Error "A required privilege is not held by the client" when accessing CLM

This article has been archived. It is offered "as is" and will no longer be updated.
When clicking on the splash screen for CLM you receive the exception "A required privilege is not held by the client."

This error can be caused by missing user rights on the CLMWebPool and CLM Authorization Agent accounts.

The configuration wizard for CLM adds the correct user rights for each account, however security privileges can be removed if a policy is being pushed down by a GPO.


Log in to the CLM Server with each account and run gpresult /z. 

This will show which security privileges each account has. 

Compare what each account has with what is required using the following article Installing and Configuring CLM 2007 on a Server

Table 18 shows what rights are required for each account. 


Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.

文章 ID:2009350 - 上次审阅时间:12/12/2015 05:28:38 - 修订版本: 2.0

  • Microsoft Identity Lifecycle Manager 2007
  • kbnosurvey kbarchive KB2009350