DISM (and other) error "A required privilege is not held by the client." on all domain computers.

Question

All domain computers have this problem.

This started just recently when I installed a copy of Windows Server VNext build 25921 on a development server. At first I assumed that it was just a bug with that insider build until I tried to mount a Windows image on my workstation. Now even running the Windows installer fails. I already checked the GPO and there is nothing wrong, and nothing has changed between then and now. Even though I am able to work around this problem with psexec, it still breaks my deployment servers. I have scanned through the audit logs and nothing is showing.

Current GPO: Current GPO: https://infinityofficial-my.sharepoint.com/:b:/g/personal/infiniplex_infinityofficial_net/Ef-yAFDSCmRDnHiJerFv7EMBMYwHVDa8QdRDbE28D_3UFg?e=PEd44C

Password: "33A44DFD25DDD3E3C2924CF7A559FF293C3A47D4"

Answer 1

Hello there,

It seems you cannot find anything in the Audit logs , Have you checked the Event Viewer for any trace?

If you cannot find anything in Event Viewer I would suggest you use tools like Procmon to find the root cause for this behaviour.

On the target computer, check the local security policies (secpol.msc) to ensure that user rights assignments and privileges are correctly configured. Look for any policies that might be blocking the necessary privileges.

If you experience the “a required privilege is not held by the client” issue while trying to copy a file to the root folder, you can try to fix it by copying the particular file with Command Prompt.

Step 1: Press Windows + R to open the Run dialog. Type cmd in the text box and then press Ctrl + Shift + Enter to open the elevated Command Prompt.

Step 2: Type copy [address of the source file] [Destination address] in the panel and press Enter.

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer–