Error when attempting to peform an Agent Based restore: Unable to install Online Restore Agent. (4225756)

When trying to perform an Agent Based restore, the following error my occur:

"Unable to install Online Restore Agent. Failed to install Backup Agent. Details: Access is denied. Make sure you have specified the correct access account for the Backup Agent".

Ensure there is no protection or antivirus software on the DC that prevents applications from executing or installing (such as McAfee Antivirus or Bit 9 Security). Logon to the DC and then try running the restore again. Once the Restore Agent fails to install, check the DC to see if there is evidence of something blocking the install. For example, Bit 9 Security shows a popup message that it blocked services.exe from running eriagent.exe because the file is not approved.

This can also occur if SecureBoot is enabled on the DC. Logon to the DC and then try running the restore again. Once the Restore Agent fails to install check the DC and if you see a popup from the 'Program Compatibility Assistant' similar to the following, it is most likely due to SecureBoot being enabled:

"A digitally signed driver is required"
"ProcessUnprotector.sys"

"Windows blocked the installation of a digitally unsigned driver. Uninstall the program or device that uses the driver and check the publisher's website for a digitally signed version of the driver"

Note: The driver is properly signed, the issue is due to SecureBoot and RMAD(FE) does not currently support SecureBoot. A workaround would be to disable SecureBoot before running a restore, or if you are not restoring a deleted objects (or restoring a deleted object and are not concerned with restoring the SID History or the Password) to use the Agentless restore method. Enhancement Request RMADFE-2023 has been submitted to development for consideration in a future release of RMAD.

This issue is applicable to Windows 2016 and 2019.