1. Add the account for the agent service to the Backup Operators group. We also recommend adding this account to the Administrators group. 
2. Create a group RODC $ Cyber Operators in Active Directory on the main domain controller. Here, RODC stands for the NetBIOS name of the read-only domain controller. Add the account for the agent service to this group.
3. Configure group SID manually:

   1. Find the SID of the Cyber Operators group using the following command:
      Get-ADGroup -Identity '<hostname> $ Cyber Operators' | select SID
      where <hostname> is the name of the RODC

   2. Open Windows Registry Editor, and create a new key in HKLM\SOFTWARE\Acronis\Installer\CreatedUserGroups with name 'Cyber Operators' and value being the SID you found in previous step.

   3. After adding the new key, restart Acronis Service Manager service.

4. Assign the following user rights to the account:
   1. Log on as a service;
   2. Adjust memory quotas for a process;
   3. Replace a process level token;
   4. Modify firmware environment values;

You will find these steps here: Acronis Backup: Adding Necessary Rights

3. If that does not help and the error is the same you should add a new user and grant him the respective privileges and use that user for installation.

1. Add the account for the storage node service to the Backup Operators group. We also recommend adding this account to the Administrators group.
2. Assign the Log on as a service user right to the account.

You will find these steps here: Acronis Backup: Adding Necessary Rights

1. Create a group RODC $ Acronis Centralized Admins in Active Directory on the main domain controller. Here, RODC stands for the NetBIOS name of the read-only domain controller.
2. Configure group SID manually:

   1. Find the SID of the Acronis Centralized Admins group using the following command:
      Get-ADGroup -Identity '<hostname> $ Acronis Centralized Admins' | select SID
      where <hostname> is the name of the RODC

   2. Open Windows Registry Editor, and create a new key in in HKLM\SOFTWARE\Acronis\Installer\CreatedUserGroups with name 'Acronis Centralized Admins' and value being the SID you found in previous step.

   3. After adding the new key, restart Acronis Service Manager service.

3. Additional steps for Acronis Cyber Protect 15:

   1. Create a group RODC $ Acronis ApiGateway Users in Active Directory on the main domain controller.

   2. Configure group SID manually:

      1. Find the sid of Acronis Centralized Admins group using the following command:
         Get-ADGroup -Identity '<hostname> $ Acronis ApiGateway Users' | select SID
         where <hostname> is the name of the RODC

      2. Open Windows Registry Editor, and create a new key in in HKLM\SOFTWARE\Acronis\Installer\CreatedUserGroups with name 'Acronis ApiGateway Users' and value being the SID you found on previous step.

         

      3. After adding the new key, restart Acronis Service Manager service.

4. Add the account for the management server service to the group you have created.
5. Assign the Log on as a service user right to the account.

1. Create a group RODC $ Acronis Remote Users in Active Directory on the main domain controller. Here, RODC stands for the NetBIOS name of the read-only domain controller.
2. Add to this group the users or groups that you want to allow to connect remotely. For example, add the Administrators group to this group.