:00.247  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 18061 17:24:00.247  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 18062 17:24:00.247  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 18063 17:24:00.247  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: SELECT PstComputerEntryId,ComputerName,DomainName,ExchangeMailboxEntryId,LastHardDiskScan,LastRegistryScan,LastNetworkFailure,SearchThisComputer,HardDiskSearchInProgress,RegistrySearchInProgress,HardDiskFailureText,RegistryFailureText,ComputerType FROM PstComputer WHERE (ComputerName = ?) |
 18064 17:24:00.263  [6940] (PstLocatorTask) <3368> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list for type ArchiveView : RootIdentity,VaultStoreEntryId,ArchiveName,ArchiveDescription,ArchiveAdminNote,ArchiveStatus,ArchiveLimitSize,ArchiveLimitOperation,ArchiveLimitStatus,ArchiveNotifyOperation,ArchiveNotifySize,DeleteExpiredItems,DeleteProtected,Structured,ArchiveFull,IndexingLevel,LocaleId,SID,VaultEntryId,Type,Hidden,ContainerRootIdentity,OwningTrusteeIdentity,AutoSecurityDesc,ManualSecurityDesc,IndexItemsMode,ConvertedContentMode,IgnoreIndexingPolicy,RetainArchiveHistory,HasHistory
 18065 17:24:00.263  [6940] (PstLocatorTask) <3368> EV:M CDirectoryVaultObject::GetAttributeListFromType Attribute list already set. Type:PstComputer
 18069 17:24:00.263  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Entry [m_nNumTries = 40]
 18070 17:24:00.263  [6940] (PstLocatorTask) <3368> EV:L CBaseDirectoryServiceWrapper::CreateDirectoryService() - Successfully communicated with an EV Directory Service on the local machine
 18071 17:24:00.263  [3592] (DirectoryService) <4868> EV:M DirectoryService: Method call: CDirectoryServiceObject::UpdateDirectoryEntry, param  (PstComputer, 1367519AB00612047BE319E7B9C36E18E1011700evsrv01) |
 18072 17:24:00.263  [3592] (DirectoryService) <4868> EV:M DIR_ADMIN_FN: CDirectoryServiceObject::UpdateDirectoryEntry : params: ( PstComputer, 1367519AB00612047BE319E7B9C36E18E1011700evsrv01 )
 18073 17:24:00.263  [3592] (DirectoryService) <4868> EV:H DirectoryService: Method call: CheckPermissions() |
 18074 17:24:00.263  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::HasServerClientGotPermission:#458} Checking role access for admin operation [1540]...
 18075 17:24:00.263  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::IsServerClientTheVSA:#674} Checking if server client is VSA...
 18076 17:24:00.263  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::IsServerClientTheVSA:#704} Client server is running as VSA: [True] (in a client COM call: [True]).
 18077 17:24:00.263  [3592] (DirectoryService) <4868> EV:L {CSecurityWrapper::HasServerClientGotPermission:#476} Client is VSA. Access granted.
 18078 17:24:00.263  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection entry
 18079 17:24:00.263  [3592] (DirectoryService) <4868> EV:L CADOContext::CreateConnection exit. source:Provider=SQLOLEDB;Server=sqlserver-name;Database=EnterpriseVaultDirectory;Trusted_Connection=yes hr=Success  (0)
 18080 17:24:00.263  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand entry
 18081 17:24:00.263  [3592] (DirectoryService) <4868> EV:L CADODataAccess::CreateCommand exit. hr=Success  (0)
 18082 17:24:00.263  [3592] (DirectoryService) <4868> EV:M DirectoryService: ADO: UPDATE PstComputer SET  ComputerName = ? , DomainName = ? , ExchangeMailboxEntryId = NULL , LastHardDiskScan = NULL , LastRegistryScan = ? , LastNetworkFailure = NULL , SearchThisComputer = ? , HardDiskSearchInProgress = ? , RegistrySearchInProgress = ? , HardDiskFailureText = NULL , RegistryFailureText = ? , ComputerType = ?  WHERE PstComputerEntryId = ? |
 18083 17:24:00.263  [3592] (DirectoryService) <4868> EV:M CDSO::GCN hr=0 user:domain\evUserAdmin
 18084 17:24:00.263  [3592] (DirectoryService) <4868> EV:L AuditInterface::SUCCESS_AUDIT (with BSTR SubCategory)
 18085 17:24:00.263  [3592] (DirectoryService) <4868> EV:L CEVAudit::WillPerformAudit Determine whether to audit or not.
 18086 17:24:00.263  [3592] (DirectoryService) <4868> EV:L CEVAudit::WillPerformAudit Auditing is off, current status '1'
 

[twiinart]

From the DTrace it looks to me that for all the clients with problems, the locator task (or the PstRegHelper.GetRealPath Class) can not resolve the mapped drive m: to its real UNC path.

Can somebody confirm, that this is the problem? What is the solution to this?

[Rob_Wilcox1]

twinart, I'd agree.  Sorry I was looking at this earlier this morning, then got distracted.

How is the M: mapped?  Is a home folder?  Login script?  Something else?

If we can't fathom it out here, then you're going to need to contact Symantec Support.  In my opinion it might be necessary to add some additional logging to the code, and / or do a test binary to do the same pieces of the code in a test app, to work out what is going on.  

The bits we can't see in the dtrace is that in the code we build a list of network drives, and drive letters, then work down the list of PSTs and see where they sit.

In this case in the trace we can't find that drive letter in the list of network drives, so we can't / don't add it to the list for collection...  we need the UNC path, for that to work.

[twiinart]

Rob, thank you for your answer. The Share is added in the AD under "Profile" as "Home folder". I compared two users, one working, one not. And the Shares are in the AD identical.

Can you tell how this PstRegHelper.GetRealPath Class works? Does ist look in the registry of the client?

And where is that list with network drives you are saying? on the server?

[Rob_Wilcox1]

I can't tell you in great depth, without investigating further, and probably not in a public forum.

However.

It is interesting what you said with regards to the home drive.. Perhaps this will help :

17779 17:23:51.997  [6940] (PstLocatorTask) <LocateRegistryThread:3368> EV-L {LocateRegistryThread.Search} Ignoring home drive since user has multiple profiles

Yes the PST Locator Task is looking at the registry on the remote machine, and in this case has ignored the home drive [which I think it is getting from AD, but again that'd require deeper investigation, and code walk throughs].  Anyway, have a look on this persons machine to see if they do indeed have multiple Outlook profiles.  If they don't need them, then remove the 'spares'.  Does the working user have multiple Outlook profiles?

[twiinart]

can this been deactivated? I meen, can it be deactivated, that the home drive is ignored? Or can it overridden?

I need a solution for this, i can not check and delete (if needed) the outlook profiles for 500 users.

[twiinart]

Anybody? In the meantime I found out that the multiple profiles are generated from Enterprise Vault itself.

If I delete the Enterprise Vault profile under HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles (e.g. EnterpriseValut_5788_9727) then the registry scan finds the appropriate pst files.

There must be a function or parameter to define the home path.....

Any further help is appreciated.

[Rob_Wilcox1]

Sorry I am pretty much put of ideas.