Error message when you run the PerformancePoint Server 2007 Planning Server configuration as part of an installation: "Error 1: This access control list is not in canonical form and therefore cannot be modified"

When you run the Microsoft Office PerformancePoint Server 2007 Planning Server configuration as part of an installation, the configuration is not completed. Additionally, you receive the following error message:The PlanningVerbose log file in the %Temp% folder indicates that this issue occurs when the configuration tries to set the access control list permissions for the following registry subkey:

This issue occurs when the NewSID tool is used to change the security identifier (SID) of the server.

To resolve this issue, use one of the following methods.

Method 1: Use the secedit command to reset the local security database to default values

Note After you use this method to apply security settings, you cannot undo the changes without restoring the database from a backup. If you are uncertain about how to reset your security settings to the default security settings, you must make a complete backup that includes the system state.

Items that are reset include the following items:

• NTFS file system files and folders
• The registry
• Policies
• Services
• User permissions
• Group memberships

To back up the current local security database settings, use the /export option of the secedit command. An example of this command is as follows: For more information about the secedit command, visit the following Microsoft Web site: To reset the local security database settings to default values, use the following command: For more information about how to use the secedit command to restore the local security database default settings, click the following article number to view the article in the Microsoft Knowledge Base:

Method 2: Manually repair the affected registry subkey

To do this, follow these steps.

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

1. Click Start, click Run, type regedit, and then click OK.
2. Locate and then right-click the following registry subkey:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\PerformancePoint
3. Click Permissions. You receive the following error message:
   The permissions on PerformancePoint are incorrectly ordered.
4. Click Cancel, and then reset the permissions for that registry subkey. For example, grant Full Control permissions to the account that you use to run the PerformancePoint Server 2007 Planning Server configuration.
5. Open Planning Server Configuration Manager, and then complete the configuration.