I have one user who is able to view all archives that the vault account has rights to. I have checked Active Directory, and can find no references to the admin account in her account and vice versa. Is there a tool to see what rights a user account has in EV?
I re-synched...no luck. I have noticed that this only occurs when the user launches AE from Outlook. Through Outlook, AE opens about 20 archives, but not her archive. When she opens OWA and launches AE, she only sees her archives.
I have cleared the cache and she can still see and browse all the archives. I have logged into a test PC with her account and have reproduced the issue. Basically, instead of using her credentials when launching AE through Outlook, she is using the VSA. I have checked her account in AD (Exchange Advanced, Security & Member Of) and can find no reference to a domain admin account or the VSA.
The user only sees the archives that have explicit Vault Admin permissions. When I view the archives of a user with explicit Vault Admin permissions, they only see their own archive. After extensive conversations with Symantec tech support and Microsoft tech support, the only resolution is to copy the user's AD account and delete the original account. The test copy account we created does not exhibit the same issues.