This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 72%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELC%3C/text%3E%3C/svg%3E)
I am trying to install SCOM 2019 Management Server.
The installer installed half way and threw this error and rollback.
Error: :PopulateUserRoles: failed : Threw Exception.Type: System.UnauthorizedAccessException, Exception Error Code: 0x80070005, Exception.Message: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
Mgt Svr and DB Svr are separated.
Installation account has local admin and SA to DB.
From the logs, the OpsMgr DB and WH DB is created so I don't think is DB account issue. Also for the possibility of TLS 1.0 disabled issue.
We setup TLS 1.2, as per https://learn.microsoft.com/en-us/system-center/scom/deploy-install-web-console?view=sc-om-2019
Still hit the same error.
Any other things we can try?
Hi anonymous userLim95131,
The error clearly states that there's an "Access Denied" to something, start by making sure of the following:
I assume you've configured the TLS according to the documentation here?
How to implement Transport Layer Security 1.2
https://learn.microsoft.com/en-us/system-center/scom/plan-security-tls12-config?view=sc-om-2019
The error is familiar and has been produced on management server installations when TLS 1.0 is disabled and prerequisites for TLS 1.2 are missing, Kevin described a similar case on his blog post (the first under "known issues"), although it is not an "Access Denied" error:
https://kevinholman.com/2019/03/14/scom-2019-quickstart-deployment-guide
I would check that the TLS is configured correctly as it sounds to me that's most likely the culprit, you can check with Kevin's script and his blog post here:
https://kevinholman.com/2018/05/06/implementing-tls-1-2-enforcement-with-scom
----------
(If the reply was helpful please don't forget to upvote or accept as answer, thank you)
Best regards,
Leon
I think it got nothing to do with TLS. We enable TLS 1.0 and still hit the same error.
Did you reboot the servers after reverting everything?
What Windows Server operating system and SQL Server versions are you using?
Also if you have any antivirus software it may be preventing the installation.
Hi Luke,
I think I have an idea...there is something with OS Version of the Server you are installing SCOM on. Either this or the OS Version of your SQL backeend, respectively the lanmguage.
Can you please post here all Details regarding OS version, SQL version, langauge etc in regards to both the SCOM and also the SQL server?
Regards,
Stoyan
Mgt Svr
OS: WS2016, English
Trying to install SCOM 2019
DB Svr
OS: WS 2016, English
SQL 2016 SP1, English
What about any antivirus software on the servers that may be preventing the installation?
I also suggest you upload your whole SCOM installation log to a OneDrive / Google Drive and share the link to the log here.
Log location:
Log name:
Hi Luke,
this seems fine indeed. Can you please verify you have configured all service and user account's permissions as per the SCOM 2019 security matrix:
SCOM 2019 Security Account Matrix
https://kevinholman.com/2020/07/23/scom-2019-security-account-matrix/
What is also inmportant: During the install of the 1st management servers, the account you are suing for the install needs to have local Admin permissions on the SQL server(s). Did you ensure this is the case?
Thanks and Regards,
Stoyan
It could be I use a local account and not a domain account for installation.
I think that could be an issue, especially if your SQL is located remotely, try using a domain user account that has sufficient permissions.
It needs local admin on the servers and sysadmin on the SQL instance.
Yes for the security matrix, I am under the impression that the installer will create the permission as shown in the matrix.
The installation account has local admin on both SQL and Mgt Svr.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(92.8, 31%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
That's correct, the permissions listed in the matrix should be created automatically by the wizard.
However you say the install account has permissions on the SQL server, but does it have permissions in the SQL instance ? It needs to be SA.
Hi Luke,
can you please post more entries from the installation logs, Leon referenced.
You can upload those too, please just make sure you hide all sensitive data like server names, IPs, etc...
Regrads,
Stoyan