Error "A required privilege is not held by the client" when accessing CLM

Article ID: 2009350 - View products that this article applies to.
Expand all | Collapse all

Symptoms

When clicking on the splash screen for CLM you receive the exception "A required privilege is not held by the client."

Cause

This error can be caused by missing user rights on the CLMWebPool and CLM Authorization Agent accounts.

The configuration wizard for CLM adds the correct user rights for each account, however security privileges can be removed if a policy is being pushed down by a GPO.

Resolution

Log in to the CLM Server with each account and run gpresult /z. 

This will show which security privileges each account has. 

Compare what each account has with what is required using the following article Installing and Configuring CLM 2007 on a Server

Table 18 shows what rights are required for each account. 

 

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.

Properties

Article ID: 2009350 - Last Review: December 14, 2009 - Revision: 2.0
APPLIES TO
  • Microsoft Identity Lifecycle Manager 2007
Keywords: 
KB2009350

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com