Microsoft KB Archive/942517

= Error message when you run the PerformancePoint Server 2007 Planning Server configuration as part of an installation: &quot;Error 1: This access control list is not in canonical form and therefore cannot be modified&quot; =

Article ID: 942517

Article Last Modified on 10/29/2007

-

APPLIES TO


 * Microsoft Office PerformancePoint Server 2007, 32 Bit Edition
 * Microsoft Office PerformancePoint Server 2007, 64 Bit Edition

-



Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756 How to back up and restore the registry in Windows XP and Windows Vista



SYMPTOMS
When you run the Microsoft Office PerformancePoint Server 2007 Planning Server configuration as part of an installation, the configuration is not completed. Additionally, you receive the following error message:

Error 1: This access control list is not in canonical form and therefore cannot be modified.

The PlanningVerbose log file in the %Temp% folder indicates that this issue occurs when the configuration tries to set the access control list permissions for the following registry subkey:



CAUSE
This issue occurs when the NewSID tool is used to change the security identifier (SID) of the server.



RESOLUTION
To resolve this issue, use one of the following methods.

Method 1: Use the secedit command to reset the local security database to default values
Note After you use this method to apply security settings, you cannot undo the changes without restoring the database from a backup. If you are uncertain about how to reset your security settings to the default security settings, you must make a complete backup that includes the system state.

Items that are reset include the following items:
 * NTFS file system files and folders
 * The registry
 * Policies
 * Services
 * User permissions
 * Group memberships

To back up the current local security database settings, use the /export option of the secedit command. An example of this command is as follows:

secedit /export c:\setupsecurity_backup.txt

For more information about the secedit command, visit the following Microsoft Web site:

http://technet2.microsoft.com/windowsserver/en/library/b1007de8-a11a-4d88-9370-25e2445605871033.mspx?mfr=true

To reset the local security database settings to default values, use the following command:

secedit /configure /db setupsecurity.sdb /cfg &quot;c:\windows\security\templates\setup security.inf&quot; /verbose

For more information about how to use the secedit command to restore the local security database default settings, click the following article number to view the article in the Microsoft Knowledge Base:

313222 How to reset security settings back to the defaults

Method 2: Manually repair the affected registry subkey
To do this, follow these steps.

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.  Click Start, click Run, type regedit, and then click OK. Locate and then right-click the following registry subkey:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\EventLog\Application\PerformancePoint

 Click Permissions. You receive the following error message:

The permissions on PerformancePoint are incorrectly ordered.

 Click Cancel, and then reset the permissions for that registry subkey. Open Planning Server Configuration Manager, and then complete the configuration.

Keywords: kberrmsg kbtshoot kbprb kbexpertiseadvanced KB942517

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.