Error when attempting to "Manage" forest recovery agent from more than one Forest Recovery console: "The operation failed: Attempted to perform an unauthorized operation" (4308669)

The below error may occur when attempting to manage the FR agents or run verify settings against a DC from multiple Forest Recovery consoles:

WORKAROUND #1:

Copy the certificates from Console A to Console B:
If using RMAD 10.0.1 or earlier:

1. On the Forest Recovery console server that is connecting properly to the DC's, launch MMC.exe
2. Go to File and then Add/Remove Snapin
3. Add Certificates for the local computer
4. Expand Certificates | Personal | Certificates
5. Right click on each certificate (Console and Agent) and go to All Tasks and then Export
6. Repeat steps 1-2 on the other RMADFE server(s)
7. Expand Certificates | Personal | Certificates
8. Deleted the existing Console and Agent certificates
9. Import the certificates exported from the first RMADFE server. Ensure you select to make the certificate Exportable in the Import Wizard
10. Once the certificates from the first RMADFE server have been imported, the agents can be managed from the other RMADFE server(s). Agents can then be deployed from any RMADFE server, provided they are all using the same set of certificates

If using RMAD 10.1 or later:

1. Open the Forest Recovery Console on the first FR server
2. Open the FR Console
3. Click Tools | Fault Tolerance | Export secure communication keys
4. Click Browse to select a path to store the exported keys
5. For the password type RMAD
6. Copy the pfx file to the other FR servers
7. Open the FR Console on the other FR servers
8. Click Tools | Fault Tolerance | Import secure communication keys
9. Select the copied pfx file

WORKAROUND #2:

Uninstall the existing forest recovery agent and then manually install it using "RecoveryAgent64.exe" from within the download package of the product. The FR Console will then not use Schannel to authenticate with the FR agents. Note: The FR Console can be used to redeploy the agents using the following steps:

1. Open regedit and navigate to:
   HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Dell\Recovery Manager for Active Directory
2. Create a DWORD value: RpcAuthType
3. Set it to 9 for Negotiate, or 10 for NTLM only
4. Delete the RMAD secure communication keys from the RMAD server by opening a command prompt, navigating to the RMADFE installation path and running the command RegisterCertificate.cmd /u
5. You can then use the FR console to remove and reinstall the FR agents on each of the DCs.

WORKAROUND #3:

Disable schannel and revert to using NTLM as the default authentication method as the product was using prior to 8.8. 

1. Open regedit and navigate to:
   HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Dell\Recovery Manager for Active Directory
2. Create a DWORD value: RpcAuthType
3. Set it to 9 for Negotiate, 10 for NTLM only, or 15 for Schannel
4. Restart the Console
5. Delete both the console and agent certificates from the Local Computer | Personal Certificates store
6. One of the following needs to be performed on the DCs:
    - Create the same reg key on the DCs
    - Remove the cert from agent installation folder (C:\Program Files\Dell\Recovery Manager for Active Directory Forest Edition) on the DC, either by manually deleting it, or by reinstalling the agent from the FR console.

In 10.1 Certificate export from the console has been introduced with a separate tool involved it exports key to install FR agent using following syntax: