Howdy folks, Background info.... First time posting If I forget anything please forgive me.
Enterprise Vault Version 10.0.4.1189
EV Server 2008R2 SP1
EV Virtual machine connected to EMC VNX storage 8GB RAM QTY 8 - 2.0GHz Xeon Procs
Echange 2010 in a DAG enviroment Exchange version 14.02.0247.005
I have recently went from 3 Exchange DB's to 6 Exchange DB's
three of the new DB's are on a new Hard disk.
We had some challenges with Permissions for normal EMail usage inheriting correctly and the permissions not Automatically set were modified.
My VSA has SEND AS/RECIEVE AS as permissions in ADSI Edit at the DB level
The actual DB's (EDB files) do not have these permissions, but the individual Mail boxes all have correct permissions in Exchange.
THe Archiving Task is currently failed. When I restart the task it will run for about 3 min, I get no Event log errors in the SYMANTEC EV log.
In teh EV Event Log I do get the events at the bottom but not specifially when restarting the Archiving task
In the WINDOWS Application log I get Event ID's 1000 and 1001 copied below
Although I have been the admin of EV for a good bit of time I am not real good with DTRACE and if I need to do one, please point me in a direction that will give me proper command switches and syntax.
In all the timeI've been doing this I've always found the answer because someone has been here before this time I have not found anything soid that has resolved the issue yet.
All other serivces, retriving items from the vault, Journal, etc are functionaing as expected.
EVENT LOGS (windows application)
#1 Event ID 1001
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: ArchiveTask.EXE
P2: 10.0.4.1189
P3: 51dd971a
P4: StackHash_8bec
P5: 6.1.7601.17725
P6: 4ec49b8f
P7: c0000374
P8: 000ce6c3
P9:
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ArchiveTask.EXE_fc9bece17ab244d28ca1902cac9d8255d6635a2d_16dde457
Analysis symbol:
Rechecking for solution: 0
Report Id: 2a05f110-b046-11e3-9fcf-0050568d0009
#2 Event ID 1000
Faulting application name: ArchiveTask.EXE, version: 10.0.4.1189, time stamp: 0x51dd971a
Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec49b8f
Exception code: 0xc0000374
Fault offset: 0x000ce6c3
Faulting process id: 0x1a28
Faulting application start time: 0x01cf4452f82171fc
Faulting application path: C:\Program Files (x86)\Enterprise Vault\ArchiveTask.EXE
Faulting module path: C:\Windows\SysWOW64\ntdll.dll
Report Id: 40d074a2-b046-11e3-9fcf-0050568d0009
EV Event logs items, about 2 hours previous to restarting the Archiving task, and the y do not duplicate when restating the task.
#1 Event ID 29014
Storage DCOM error.
Reason: Access is denied. (0x80070005)
Reference: [Get storage object]
THank you very much!