We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda ArchiveOne

How can a customer resolve the MAPI error 0x8004010f when retrieving messages or running policies?

  • Type: Knowledgebase
  • Date changed: 8 months ago
Solution #00007373

Scope: 

ArchiveOne Enterprise, all versions

Answer:


SYMPTOMS

This MAPI error is returned when the ArchiveOne service account attempts to log into a user's Exchange mailbox. There can be a number of different symptoms associated with this issue as there are many actions requiring access to a user's mailbox. For instance, you may observe that retrieval of archived messages fails and that no messages are archived when an archiving policy is run against the affected mailbox.

Looking in the log files when the ArchiveOne service account carries out an action requiring it to login to another user's mailbox, you will see lines similar to:

ProcessStore::ProcessOneMailbox:OpenEntry for root folder failed 8004010f

BaseConfigMessage::OpenRootFolder OpenEntry failed 0x8004010f

CAMComplianceServer::GetMessage failed to open mailbox root folder for retrieval, error: 0x8004010f

Or in the AOneSearch log:

RetrieveMessage.OpenMessage.SearchIndexGetURLMessage2Audit SearchIndexGetURLMessage2Audit(A), status=ACSS_FAIL


ROOT CAUSE

The login failure is typically due to a permissions issue. The ArchiveOne service account requires Full Access permissions over any mailbox you wish to archive. These permissions may be overwritten/removed inadvertently/no longer correctly inherited, for instance when you migrate a mailbox.

To check the Full Access permission in the Exchange Management Shell:
  1. Open the Exchange Management Shell.
  2. Type: Get-MailboxPermission -Identity UserName -User ArchiveOneServiceAccount
    where UserName is the account name for the affected user and ArchiveOneServiceAccount is the ArchiveOne service account name (by default, ArchiveOneAdmin).
  3. Execute the command and the output should show that the Full Access permission is present on the user's mailbox for the ArchiveOne service account. You can see in the output below that the mailbox in question (AntheaAdmin) has inherited the FullAccess permission (AccessRights = FullAccess, IsInherited = True, Deny = False).



RESOLUTION

To apply Full Access permissions via the Exchange Management Shell, for on-premises mailboxes:
  1. Open the Exchange Management Shell.
  2. Type: Add-MailboxPermission -Identity UserName -User ArchiveOneServiceAccount -AccessRights FullAccess
    where UserName is the account name for the affected user and ArchiveOneServiceAccount is the ArchiveOne service account name (by default, ArchiveOneAdmin).
  3. Execute the command and confirm this completes successfully.
  4. To apply to multiple mailboxes, output can be piped to the Add-MailboxPermission cmdlet. For example, the Get-Mailbox cmdlet can be used to select multiple users on a specified server:
    Get-Mailbox -Server ServerName | Add-MailboxPermission -User ArchiveOneServiceAccount -AccessRights FullAccess
For mailboxes hosted in 365:
  1. Follow the instructions here: https://campus.barracuda.com/product/archiveone/article/ArchiveOne/ExchangeOnlinePermissions/

Now retest the action which was failing (for example, running an archiving policy against the mailbox) and confirm the error is now resolved.


Link To This Page: