NetWorker: NMC Installation or Upgrade Fails with Error 0x80070643 Due to Missing Symbolic Link Privileges

概要: NetWorker Management Console (NMC) installation or upgrade can fail with error 0x80070643 when the installer is unable to create the postgres_latest symbolic link

この記事は次に適用されます: この記事は次には適用されません: この記事は、特定の製品に関連付けられていません。 すべての製品パージョンがこの記事に記載されているわけではありません。

現象

During an NMC upgrade or new installation, the installation fails and rolls back.

The %LOCALAPPDATA%\Temp\NetWorker_[number]_NMC.log contains errors similar to:

Product: NetWorker Management Console -- Installation failed.
...Installation success or error status: 1603

The %LOCALAPPDATA%\TempNetWorker_[number].log contains errors similar to:

... Error 0x80070643: Failed to execute MSI package.

The %LOCALAPPDATA%\Tempnmcdll.log shows that the installation fails while attempting to create the postgres_latest symbolic link:

Symlink Creation Failed, GetLastError: 1314
Postgres_latest symlink creation failed!

This shows the SYSTEM account does not have privileges to create symbolic links.

Verify Symbolic Link Permissions for the SYSTEM Account:

Because Windows does not allow you to log in directly as the SYSTEM account, you can use PsExec from Microsoft Sysinternals to run commands under the SYSTEM security context and verify that it can create symbolic links.

1. Create a Test Folder

Open an elevated Command Prompt and run: mkdir C:\foldersystem

2. Download PsExec

Download PsExec (included in PSTools) from: https://learn.microsoft.com/en-us/sysinternals/downloads/psexec This hyperlink is taking you to a website outside of Dell Technologies.

3. Extract PSTools

Extract the contents of PSTools.zip to: C:\PSTools

4. Test Symbolic Link Creation as SYSTEM

cd C:\PSTools 
psexec -i -s cmd.exe /c "mklink /D C:\foldersystemlink C:\foldersystem"

A successful test returns output similar to:

PsExec v2.43 - Execute processes remotely
.
.
cmd.exe exited on WIN-CLIENT03 with error code 0.


5. Verify the Symbolic Link Was Created

From the root of the C: drive, run:
 
cd \
dir foldersystem*.*

Expected output:

08/13/2026  01:21 PM    <DIR>          foldersystem
08/13/2026  01:31 PM    <SYMLINKD>     foldersystemlink [C:\foldersystem]

Results

Success: If foldersystemlink appears as <SYMLINKD>, the SYSTEM account has permission to create symbolic links.
Failure: If the mklink command fails with an error such as 1314 (ERROR_PRIVILEGE_NOT_HELD), the SYSTEM account does not have the Create symbolic links (SeCreateSymbolicLinkPrivilege) permission. Grant the permission at the OS level and repeat the test.

原因

The NMC installer creates the postgres_latest symbolic link during a post-installation custom action that runs under the SYSTEM account. If the SYSTEM account does not have the Windows Create symbolic links (SeCreateSymbolicLinkPrivilege) permission, the symbolic link creation fails and the installation rolls back. The failure is typically logged as Error 1314 (ERROR_PRIVILEGE_NOT_HELD) in nmcdll.log.
 
Although it is recommended to grant the Create symbolic links (SeCreateSymbolicLinkPrivilege) permission to both NT AUTHORITY\SYSTEM and the installation account (or local Administrators group), the critical requirement is that the SYSTEM account has this privilege. Granting the permission only to the logged-in user is not sufficient because the symbolic link is created by a custom action running under the SYSTEM context.
 

解決方法

Grant the Create symbolic links (SeCreateSymbolicLinkPrivilege) permission to the NT AUTHORITY\SYSTEM account. It is also recommended to grant the permission to the installation account or the local Administrators group.

Then verify that the SYSTEM account can successfully create symbolic links using PsExec.

Retry the NMC installation or upgrade. Do not manually create the postgres_latest symbolic link before running the installer. The installer should create the symbolic link automatically.

対象製品

NetWorker, NetWorker Management Console

製品

NetWorker Family
文書のプロパティ
文書番号: 000509909
文書の種類: Solution
最終更新: 17 9月 2026
バージョン:  2
質問に対する他のDellユーザーからの回答を見つける
サポート サービス
お使いのデバイスがサポート サービスの対象かどうかを確認してください。