Error - Could not recover object <object name>: User does not have sufficient rights to execute this operation. (4282465)

Restoring Objects to Child Domains Using a Root Domain Account fail in Portal

Scenario AD forest with a root domain and several subdomains. RMAD has been deployed using preinstalled backup agents. Backups are running fine. Recovery portal has been setup with the appropriate permissions, specified an administrative account per domain. These administrative accounts are all member of the local RMAD AD groups located on the quest server. Delete an AD user account from the root domain, restore the AD user account using the recovery portal is successfull

The Quest server is member of this root domain. The account logged on is member of the root domain. Delete an AD user account from a subdomain, Attempt to restore the Root Domain account in the Recovery portal (which is running in the root domain). Following error:

"Could not recover object <object name>: User does not have sufficient rights to execute this operation"

1. Add the user account to the local  group "Recovery Manager Portal - Recovery Operators" and "Recovery Manager Portal - Undelete Operators"
2. Launch the Portal (http://servername/RecoveryManagerPortal)
3. Click on the Configuration tab
4. Click on "Active Directory Domains" and then click on the domain name that you want to grant the currently logged in user rights to restore to
5. Click on "Configure a list of delegates"
6. Select either the domain name (to grant rights to restore to any container) or a particular OU to permission the user to be able to restore objects to that location only
7. Click Add
8. If the account you are adding is from the same domain enter the name
9. Click the magnifying glass to search
10. Click Add next to the account you want to add
11. Select to allow or deny the user access to restore or undelete objects and click OK
12. If the account you are adding is from a different domain, click the domain name link next to 'Search in:'
13. Select the domain where the account resides
14. Enter the name in the search window
15. Click the magnifying glass to search
16. Click Add next to the account you want to add
17. Select to allow or deny the user access to restore or undelete objects and click OK