Please enter search query.
Search <product_name> all support & community content...
Article: 100034367
Last Published: 2017-08-10
Ratings: 0 0
Product(s): Enterprise Vault
Problem
Users are receiving an error when using the Enterprise Vault Search option 'Export->Zip' option:
Error Message
The user receives the error:
Enterprise Vault Search
Export Failed.
Try the operation after some time or contact your Enterprise Vault administrator for more details.
Export Failed.
Try the operation after some time or contact your Enterprise Vault administrator for more details.
A DTrace on the Enterprise Vault server of 'StorageOnlineOpns' and 'W3wp' will show the following lines from the W3wp process:
{EVS} Zip file export started... || User: EVRPSLAB\user1
{EVS} Exception: Access to the path 'C:\Windows\TEMP\EVExport_b909b847-1aef-4f3c-adc2-2b02d4c50a8a.zip' is denied. Info:Zip file export failed.
User: EVRPSLAB\user1
Diag: Type:System.UnauthorizedAccessException ST: at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
at Telerik.Windows.Zip.ZipPackage.CreateFile(String fileName)
at Symantec.EV.Search.Server.Business.ZipExportHandler.Create()
at Symantec.EV.Search.Server.Business.ItemManager.ExportItems(ExportInput input) Inner:None
{EVS} Exception: Access to the path 'C:\Windows\TEMP\EVExport_b909b847-1aef-4f3c-adc2-2b02d4c50a8a.zip' is denied. Info:Export failed.
User: EVRPSLAB\user1
Diag: Type:System.UnauthorizedAccessException ST: at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
at Telerik.Windows.Zip.ZipPackage.CreateFile(String fileName)
at Symantec.EV.Search.Server.Business.ZipExportHandler.Create()
at Symantec.EV.Search.Server.Business.ItemManager.ExportItems(ExportInput input) Inner:None
{EVS} End ItemManager::ExportItems() || User: EVRPSLAB\user1
{EVS} End ContentManagementService::ExportItems() || User: EVRPSLAB\user1
{EVS} Failed to get exported files bytes from service. || User: EVRPSLAB\user1
{EVS} Export failed. Reason: Access to the path 'C:\Windows\TEMP\EVExport_b909b847-1aef-4f3c-adc2-2b02d4c50a8a.zip' is denied. || User: EVRPSLAB\user1
{EVS} Exception: Access to the path 'C:\Windows\TEMP\EVExport_b909b847-1aef-4f3c-adc2-2b02d4c50a8a.zip' is denied. Info:Zip file export failed.
User: EVRPSLAB\user1
Diag: Type:System.UnauthorizedAccessException ST: at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
at Telerik.Windows.Zip.ZipPackage.CreateFile(String fileName)
at Symantec.EV.Search.Server.Business.ZipExportHandler.Create()
at Symantec.EV.Search.Server.Business.ItemManager.ExportItems(ExportInput input) Inner:None
{EVS} Exception: Access to the path 'C:\Windows\TEMP\EVExport_b909b847-1aef-4f3c-adc2-2b02d4c50a8a.zip' is denied. Info:Export failed.
User: EVRPSLAB\user1
Diag: Type:System.UnauthorizedAccessException ST: at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
at Telerik.Windows.Zip.ZipPackage.CreateFile(String fileName)
at Symantec.EV.Search.Server.Business.ZipExportHandler.Create()
at Symantec.EV.Search.Server.Business.ItemManager.ExportItems(ExportInput input) Inner:None
{EVS} End ItemManager::ExportItems() || User: EVRPSLAB\user1
{EVS} End ContentManagementService::ExportItems() || User: EVRPSLAB\user1
{EVS} Failed to get exported files bytes from service. || User: EVRPSLAB\user1
{EVS} Export failed. Reason: Access to the path 'C:\Windows\TEMP\EVExport_b909b847-1aef-4f3c-adc2-2b02d4c50a8a.zip' is denied. || User: EVRPSLAB\user1
Cause
Exporting to Zip from Search requires that the server's 'Users' group object has the appropriate permissions on the Windows Temp folder (default location: C:\Windows\Temp), in some environments the 'Users' object is only granted 'Read & execute, List folder contents, and Read' permissions:
However the Export operation is creating a file under the security context of the User making the request and needs at least 'Create files / write data' permission.
Solution
At a minimum the Enterprise Vault Server's 'Users' group object needs three permissions to allow the export process to succeed:
Traverse folder / execute file
Create files / write data
Create folders / append data
Create files / write data
Create folders / append data
