Scenario 1

• You are trying to install Acronis cyber protect Agent on a Domain Controller
• Installation fails with the error "Fatal error during installation. Failed to get SID of group '....'" 

 

Example of the Full error message in MSI log

Error 0x2f60003: Failed to get SID of group 'Cyber Operators'.
| line: 0xecbe616098126404
| file: d:\111\inst_supp\msi_supp\custom_actions\users_and_groups\lib\impl\sid_utils.cpp:31
| function: UsersAndGroups::GetGroupSid
| $module: custom_actions_msp_vsa64_s_29805
|
| error 0xfff0: The trust relationship between this workstation and the primary domain failed
| line: 0xbd28fdbd64edb8f8
| file: d:\111\core\common\error.cpp:314
| function: Common::Error::AddWindowsError
| code: 0x800706fd
| $module: custom_actions_msp_vsa64_s_29805
 
{A91863BB-BC88-4A22-B6C6-6A0CAEC50EEF} error 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
1: [19:48:43:003]: PrepareGroups: ErrorReporter::OnError: result = 1 
CustomAction PrepareGroups returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 19:48:43: PrepareGroups. Return value 3.

 

Cause

Lack of user rights on the Domain Controller.

Solution

1. Create a new global admin user, e.g. "Acronis Domain Admin",
2. Assign the user the necessary rights as per the following article
3. Enable "unblock" for the installation file (right mouse click - properties)                                                      
4. Run the installation file as an Administrator
5. Choose the option "Customize installation settings" and specify the new Domain Admin user under "Logon account for the agent service" - "Use the following account".                                                                                                        

 

Scenario 2

• You are trying to install Acronis cyber protect Agent on a Domain Controller
• Machine is a Secondary domain controller and a Primary domain controller exists in the environment
• Installation fails with the error "Fatal error during installation. Failed to get SID of group '....'"
  
  Example of the Full error message in MSI log

  2022-09-15T18:28:52:690+04:00 Operation 'InstallMsiOperation' failed.
  2022-09-15T18:28:52:690+04:00 Error 0x627536: Fatal error during installation. Failed to get SID of group 'Cyber Operators'.
  | line: 0x149cf7058bdb1e20
  | file: d:\487\enterprise\installer\applications\common\logic\installer\installation_result_handlers\msi_installation_result_handler.cpp:122
  | function: BaasInstaller::MsiInstallationResultHandler::OnOperationFinished
  | $module: baas_web_installer_windows_vs_s_30161

   

Cause

The security group 'Cyber Operators' was replicated from the Primary domain controller to the Secondary domain controller and it doesn't have the right IDs.

Solution

1. Remove the security group mentioned in the error message from the current machine where installation fails.
2. Re-run the installation file as an Administrator
3. A new group would be created with the installation.

More information

If the issue persists, follow these Microsoft articles to troubleshoot issues with setting up a secure session with a domain controller:

Microsoft Article 1

Microsoft Article 2