[Troubleshooting] Attempted to perform an unauthorized operation.

[Troubleshooting] Attempted to perform an unauthorized operation.

Overview / Purpose

Recently worked an issue where we were installing update 4.0.3627.2 on a FIM Portal server.  The installation fails silently, and just rolls back.  In order to discover what is happening during the installation, we had to grab a Windows Installer Verbose Log. 

  1. Open an Administrative Command-Prompt by right clicking on Command-Prompt and selecting Run As Administrator
  2. Navigate to where you downloaded and extracted the hotfix
  3. Execute the following: 
    msiexec.exe /p <name of msp file> /l*v mylog.txt
  4. Open and review the log

Windows Installer Verbose Log File

Here is what we found in the Windows Installer Log File.
CAQuietExec:  Microsoft.IdentityManagement.SolutionPackUtility.exe will deploy and/or retract the FIM solution packs. This operation may take long time in a SharePoint farm environment.
CAQuietExec:  Executing all administrative timer jobs in preparation for FIM solution pack retraction.
CAQuietExec:  Operation completed successfully.
CAQuietExec:  Removing feature for ILMPasswordPortal.wsp
CAQuietExec:  An exception occurred while running Microsoft.IdentityManagement.SolutionPackUtility.exe: Attempted to perform an unauthorized operation.
CAQuietExec:  An error occurred while retracting FIM portal solution packs.
CAQuietExec:  Error 0xfffffffa: Command line returned an error.
CAQuietExec:  Error 0xfffffffa: CAQuietExec Failed
CustomAction PatchRemoveFIMPWDPortal returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 12:31:24: InstallExecute. Return value 3.



We can see from the above highlighted line that we are experiencing a permissions problem.  In this case, it is a permission issue inside of SharePoint.  The installing users is not part of the Site Collections Administrators.


You can resolve the issue by either installing the update with an account that is listed in the Site Collections Administrators, or add the account you are executing the installation to the Site Collection Administrators.

Windows SharePoint Services (WSS) 3.0

  1. Under Administrative Tools select SharePoint 3.0 Central Administration
  2. Click Application Management
  3. Click Site Collection Administrators

  4. If the account executing the installation is not listed, then you need to add the account

SharePoint Foundation 2010


  1. Launch SharePoint 2010 Central Administration from the Start Menu. The SharePoint 2010 Central Administration shortcut is available by browsing to Start > All Programs > Microsoft SharePoint 2010 Products.
  2. Click the Application Management link.

  1. Click Change site collection administrators

  1. If the account executing the installation is not listed as the primary or secondary administrator, add the account


Leave a Comment
  • Please add 5 and 3 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
  • Brian Desmond -MVP- edited Revision 2. Comment: Added matching SP2010 steps

Page 1 of 1 (1 items)
Wikis - Comment List
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
  • Brian Desmond -MVP- edited Revision 2. Comment: Added matching SP2010 steps

Page 1 of 1 (1 items)