Access to the path '\\ServerName\EndpointName\YYYY\MM\DD\BlobId' is denied. (Source: Profile.ProviderRetrieveBinary) (4288847)

When opening a page whose content has been externalized, the "Web page cannot be found" message is displayed. Or, files are inaccessible and cannot be downloaded within a library. An error message similar to the following can be seen in the verbose ULS logs:

Access to the path '\\ServerName\EndpointName\YYYY\MM\DD\BlobId' is denied. (Source: Profile.ProviderRetrieveBinary). User Name: NT AUTHORITY\NETWORK SERVICE

An account with the necessary permissions to access the storage device has not been defined as the service account being used by the application pool. The NetworkService account is a predefined local account used by the service control manager. It is not recognized by the security subsystem, has minimum privileges on the local computer, and behaves as a computer on the network.

Make sure that you have full control permissions in the file share or storage device specified for the web application pool account, along with the db_owner role assigned to it in the StoragePoint and SharePoint content databases. Note: The same should be true for the Timer Job service account, as well.

If the application pool account is running as NetworkService, please do the following:

1. Open IIS Manager, expand the server and select Application Pools.
2. Right-click on the application pool associated with the affected web application, then select Advanced Settings.
3. Select Identity in the Process Model section and click on the ellipsis button.

   

4. Select Custom account, click Set and specify the username and password of a service account, which has the necessary permissions to access the file share or storage device.

   

5. Click OK to close all the windows.
6. Perform an IISRESET on all web front-end servers in the farm.