Unable to mount WIM file error. A required privilege is not held by the client.

Products

• Client Management Suite
• Deployment Solution

Issue/Introduction

When attempting to create a preboot configuration, you may receive an error stating Unable to mount WIM file.  Further investigation of the bootwiz.log file in C:\Program Files\Altiris\Deployment\Logs reveals CPlatformWinPe2::ThreadFuncWIMMountImage - WIMMountImage failed - GetLastError returned 1314 (A required privilege is not held by the client.)

Environment

Deployment Solution 8.x

Cause

Insufficient permissions

Resolution

It's important to understand that, in this case, our product leverages underlying Microsoft technologies.  Mounting a WIM file, for example, is not exclusive to permissions required by Broadcom software.  Here is a test that can be used:

Open a command prompt as an administrator

Create a test directory.  Perhaps:  mkdir c:\wimtest

Now, find any WIM file.  You can find one by running:  dir C:\*.wim" /s /b

Once found, make note of the directory path.

In this example, we use the WIM file located here:  C:\Program Files\Altiris\Deployment\BDC\waik_winpe11\Tools\PETools\amd64\winpe.wim

Run the following command, replacing the path with whatever WIM file you found:

dism /Mount-Wim /WimFile:"C:\Program Files\Altiris\Deployment\BDC\waik_winpe11\Tools\PETools\amd64\winpe.wim" /index:1 /MountDir:C:\wimtest

Does that work or not?  If not, you most likely have a permission problem.  You will need to work with your server administrators and possibly Microsoft to resolve this.  This is not a Broadcom issue.  However, you can try to make sure the following permissions are set properly, as DISM appears to require them:

First, identify the Altiris Service Account being used.  You can find this account by looking at the Altiris Service under services to see what account it's using.

If you check the following, does the Altiris Service Account have the permissions?

Click on Start, go to Run, and type in:  secpol.msc.  Then go to Local Policies and expand User Rights Assignment.

• Back up files and directories
• Restore files and directories
• Manage auditing and security log
• Manage volume
• Take ownership of files and other objects
• Log on as a service

If the Altiris Service account is missing from any of those, add it and try again.