There is an unsaved comment in progress. You will lose your changes if you continue. Are you sure you want to reopen the work item?
No capture of deletion info, no log info, Event 6875 error.
In SharePont 2010 multi server farm. I have installed the tool based on the User Guide (using PowerShell commands). Have created a directory on a non-system drive on each server (D:\SPSiteRecycleBackup) and have updated the configuration.xml files as instructed.
I also created a directory for the log files (D:\SPSiteRecycleBackup\Logs).
I also added the following entry to the web.config files <safecontrols> <SafeControl Assembly="Microsoft.SharePoint.Site.RecycleBin, Version=126.96.36.199, Culture=neutral, PublicKeyToken=98e95e81f8e48206" Namespace="Microsoft.SharePoint.Site.RecycleBin"
TypeName="*" Safe="True" />
The Site Collection and Sub Sites are still deleted fine. However there is no Capture of deletion information or Logs and I am getting the following error:
Event 6875, SharePoint Foundation
Error loading and running event receiver Microsoft.SharePoint.Site.RecycleBin.DeleteEventReceiver in Microsoft.SharePoint.Site.RecycleBin, Version=188.8.131.52, Culture=neutral, PublicKeyToken=98e95e81f8e48206. Additional information is below.
: The source was not found, but some or all event logs could not be searched. Inaccessible logs: Security.
Looks like the user for this event is NT AUTHORITY\IUSR
I validated that the the WSS_ADMIN_WPG, WSS_RESTRICTED_WPG, and WSS_WPG local groups on the server were correctly populated.
Any Ideas on how to resolve this? What App Pool does the tool use/impersonate when it runs?