Archive Troubleshooting - Exchange Compliance Archiver Agent

Table of Contents

Filtering data that consistently fails

Symptom

Some items are displayed consistently in the Items That Failed list when running the Job History Report. These items are locked by the operating system or application and cannot be opened at the time of the backup operation.

Resolution

Filter the files that appear in the Items That Failed list consistently on the backup Job History Report, and then exclude those files or folders during backup to avoid backup failure.

Backup process remains in a pending state

Symptom

The backup processes might remain in pending state because of incorrect permissions set at the service account level.

Resolution 1

Applies to: Exchange 2010 or 2013 for Public Folder agents, and Exchange 2010 or later for Mailbox agents.

If you create a service account manually, it could result in incorrect permission settings. However, you can run the following script on the client machine that has the Exchange agent installed on it to create a service account automatically.

Before you begin:

  • Make sure that you have full administrator privileges.
  • Make sure that the user profile is a member of the Organizational Management Group in Active Directory.
  1. Start Windows PowerShell and navigate to the C:\Program Files\software_installation_path\Base.
  2. Run the script.

    PS C:\Program Files\software_installation_path\Base> .\Service_Account.ps1 -u <user_name> [-d <database_name>] -c <client_name> -s <server_name>

    Where:

    -u is the User Name

    -d is the Database Name

    -c is the Client Name

    -s is the Server Name

  3. Type the password for the New User when you are prompted.

    When a service account is created, a message appears.

    The user has been added to the Organization Management Group. The Organization Management Group has been granted the Full Control permission. The user has been added to the Local Administrator Group. The user has been granted a Full Control permission to access all the databases. The user has been granted a Full Access permission to access the user mailbox. Congratulations! A service account with a username "XXXX" has been configured successfully!

  4. Verify that the new service account was created.
    1. Start the Windows PowerShell.
    2. Type the following command:

      C:\Program Files\software_installation_path\Base> .\Verify_ServiceAccount.exe

    3. At the Enter the path prompt, type:

      Verify_ServiceAccount.ps1

    4. At the Enter the username prompt, type the username of the service account.

      For example, proxy2010admin.

    5. At the Enter the computer prompt, type the name of the computer where the agent is installed.

      For example, proxy2010.

    6. At the Enter the server prompt, type the name of the Exchange server.

      For example, exvm2010.

    7. Optional: At the Enter the group, type the name of the group.

      The verification report appears on the screen. When the service account it created successfully, the report includes information similar to the following sample.

      Verify a service account with a username "proxy2010admin" for Exchange Server 2010

      Setting Configured
      Organization Management Group member YES
      Full Control permission is granted to the group YES
      Local Administrator Group member YES
      Receive-As permission for all the databases YES
      Full Access permission for the user mailbox YES
      RCAMaxConcurrency N/A
      RCAPercentTimeInMailboxRPC N/A
      RCAPercentTimeInAD N/A
      RCAPercentTimeInCAS N/A

      Service Account is configured: YES

      64 bit Outlook is installed: YES

      The latest version of the installed 64 bit outlook is : 14.0

      32 bit Outlook is installed: NO

Resolution 2

Make sure that the service account has full access rights to all mailboxes on the server as described in Assigning Full Access to Service Accounts.

Multiple jobs are failing with profile errors

Symptom

Multiple jobs will fail with profile errors when there is one profile for more than one job.

Resolution

Enable the following additional setting to create job-specific profiles:

  1. From the CommCell Console, expand Client Computers.
  2. Right-click the appropriate client, and then click Properties.

    The Client Computers Properties dialog box appears.

  3. Click Advanced.

    The Advanced Client Properties dialog box appears.

  4. Click the Additional Settings tab.
  5. Click Add.

    The Add Additional Settings dialog box appears.

  6. In the Name box, type CreateProcessSpecificProfile.
  7. From the Category list, select ExchangeArchiver.
  8. In the Value box, type 1 to enable or 0 to disable the setting.
  9. Click OK.
  10. From the CommCell Console, navigate to client | Exchange Mailbox | defaultBackupSet.
  11. Right click the subclient and click Backup.
  12. Select Full as backup type and Immediate to run the job immediately.
  13. Click OK.

    You can track the progress of the job from the Job Controller or Event Viewer window.

Automatic profile creation is failing

Symptom

Automatic profile creation process is failing as the service account name is not unique and have similar starting series.

Resolution

It is recommended to make the service account name unique for the process of auto discovery. It should not have similar starting series as any other account. Follow the steps given below to verify this manually:

  1. Use Manual Profile Creation to create a new profile.
  2. Enter the service account name and click Check Name.
  3. If many names are displayed, it is recommended to change the service account name.

Unable to log on to Microsoft Information Store or profile creation is failing

Symptom

For Exchange Server 2010 you will not be able to log on to Microsoft Information Store and profile creation may also fail, if there is a mismatch in the Exchange Server name and the Exchange Server name specified in the agent properties that has the Client Access Role installed.

Resolution

For Exchange Server 2010 verify that the Exchange Server name specifed in agent properties has the Client Access Role installed. In case the Exchange Server does not have the Client Access Role specified,  point to another server with the client access role installed on it.

  1. From the CommCell Console, expand Client Computers.
  2. Right-click the appropriate client, and then click Properties.

    The Client Computers Properties dialog box appears.

  3. Click Advanced.

    The Advanced Client Properties dialog box appears.

  4. Click the Additional Settings tab.
  5. Click Add.

    The Add Additional Settings dialog box appears.

  6. In the Name box, type sCASServerName.
  7. In the Value box, type a CAS server name (for example, Ex2010CASR2).

    The CAS server is used to create the profile.

  8. Click OK.

Client Access Server (CAS) name is deleted when profile logon fails

Symptom

If a profile logon fails during the backup and archiving process, the Client Access Server (CAS) name changes. This occurs regardless of whether it is the default CAS name, or the CAS name defined in the sCASServerName additional setting (Exchange 2007 and Exchange 2010) or in the sHTTPProxyServer registry key (Exchange 2013 for Public Folder agents, and Exchange 2013 or later for Mailbox agents).

Resolution

Enable the nDontDeleteExchangeAutoDiscoverKeys additional setting to keep the CAS name intact.

  1. From the CommCell Browser, expand Client Computers.
  2. Right-click the client, and then click Properties.

    The Client Computer Properties dialog box appears.

  3. Click Advanced.

    The Advanced Client Properties dialog box appears.

  4. Click the Additional Settings tab.
  5. Click Add.

    The Add Additional Settings dialog box appears.

  6. In the Name box, type nDontDeleteExchangeAutoDiscoverKeys.
  7. In the Value box, type 1.
  8. Click OK.

Process hangs while enabling or disabling MAPI

Symptom

Process hangs while enabling/disabling MAPI because the Exchange client is unable to connect with the Global catalog.

Resolution 1

Create a new profile using Enable Referral Option by following one of the options mentioned below:

Open the command prompt.

Type C:\>gcreconnect.

Usage: GCReconnect [-?] -m mailbox -s server [-e] [-x] [-n name] [-l] [-r] [-w]

Options:

-m mailbox Specifies the mailbox to log on to.

-s server Specifies the Exchange server where the mailbox resides.

-e Enable referral and reconnect. If referral and reconnect are not enabled, MAPI will connect directly to the Exchange server for name lookup.

-x Enable additional referral and reconnect settings for Exchange 2007 Implies-e.

-n name Specifies a name to resolve with ResolveName. If not specified, QueryIdentity will be used instead.

-l Loop over MAPILogonEx. Will log on and off repeatedly until key is pressed.

-r Loop over ResolveName. Will log on once and do name lookup repeatedly until key is pressed. Requires -n, not valid with -l.

-w Wait for keyboard input before and after creating and configuring profile.

-? Displays this usage information.

Resolution 2

Delete the existing profile and follow the steps given below:

  1. From the CommCell Console, expand Client Computers.
  2. Right-click the appropriate client, and then click Properties.

    The Client Computers Properties dialog box appears.

  3. Click Advanced.

    The Advanced Client Properties dialog box appears.

  4. Click the Additional Settings tab.
  5. Click Add.

    The Add Additional Settings dialog box appears.

  6. In the Name box, type enableReferral.
  7. In the Value field, enter 1 to display the list of attachments in the message body.
  8. Click OK.
  9. Click OK.
  10. Click OK.
  11. Restart the services on the client computer.

Error during the installation of MAPI CDO on Exchange 2003

Symptom

If you try to install MAPI CDO on Exchange 2003, you may encounter error messages during installation. This is because of the lack of compatibility between MAPI CDO and Microsoft Exchange Server 2003.

Resolution

It is recommended to uninstall MAPI CDO and install MAPI by following the steps given below:

On Exchange Server:

  1. Navigate to the system32 folder.
  2. Run FixMapi.
  3. Uninstall old mapicdo.
  4. Restart the computer.
  5. Verify the presence of mapi32.dll and msmapi32.dll and rename them.

Symptom

On the Proxy Computer that has Outlook installed, in case there are any MAPI issues, follow the steps given below:

  1. Uninstall earlier mapicdo if any.
  2. Restart the computer.
  3. Install Outlook.
  4. Navigate to the system32 or the syswow64 folder.
  5. Run FixMapi.
  6. Restart the computer.

Microsoft MAPI version error

Symptom

During Outlook installation, you might encounter a MAPI version error. This is because two MAPI versions cannot coexist.

Resolution

The MAPI version error may occur if you have a 32-bit Outlook version and you are trying to install a 64-bit Outlook version. This is because the 64-bit MAPI and 32-bit MAPI cannot coexist on the same computer. We recommended that you uninstall one of the versions of Outlook.

