IT31878: "ANS5057E ACCESS DENIED" DURING RESTORE IF MICROSOFT "AUDIT REMOVABLE STORAGE" POLICY IS SET

APAR status

• Closed as documentation error.

Error description

• An access denied error may happen when restoring data if the
  following conditions are met:
  
   * The Microsoft Policy  "Audit Removable Storage" is enabled.
  
   * The restore target file system is not the boot drive (usually
      C:).
  
   * The restore target file system is on a disk that is
     hot-pluggable.
  
   * The user account does not have the SE_SECURITY_NAME privilege
    ( display name is "manage auditing and security log" )
  
  
  The error seen is:
      ANS5057E  Access to the specified file or directory is
      denied.
  
  That is due to a  Microsoft restriction.
  
  The Spectrum Protect client documentation page below should
  include a restriction when these conditions exist.
  
  
  https://www.ibm.com/support/knowledgecenter/SSEQVQ_8.1.0/client/
  c_start_consider.html
  
  Spectrum Protect Versions Affected: V7.1 and V8.1 on Windows
       platform.
  
  
  Initial Impact:: Low
  
  Additional Keywords:  TS002297919 policy gpo
  

Local fix

• Possible workarounds include any of these alternatives:
  
   * Enable the "Manage auditing and security logs"
     ( SE_SECURITY_NAME ) privilege for the account.
  
   * Disable "Audit Removable Storage" in the local security
     policy.
  
   * Set the disk so it is not hot-pluggable. For example, if the
     system is a VMware guest, set the VM's "devices.hotplug"
     attribute to "FALSE".
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect Backup-Archive Clients versions 8.1.0,  *
  * 8.1.2, 8.1.4, 8.1.6, 8.1.7, 8.1.8 and 8.1.9                  *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION.                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * This issue is projected to be fixed in the 8.1.10 update to  *
  * the IBM Spectrum Protect Backup-Archive Clients              *
  * documentation.                                               *
  *                                                              *
  * Until this information is published, the associated          *
  * information updates are documented in the V8.1 Documentation *
  * Updates tech note located here:                              *
  * https://www.ibm.com/support/pages/node/713201                *
  *                                                              *
  * You can locate the entry associated with this APAR by using  *
  * the APAR number as a keyword to search the document.         *
  *                                                              *
  * Note: This information is subject to change at the           *
  * discretion of IBM.                                           *
  ****************************************************************
  

Problem conclusion

• The missing
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels