User attempting Export from Search receive Export Failed error

Article: 100034367
Last Published: 2017-08-10
Ratings: 0 0
Product(s): Enterprise Vault

Problem

Users are receiving an error when using the Enterprise Vault Search option 'Export->Zip' option:
Enterprise Vault Search Export Zip option

Error Message

The user receives the error:
Enterprise Vault Search Export Failed
Enterprise Vault Search
Export Failed.
Try the operation after some time or contact your Enterprise Vault administrator for more details.

A DTrace on the Enterprise Vault server of 'StorageOnlineOpns' and 'W3wp' will show the following lines from the W3wp process:
{EVS} Zip file export started... || User: EVRPSLAB\user1
{EVS} Exception: Access to the path 'C:\Windows\TEMP\EVExport_b909b847-1aef-4f3c-adc2-2b02d4c50a8a.zip' is denied. Info:Zip file export failed.
  User: EVRPSLAB\user1 
    Diag: Type:System.UnauthorizedAccessException ST:   at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
       at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
          at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
             at Telerik.Windows.Zip.ZipPackage.CreateFile(String fileName)
                at Symantec.EV.Search.Server.Business.ZipExportHandler.Create()
                   at Symantec.EV.Search.Server.Business.ItemManager.ExportItems(ExportInput input) Inner:None
{EVS} Exception: Access to the path 'C:\Windows\TEMP\EVExport_b909b847-1aef-4f3c-adc2-2b02d4c50a8a.zip' is denied. Info:Export failed. 
 User: EVRPSLAB\user1 
   Diag: Type:System.UnauthorizedAccessException ST:   at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
      at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
         at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
            at Telerik.Windows.Zip.ZipPackage.CreateFile(String fileName)
               at Symantec.EV.Search.Server.Business.ZipExportHandler.Create()
                  at Symantec.EV.Search.Server.Business.ItemManager.ExportItems(ExportInput input) Inner:None
{EVS} End ItemManager::ExportItems() || User: EVRPSLAB\user1
{EVS} End ContentManagementService::ExportItems() || User: EVRPSLAB\user1
{EVS} Failed to get exported files bytes from service. || User: EVRPSLAB\user1
{EVS} Export failed. Reason: Access to the path 'C:\Windows\TEMP\EVExport_b909b847-1aef-4f3c-adc2-2b02d4c50a8a.zip' is denied. || User: EVRPSLAB\user1

Cause

Exporting to Zip from Search requires that the server's 'Users' group object has the appropriate permissions on the Windows Temp folder (default location:  C:\Windows\Temp), in some environments the 'Users' object is only granted 'Read & execute, List folder contents, and Read' permissions:
Temp Security tab with Users selected showing wrong permisisons
 
However the Export operation is creating a file under the security context of the User making the request and needs at least 'Create files / write data' permission.

Solution

At a minimum the Enterprise Vault Server's 'Users' group object needs three permissions to allow the export process to succeed:
Traverse folder / execute file
Create files / write data
Create folders / append data
Advanced Permission Entry for Temp showing the three options checked.
 
Once the 'Users' object has these three permissions the Export operation from Search will be successful.

Was this content helpful?