The username for the Backup Exec service account does not have administrator rights on the Central administration server when attempting to promote a Standalone media server to a Managed Backup Exec Server.

Problem

The username for the Backup Exec service account does not have administrator rights on the Central administration server when attempting to promote a Standalone media server to a Managed Backup Exec Server.

Error Message

The user name <Backup Exec service account> does not have administrator rights on the central administration server <CAS Server Name>. Check the credentials and try again.

Cause

Windows DCOM and WMI Security related issues.
The following Windows Events may be present on the CASO and MBES event logs:

CASO (Central Admin Server) Event Log:

Event ID: 10036
 

Log Name:      System
Source:        Microsoft-Windows-DistributedCOM
Event ID:      10036
Task Category: None
Level:         Error
Keywords:      Classic
Description:
The server-side authentication level policy does not allow the user <domain>\<user> SID (<SID>) from address x.x.x.x to activate DCOM server. Please raise the activation authentication level at least to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY in client application.
 

MBES (Managed Backup Exec Server) Event Log:

Event ID: 10037
"Application %1 with PID %2 is requesting to activate CLSID %3 on computer %4 with explicitly set authentication level at %5. The lowest activation authentication level required by DCOM is 5(RPC_C_AUTHN_LEVEL_PKT_INTEGRITY). To raise the activation authentication level, please contact the application vendor."

Event ID: 10038
"Application %1 with PID %2 is requesting to activate CLSID %3 on computer %4 with default activation authentication level at %5. The lowest activation authentication level required by DCOM is 5(RPC_C_AUTHN_LEVEL_PKT_INTEGRITY). To raise the activation authentication level, please contact the application vendor." (%1 – Application Path, %2 – Application PID, %3 – CLSID of the COM class the application is requesting to activate, %4 – Computer Name, %5 – Value of Authentication Level)

Solution

For Windows 2022, 2019, 2016, and 2012R2 operating systems 
Install Windows Patch KB5004442.

Or

Run Windows Update to Apply All the latest Windows Updates.
 

Please note that this article references sites not owned or maintained by Veritas and, as such, Veritas is not responsible for the content portrayed on such sites, including any revisions to or deletions of content or third-party software on which this article relies. User is responsible for conducting all necessary due diligence prior to following the instructions described in this article.