Ensure 'Restore files and directories' is set to 'Administrators'.
Set using cmd:
@echo off
REM Define the path for the .inf file
set "infFilePath=C:\restore_policy.inf"
REM Define the content for the .inf file
echo [Unicode] > %infFilePath%
echo Unicode=yes >> %infFilePath%
echo [Version] >> %infFilePath%
echo signature="$CHICAGO$" >> %infFilePath%
echo Revision=1 >> %infFilePath%
echo [Privilege Rights] >> %infFilePath%
echo SeRestorePrivilege = *S-1-5-32-544 >> %infFilePath%
REM Apply the security template using secedit.exe
secedit /configure /db C:\Windows\security\new.sdb /cfg %infFilePath%
REM Clean up the .inf file
del %infFilePath%
echo Done.