Goodday all, We tried to upgrade from SCOM 2007R2 to 2012 but at one stage of the setup it fails and we cannot get it right. We have upgraded every server and client except for the RMS. When we run the upgrade we use the domain account (SDK) and elevated. When the setup is trying Populate the Userroles (after configuring Database) it fails. The setup log is giving us the following information: Info: :Info:GetLocalizedAdminGroupName: Administrators Group Name is: BUILTIN\Administrators Error: :PopulateUserRoles: failed : Threw Exception.Type: System.Runtime.InteropServices.COMException, Exception Error Code: 0x80070539, Exception.Message: The security ID structure is invalid. (Exception from HRESULT: 0x80070539) Error: :StackTrace: at Microsoft.Mom.Sdk.UserRoleSetup.SetupProgram.populateUserRoles(String adminRoleGroup, String sdkAccount, InstallTypes installType, String installDirectory, Boolean overwriteExistingUsers) at Microsoft.EnterpriseManagement.OperationsManager.Setup.ServerConfiguration.PopulateUserRoles(String adminRoleGroup, String sdkAccount, String installDirPath) Error: :FATAL ACTION: PopulateUserRoles Error: :FATAL ACTION: DatabaseActions Error: :ProcessInstalls: Running the PostProcessDelegate returned false. Always: :SetErrorType: Setting VitalFailure. currentInstallItem: Database Configuration Error: :ProcessInstalls: Running the PostProcessDelegate for OMDATABASE failed.... This is a fatal item. Setting rollback. In my opinion it has to do something with rights on the SQL Database. So we have searched for the problem on Google and we came across the following site: http://social.technet.microsoft.com/Forums/en-US/operationsmanagergeneral/thread/c5115a48-1179-40e3-8824-5d48bcb4eddb It says it is a problem with authentication (mixed mode). But we use Windows authentication (native mode). So the blog sends us to: http://blogs.technet.com/b/mihai/archive/2012/05/23/know-issues-when-upgrading-from-om-2007-r2-to-om-2012.aspx It is giving us information that a domain account needs db_owner of the database instead of the SA account. OK we tried that but it is still not resolved. We still get the same error. Then I noticed the following sentence: The security ID structure is invalid. OK.. maybe it has too much rights. I followed the Excel chart from Kevin Holman and gave every account the exact amount of rights and ran the setup again and fails. So we tried something different. We tried to upgrade the management group from a management server which was already upgraded to 2012. Just to make sure that it does not have to do anything with 2007R2. So we start an elevated command prompt and execute the Setup.exe /UpgradeManagementGroup command. The setup started.. we are excited about the one and when it comes to Populate User Roles it fails again! Ok last try we gave all the accounts on the server Domain Admin rights and we made all the accounts sysadmin just to make sure we dont have given the accounts too less rights and it fails Does anyone of you know something about this issue and how to resolve it? We are pretty much out of options here. It looks like an authentication or user error in SQL. But we just cannot find it. We have checked all the requirements and they are met: Operating System: Windows Server 2008 R2 SP1.Processor Architecture: x64.Microsoft SQL Server: SQL Server 2008 R2 SP1Collation: SQL_Latin1_General_CP1_CI_AS All the servers use the same locale which is The Netherlands (dutch) Kind regards, Julien and Arno