Permissions

[pmw]

Hello,

I am having problems with permissions on additional vaults in EV 8.0.

I have removed all of my permissions to another mailbox from ADUC and from the vault in the VAC, yet still see the other vault in Archive Explorer. I then run a Synchronization (including Folder hierarchy and permissions), refresh Archive Explorer and the other vault access disappears (as you would expect).

However, when I run Archive Explorer the following day I can see the additional vault again?

What is happening overnight?

Any ideas?

Thanks,

Paul.

[MichelZ]

Hi Have a look with "PermissionBrowser.exe" from within the Enterprise Vault Install dir. This may tell you where the permissions come from. Cheers Michel

[MichelZ]

Hi There is a similar thread here: https://www-secure.symantec.com/connect/forums/tough-one-removing-quotautomatically-setquot-permissions It suggests to do this: http://seer.entsupport.symantec.com/docs/280196.htm Cheers Michel

[pmw]

I have already looked at this but don't understand how it will tell me where the permissions are coming from.

Here are the results from the Inbox of the additional mailbox (Ev8Test2), showing my permissions (wrightp);

Control: SE_SELF_RELATIVE | SE_DACL_PRESENT
Owner:
  SID: None
Group:
  SID: None
Dacl:
    Header:
      AceType: ACCESS_ALLOWED_ACE_TYPE
      AceFlags:
    Mask: 0x7F
      DV_DS_CONTROL_FOLDER
      DV_DS_DELETE_FOLDER
      DV_DS_ADD_FOLDER
      DV_DS_READ_FOLDER
      DV_DS_DELETE_ITEM
      DV_DS_ADD_ITEM
      DV_DS_READ_ITEM
    Sid:
      SID: S-1-5-21-991696779-180514507-7473742-1207
      Name: admin
      DomainName: test
    Header:
      AceType: ACCESS_ALLOWED_ACE_TYPE
      AceFlags:
    Mask: 0x7F
      DV_DS_CONTROL_FOLDER
      DV_DS_DELETE_FOLDER
      DV_DS_ADD_FOLDER
      DV_DS_READ_FOLDER
      DV_DS_DELETE_ITEM
      DV_DS_ADD_ITEM
      DV_DS_READ_ITEM
    Sid:
      SID: S-1-5-21-991696779-180514507-7473742-31830
      Name: user
      DomainName: test

[Paul_Grimshaw]

The permissions can only come from 2 sources:-

1. AD
2. Delegate access within the mailbox