Unable to Zap mailbox - ev 11/exch 2013cu9

[val_0]

Greenfield Exchange 2013 CU9 with EV 11.0.1, only 3 test mbx exist so no special configuration. Everything works fine except that one of the test mailboxes refused to accept any changes to the policy. Tried to ZAP it but running into an issue below. Exchange 2013 DAG - 2 CAS/2MBX (no server names on the cert).

EVPM: Exchange/CAS server name/DB service mbx account (not vault admin account)/location of the zip.ini

Error: 

Creating privileged MAPI session ...
Error (0x80070057) creating privileged MAPI session against Exchange Server CAS server name.

DTrace:

353    10:05:28.566     [6596]    (EVPM)    <3240>    EV:M    {CMailboxHelper::CreateProfileAndSessionEx:#819} Setting up MAPI profile [VaultMbxAgent-labnec02-3240-1439222728-566-0-0]
354    10:05:28.566     [6596]    (EVPM)    <3240>    EV:L    {CMailboxHelper::CreateProfileAndSessionEx:#822} Creating the MAPI profile...
355    10:05:28.566     [6596]    (EVPM)    <3240>    EV:L    {CMailboxHelper::CreateProfileAndSessionEx:#839} Creating the message service (if it doesn't already exist)...
356    10:05:28.566     [6596]    (EVPM)    <3240>    EV:L    {CMailboxHelper::CreateProfileAndSessionEx:#847} Using proxy server name [], certificate principal name [] and SSL [False] for Exchange server [CAS server name][Microsoft Exchange Server 2013]
357    10:05:28.566     [6596]    (EVPM)    <3240>    EV:L    {CExchangeVersion::IsExchange2013orAbove:#214} Exchange 2013 or greater: [True]
358    10:05:28.566     [6596]    (EVPM)    <3240>    EV:L    {ExchangeConnectionPointInformation::IsValid:#65} Invalid Exchange connection point information, proxy server name [], certificate principal name [] and authentication [0x0]
359    10:05:28.566     [6596]    (EVPM)    <3240>    EV:L    {EVMAPIProfileNameWithAutoDelete::DeleteProfile:#458} Deleted profile, Name: [VaultMbxAgent-CAS server name-3240-1439222728-566-0-0]
360    10:05:28.566     [6596]    (EVPM)    <3240>    EV:H    {CMailboxHelper::CreateProfileAndSessionEx} (Exit) Status: [The parameter is incorrect.  (0x80070057)]
361    10:05:28.566     [6596]    (EVPM)    <3240>    EV:M    {CMailboxHelper::CreateProfileAndSessionAndOpenMailbox:#1055} Failed to create profile and session for server CAS server name
362    10:05:28.566     [6596]    (EVPM)    <3240>    EV:M    {CMailboxHelper::CreateProfileAndSessionAndOpenMailbox:#1056} Error being returned : 0x80070057

[TonySterling · Accepted solution]

You could try setting the DS Server registry key:

https://support.microsoft.com/en-us/kb/319206

To force Outlook to use a pre-defined global catalog server, use the following steps to set the following special registry parameter to point to the Fully Qualified Domain Name (FQDN). Doing this over-rides any setting in the MAPI profile. 

1. Click Start, and then click Run.
2. In the Open box, type regedit.exe, and then click OK.
3. Locate and then click the following key in the registry:
   HKEY_CURRENT_USER\Software\Microsoft\Exchange\Exchange Provider 
   
   Note You may have to create the registry path.
4. On the Edit menu, click Add Value, and then add the following registry value:
   Value name: DS Server 
   Data type: REG_SZ (string) 
   Value data: FQDN of the global catalog server 
5. Quit Registry Editor. If Outlook stops responding after you set the closest global catalog server or set a specific global catalog server, Outlook returns to the DSProxy process on the Exchange 2000 server and requests a new referral. The following are two possible limitations if you configure Outlook to a specific global catalog server:

Also see, 

How to configure Enterprise Vault to use multiple Global Catalog Servers​

 http://www.symantec.com/docs/TECH179806