Event ID: 4216 Access denied. User is not in a role that can manage Enterprise Vault PST tasks'. is generated after changing the account for the PST Locator task

Problem

Enterprise Vault 7.0 introduces the Authorization Manager, which provides a flexible framework for integrating role-based access control. It enables administrators who use those applications to provide access through assigned user roles that relate to job functions. Once the logon account is changed from the vault service account the new account will need to be added to the correct PST role.

The following warning and errors will be generated in the Enterprise Vault event viewer log after changing the logon account for the PST Locator Task:

Error Message

Event ID 4216:
Access denied. User is not in a role that allows '{ DIR } Can manage Enterprise Vault PST tasks'
V-437-4216

Event ID 8391:
The EnterpriseVaultDirectoryService object reported an error. General access denied error.
V-437-8391

Event ID 410034:
The task 'PST Locator Task' has stopped due to an error. Task update failed: Failed to contact the directory service, command: UpdateRecord
V-437-410034

Solution

1. Open the Enterprise Vault Administrator's Console.
    
2. Right click on the Directory level and click Authorization Manager. (Figure 1)
   
   Figure 1
   
   

• Expand to the Role Assignments container and select PST Administrator. (Figure 2)
  
  Figure 2
  
  

• Select the Action menu option and click Assign Windows Users and Groups. (Figure 3)
  
  Figure 3
  
  

• Enter the account that is now used to run the PST Locator task and click OK.

• Select File from the menu option and click Exit.

• Select Yes for the prompt displayed " Do you want to save the Authorization Store to the Directory Database? ". (Figure 4)
  
  Figure 4
  
  

• Select OK.

• Close and re-open the Enterprise Vault Administrator Console.

Terms of use for this information are found in Legal Notices.