Patrol Agent Installation failing on Windows server with error in installation logs.

 Below are the error messages in the log file:

SetUserRight:Attempting to Add User Right = [SeTcbPrivilege]
 OpenPolicyAndGetUserAccountSID:szAccountName [iocadmin] szDomainName [mydomain123] ComputerName [mycompuername123]
 GetAccountSid:SystemName [mycompuername] AccountName [patrol]
 OpenPolicyAndGetUserAccountSID:ERROR: USER_RIGHT_ERROR_CANNOT_GET_ACCOUNT_SID LastError = 1332d
 Unable to retrieve the account's SID when attempting to add a user right.
 config_DoUserRight:Error: SetUserRight failed.
 config_DoUserRight:Error: Product = [nt86a] UserRight failed: [/USERRIGHT/ActAsPartOfOS=SeTcbPrivilege]
 _InstallAProduct:Error: [CONFIG] /USERRIGHT/ActAsPartOfOS=SeTcbPrivilege failed for product &PATROL Agent for Microsoft Windows Servers.
 Unable to set userright [/USERRIGHT/ActAsPartOfOS=SeTcbPrivilege] for product [nt86a]. Please refer to install log file for more details.
 _InstallAProduct:Installation of &PATROL Agent for Microsoft Windows Servers aborted.

Whereas when someone tries to install the image using the domain account it would connect to the domain controller and fetch all the privileges..

SetUserRight:Attempting to Add User Right = [SeTcbPrivilege]
OpenPolicyAndGetUserAccountSID:szAccountName [accountname] szDomainName [XXXNA] ComputerName [mycomputername123]
PDC:host_name [myhostname123] server_name [mycomputername003]
IsW2KDC:Enter - domain = [XXXNA]
IsW2KDC:Server name = [\\mycomputername003]
GetAccountSid:SystemName [\\mycomputername001] AccountName [xxxna\patrol]
OpenPolicyAndGetUserAccountSID:SID obtained
config_DoUserRight:Product = [nt86a] UserRight Successful: [/USERRIGHT/ActAsPartOfOS=SeTcbPrivilege]
SetUserRight:Attempting to Add User Right = [SeIncreaseQuotaPrivilege]
OpenPolicyAndGetUserAccountSID:szAccountName [sccountname] szDomainName [XXXNA] ComputerName [mycomputername123]
IsPDC:host_name [myhostname123] server_name [mycomputername003]

Please check if the specific access rights are assigned to the user account while installation.

Example:

1. In the below error the logon as a service rights is missing.

[14:50:09] config_DoUserRight:Error: Product = [nt8664a]  UserRight failed: [/USERRIGHT/LogonAsService=SeServiceLogonRight]
[14:50:09] _InstallAProduct:Error: [CONFIG] /USERRIGHT/LogonAsService=SeServiceLogonRight failed for product &PATROL Agent for Microsoft Windows Servers.
[14:50:09] install_ABook:Error: Installation failed during product [nt8664a]

2. In below error the Act as part of the operating system (SeTcbPrivilege) right is missing.

[16:26:55] config_DoUserRight:Error: Set User Right failed.
[16:26:55] config_DoUserRight:Error: Product = [nt8664a] User Right failed: [/USERRIGHT/ActAsPartOfOS=SeTcbPrivilege]
[16:26:55] _InstallAProduct:Error: [CONFIG] /USERRIGHT/ActAsPartOfOS=SeTcbPrivilege failed for product &PATROL Agent for Microsoft Windows Servers.

By Default, the access rights are provided while installation. Please provide the rights manually in case if any of them is missing.

Refer below document for more details - 

https://docs.bmc.com/docs/display/PA2002/Installation+account

Steps to grant the required permissions:

a. Open the gpedit.msc from the run command (Win + R).

b. Go to Computer Configuration=>Windows Settings=>Security Settings=>Local Policies=>User Rights Assignment.

c. Identify the seven default rights from the below list

d. Make sure the patrol default account is listed against those seven rights.
1. Act as part of operating system
2. Adjust memory quotas for process
3. Debug Programs
4. Log on locally
5. Log on as service
6. Profile system performance
7. Replace process level