Error: "InTrust Server could not register Service Connection Point with Active Directory. Error code 0x80070005. Error text: Access is denied. (4351183)

After InTrust server installation the next warning appears in the Event Log

Event Type:      Warning
Event Source:      InTrust Server
Event Category:      General
Event ID:      5139
Date:            13.01.2009
Time:            10:51:00
User:            N/A
Computer:      xyz
Description:
InTrust Server could not register Service Connection Point with Active Directory. Error code 0x80070005. Error text: Access is denied.

The reason for this error is that InTrust Server account does not have enough rights to create Security Connection Point.

Check that  the InTrust server account has the following rights:

1. Membership in the local Administrators group on the computer where InTrust Server runs
2. The following security settings must be turned on:

• Log on as a service
• Adjust memory quotas for a process
• Replace a process level token

If the rights are correct but the error still exists perform the following. Find container   CN=Quest InTrust,CN=System in the domain and give the InTrust service account rights "Read All Properties/Write All Properties" to this container and all child objects.

If the container does not exist create it manually, give the rights and restart InTrust Server service.