Error Message: MAPI_E_FAIL_ON_PROVIDER (8004011d)

Symptom

This error appears if the Outlook profile is in the Cache mode.

Resolution

  1. On the client computer, open the Control Panel and click the Mail icon.
  2. Open the <Profile>, click the email account and select the related <Account>.
  3. Click Change.
  4. Clear the Use Cached Exchange Mode box if it is selected.

Error Message: extask.cpp:HrInitialize(1342) Initializing MAPI Subsystem

Symptom

This error appears when a backup process stops responding because of the MAPI CDO conflict.

Resolution 1

  1. On the client computer navigate to the following files:

    Mapi32.dll

    msmapi32.dll

    emsmdb32.dll

  2. Right-click the above mentioned files, click Properties and click the Details tab.
  3. Click the Version tab and verify that all of the files point to Outlook.

Resolution 2

On the Proxy Computer:

  1. Uninstall old mapicdo.
  2. Restart the computer.
  3. Install Outlook.
  4. Navigate to the system32 or the syswow64 folder.
  5. Run FixMapi.
  6. Restart the computer.

Note that running FixMapi will solve the above mentioned error on the proxy computer.

On Exchange Server:

  1. Uninstall old mapicdo.
  2. Restart the computer.
  3. Verify the presence of mapi32.dll and msmapi32.dll and rename them.
  4. Install Outlook.

Error Message: MAPI_E_NETWORK_ERROR

Symptom

This error appears when there is no connectivity with Client Access Role server for Exchange 2010 and for Mailbox Role Server for Exchange 2007.

Resolution

Make sure that Exchange 2010 is connected to the Client Access Role Server. In the case of Exchange 2007, make sure it is connected to the Mailbox Role Server.

Error Message: Cannot open folder for Mailbox “username” Error:MAPI_E_NOT_FOUND (0x8004010f)

Symptom

This error appears when the backup processes remains in a pending state and the extended right on your service account is not set to Receive As on all databases on the Exchange Server.

Resolution 1

  1. Open the profile in Outlook, it should open successfully.
  2. Use MFCMapi utility to open the service account profile.
  3. Click Session | Logon and click Display Stores.
  4. Select the service account profile.
  5. Click the MDB menu and click Open Other Users Mailbox.
  6. Click the Mailbox and select the default flags to open it.
  7. Navigate to the tree level for Top of Information Store, browse mailbox folders.

If there are no permission errors through the above mentioned process, then the service account should have the extended right set to Receive-As on all databases on the Exchange Server as follows:

Resolution 2

  1. Using ADSIEDIT, navigate to Configuration | Services | Microsoft Exchange.
  2. Right-click your organization name, click Properties | Securities and click the Advanced tab.
  3. Click Edit to modify the permissions set for Organization Management group.
  4. Click to select Full Control, Receive As and Send As permissions and wait for replication. 
  5. Click the Effective Permissions tab and select the name of the backup account.
  6. The backup account should display the following as selected:
    • Full Control
    • All Extended Rights
    • Send As
    • Receive As
  7. Start the PowerShell and type the following to add the backup account so it has full control over all the databases:

    Get-MailboxDatabase -server (server name) | Add-ADPermission -user "backup account" -ExtendedRights Receive-As

Resolution 3

For Exchange 2010 and 2007, verify that the Cache mode is disabled on the Service Account. For more details, on Microsoft permission settings, see Allow Mailbox Access.

Error Message: Could not open the Exchange Private Message Store with Profile ExchAdm (E_FAIL (0x80004005))

Symptom

This error appears when the extended right on your service account is not set to Receive As for all databases on the Exchange Server.

Resolution

  1. Open the profile in Outlook, it should open successfully.
  2. Use MFCMapi utility to open the service account profile.
  3. Click Session | Logon and click Display Stores.
  4. Select the service account profile.
  5. Click the MDB menu and click Open Other Users Mailbox.
  6. Click the Mailbox and select the default flags to open it.
  7. Navigate to the tree level for Top of Information Store, browse mailbox folders.
  8. If there are no permission errors through this process, the service account should have the extended right set to Receive-As on all databases on the Exchange Server.

Error Message: Error Code [28:153]: The Mailbox profile used by this product is invalid. Please try using MDBVU, Outlook or any other exchange client to check if the profile works correctly

Symptom

This error appears when the extended right on your service account is not set to Receive As for all databases on the Exchange Server.

Resolution

  1. Open the profile in Outlook, it should open successfully.
  2. Use the MFCMapi utility to open the service account profile.
  3. Click Session | Logon and click Display Stores.
  4. Select the service account profile.
  5. Click the MDB menu and click Open Other Users Mailbox.
  6. Click the Mailbox and select the default flags to open it.
  7. Navigate to the tree level for Top of Information Store, and then browse the mailbox folders.
  8. If there are no permission errors through this process, the service account should have the extended right set to Receive-As on all databases on the Exchange Server.