An odd issue with the EV permissions

[Anna_Bool]

Hi All,

I have the something going with the EV archive explorer and the search permissions of the users.

This is a new installation of EV 10.0.3 for exchange 2010 archiving (2 exchange servers are currently set)

Five users are currently enabled for archiving

The issue is: users are seeing other user's archives via the archive explorer and the search.

The users are definitely DO NOT have permissions on each other’s mailboxes

Also, tried to zap the mailbox permissions with the following syntax : http://www.symantec.com/business/support/index?page=content&id=TECH44818 and then   synchronize the mailboxes again (via the properties of the archive task) when both of this options in the Mailbox Policy are set to "Off" 

Inherited permissions-

Synchronize folder permissions-

 and had the same result

 There is not a browser or the archive explorer cached. Performed KB  http://www.symantec.com/business/support/index?page=content&id=TECH66784

 Is there any  known issue with the archive explorer permissions?

Am i missing something?

Thanks for any advise

Anna

[TonySterling]

Have you used PermissionBrowser yet to see what permissions are on the archive?

Running Permission Browser

Article:HOWTO57035

|

Created: 2011-08-01

|

Updated: 2013-07-12

|

Article URL http://www.symantec.com/docs/HOWTO57035

Also, have you verified their Default and Anonymous permissions on the mailboxes?

When using Archive Explorer, users are able to see other user's vaults.

Article:TECH126985

|

Created: 2010-01-11

|

Updated: 2010-01-29

|

Article URL http://www.symantec.com/docs/TECH126985

[Anna_Bool]

Thank you for your reply

Unfortunately the Permission Browser only shows the owner

Also - the folder permissions within the outlook are only for the Default and Anonymous

[TonySterling]

What are the permissions for default and anon set to?

[A_J1]

Hello Anna,

Did you check whether the user have provided delegate permission from Outlook.

Could you please provide a screenshot of archive explorer..

I guess you have confrimed that we don't have any permission provided on the archive.

After Zapping the user, when you perfrom synchronize do not select Folder hierarchy and permission and then see whether the issue still persists..

[Anna_Bool]

Hi,

There is not delegated permissions seen in the outlook

No permissions provided on the archive

After zapping the user - she doesn’t see herself, but still see the users that she doesn’t supposed to see

I will upload a screenshot once I get connected to the customer

[Anna_Bool]

None and none, as default

[TonySterling]

It would also be interesting to see if they only see the folder structure or if they can actually see items in the folders.

[WiTSend]

Typically, when you see this type of issue the issue is permissions set on folders in Outlook by the user.  Check the Calendar folder permissions first, being the most common culprit. 

[TonySterling]

Hi Anna, 

Any update?

Best,