Knowledge Base

Edit the Local Security Policy on the machine:

• Go to Start -> Control Panel -> Administrative Tools -> Local Security Policy;
• Browse down to Local Policies -> User Rights Assignment -> and find the following policies:
  • Log on as service
  • Adjust memory quotas for a process
  • Replace a process level token

  

• Double click on the selected policy and click on Add User or Group:

  

• Click Advanced:

  

• Click Find Now and select from list the user that you specify for Acronis services:

  

• Click OK several times to finish applying the policy:

  

• Repeat the steps for the three necessary policies:
  • Log on as service
  • Adjust memory quotas for a process
  • Replace a process level token

(!) If the Add User or Group button is grayed out, then it means that the machine is a part of the domain, and the Replace a process level token policy is defined via domain security settings. In this case, please follow the steps from appropriate section.

Ensure that necessary rights are added to the Acronis Services user in the Domain Security Policy:

• On the domain controller go to Start -> Control Panel -> Administrative Tools -> Domain Security Policy

• Browse down to Local Policies -> User Rights Assignment -> and find the followingA policies:

  • Log on as service
  • Adjust memory quotas for a process
  • Replace a process level token

  

• Double click on the policy, enable the box Define these policy settings and click on Add User or Group:

  

• Do not click Browse – instead manually type the name of Acronis services account and please do not add the computer name before the account, leave it as shown below. Then click OK:

  

• Repeat the steps for the three necessary policies:
  • Log on as service
  • Adjust memory quotas for a process
  • Replace a process level token

The updated policy must be applied to the domain members: either wait for some time – defined for your domain – for the domain policy to be refreshed and applied to all machines; or force domain policy update to be applied immediately on a particular domain machine:

• Go to Start -> Run -> cmd
• Execute the command:

gpupdate /force

Ensure that Replace a process level token right is added to the <DOMAIN>\<Acronis_services_user> (where <DOMAIN> is the name of your domain and <Acronis_services_user> is the user account that you specify for Acronis services) account in the Domain Controller Security Policy:

• On the domain controller go to Start -> Control Panel -> Administrative Tools -> Domain Controller Security Policy;
• Browse down to Local Policies -> User Rights Assignment -> and find the following policies:
  • Log on as service
  • Adjust memory quotas for a process
  • Replace a process level token

  

• Double click on this policy, enable the box Define these policy settings and click on Add User or Group:
• 
• Click Browse -> Advanced;
• Click on Locations and make sure your domain is selected as the location to look for the users;
• Click OK, then click Find now and select the necessary user from the list;
• Click OK several times to finish applying the policy;
• Repeat the steps for the three necessary policies:
  • Log on as service
  • Adjust memory quotas for a process
  • Replace a process level token