Share via

FIM Troubleshooting: Attempted to perform an unauthorized operation.

  • Article

Overview / Purpose

Issue where were installing update 4.0.3627.2 on a FIM Portal server fails silently, and just rolls back.

In order to discover what is happening during the installation, you need to grab a Windows Installer Verbose Log.

  1. Open an Administrative Command-Prompt by right clicking on Command-Prompt and selecting Run As Administrator
  2. Navigate to where you downloaded and extracted the hotfix

  3. Execute the following:

    msiexec.exe /p <name of msp file> /l*v mylog.txt

  4. Open and review the log

Windows Installer Verbose Log File

Here is what we found in the Windows Installer Log File.

CAQuietExec: Microsoft.IdentityManagement.SolutionPackUtility.exe will deploy and/or retract the FIM solution packs. This operation may take long time in a SharePoint farm environment.

CAQuietExec: Executing all administrative timer jobs in preparation for FIM solution pack retraction.

CAQuietExec: Operation completed successfully.

CAQuietExec:

CAQuietExec: Removing feature for ILMPasswordPortal.wsp

CAQuietExec: An exception occurred while running Microsoft.IdentityManagement.SolutionPackUtility.exe: Attempted to perform an unauthorized operation.

CAQuietExec: An error occurred while retracting FIM portal solution packs.

CAQuietExec: Error 0xfffffffa: Command line returned an error.

CAQuietExec: Error 0xfffffffa: CAQuietExec Failed

CustomAction PatchRemoveFIMPWDPortal returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)

Action ended 12:31:24: InstallExecute. Return value 3.

Cause

We can see from the above highlighted line that we are experiencing a permissions problem. In this case, it is a permission issue inside of SharePoint. The installing users is not part of the Site Collections Administrators.

 

Resolution

You can resolve the issue by either installing the update with an account that is listed in the Site Collections Administrators, or add the account you are executing the installation to the Site Collection Administrators.

Windows SharePoint Services (WSS) 3.0

  1. Under Administrative Tools select SharePoint 3.0 Central Administration
  2. Click Application Management
  3. Click Site Collection Administrators
  4. If the account executing the installation is not listed, then you need to add the account

SharePoint Foundation 2010

  1. Launch SharePoint 2010 Central Administration from the Start Menu. The SharePoint 2010 Central Administration shortcut is available by browsing to Start > All Programs > Microsoft SharePoint 2010 Products.
  2. Click the Application Management link.

  1. Click Change site collection administrators

  1. If the account executing the installation is not listed as the primary or secondary administrator, add the account