Installer Error : "Exception Source: Active Directory | Exception Message: General access denied (4262254)

The following error is logged when running the Archive Manager installer:

The internal error happened: There was an unhandled exception in this application

Exception Source: Active Directory
Exception Type: System.UnauthorizedAccessException
Exception Message: General access denied error

Exception Target Site: SetInfo
Application Domain: Installer.exe
Assembly Codebase: file:///C:/Program Files/Quest Software/ArchiveManager Installer/Installer.exe
Assembly Fullname: Installer, Version=4.1.0.332, Culture=neutral, PublicKeyToken=null
Assembly Version: 4.1.0.332


---- Stack Trace ----
at System.DirectoryServices.Interop.UnsafeNativeMethods.IAds.SetInfo()
at System.DirectoryServices.DirectoryEntry.CommitChanges()
at AfterMail.Setup.UserManager.CreateGroup(String domainName, String groupName, String groupDescription)
at AfterMail.Setup.Installer.Screens.UserCredentialsUC.BeforeNext()
at AfterMail.Setup.Installer.WizardManager.OnBeforeNext()
at AfterMail.Setup.Installer.WizardManager.DoNext()
at AfterMail.Setup.Installer.WizardForm.MoveToNext()
at AfterMail.Setup.Installer.WizardForm.btnNext_Click(Object sender, EventArgs e)
at System.Windows.Forms.Control.OnClick(EventArgs e)
at System.Windows.Forms.Button.OnClick(EventArgs e)
at System.Windows.Forms.Button.OnMouseUp(MouseEventArgs mevent)
at System.Windows.Forms.Control.WmMouseUp(Message& m, MouseButtons button, Int32 clicks)
at System.Windows.Forms.Control.WndProc(Message& m)
at System.Windows.Forms.ButtonBase.WndProc(Message& m)
at System.Windows.Forms.Button.WndProc(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPt

The security credentials specified in the "Administrator Credentials" page of the Archive Manager installer do not have rights to read from Active Directory.

Grant rights for the account specified in "Administrator Credentials" to access Active Directory, or use an account that already has these rights.

To assign the required permissions in AD:

1. Open Active Directory Users and Computers.
2. Right-click the domain object, and then select Delegate Control.
3. In the Delegation of Control Wizard, click Next, and then Add.
4. In the Select Users, Computers, or Groups dialog box, enter the required account name, and then click OK,
5. and then Next.
6. In the Tasks to Delegate page, check the following tasks:
   Read all user information
   Read all inetOrgPerson information
7. Click Next and then Finish.