The Optimize Schema step of the QAS installation fails with an error, "rights error: Access Denied. Would you like to save the script to run at a later time?" or "The term 'param' is not recognized as a cmdlet, function, operable program, or script file. Verify the term and try again"
There is more than one possible cause of this problem. The possible resolutions are listed below.
1. Check that the user who is running the QAS install is a member of the Schema Admins and Domain Admins groups.
2. Versions of 4.0.1.58 and below have issues when Powershell 1 installed, either upgrade to Powershell 2 or upgrade to QAS 4.0.1.59+ admin tools.
3. Versions of 4.0.3.41 and below will sometimes have an issue with the generated powershell script. The domain context is only looking for a domain name. Make the below change in the generated script, or upgrade to the latest version of 4.0.3.
$DomainContext = New-Object System.DirectoryServices.ActiveDirectory.DirectoryContext("DirectoryServer", "yourdomain.com")
to
$DomainContext = New-Object System.DirectoryServices.ActiveDirectory.DirectoryContext("DirectoryServer", "dcname.yourdomain.com")
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center