You cannot connect to an instance of SQL Server Analysis Services from an application in Windows 7 or in Windows Server 2008 R2 after you install Office Live Add-in 1.4 or Windows Live ID Sign-in Assistant 6.5

Article ID: 976419 - View products that this article applies to.
Expand all | Collapse all

On This Page

SYMPTOMS

Consider the following scenario:
  • You have a computer that is running Windows 7 or Windows Server 2008 R2.
  • You install Microsoft Office Live Add-in 1.4 or Windows Live ID Sign-in Assistant 6.5 on the computer.

    Note Office Live Add-in 1.4 automatically installs Windows Live ID Sign-in Assistant 6.5.
When you try to connect to a SQL Server Analysis Services cube from an application, you receive the following error message:
The security database on the server does not have a computer account for this workstation trust relationship.
Note You frequently experience this problem when you connect to an instance of SQL Server Analysis Services from Office Excel 2007 or Office Excel 2010 Beta.
Back to the top | Give Feedback

CAUSE

Windows Live ID Sign-in Assistant 6.5 installs a new Security Support Provider (SSP) package. The SSP package causes the Security Support Provider Interface (SSPI) that is used by the Analysis Services OLE DB provider not to switch to NTLM authentication.
Back to the top | Give Feedback

RESOLUTION

Hotfix information

Prerequisites

There are no prerequisites for installing this hotfix.

Restart requirement

You have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any Windows 7 or Windows Server 2008 R2 updates or hotfixes.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Windows 7 and Windows Server 2008 R2 file information notes
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    Collapse this tableExpand this table
    VersionProductMilestoneService branch
    6.1.760 0.16xxxWindows 7 and Windows Server 2008 R2RTMGDR
    6.1.760 0.20xxxWindows 7 and Windows Server 2008 R2RTMLDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows Server 2008 R2 and for Windows 7" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
For all supported x86-based versions of Windows 7
Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Cng.sys6.1.7600.16385369,56814-Jul-200901:17
Ksecdd.sys6.1.7600.1638567,66414-Jul-200901:20
Ksecpkg.sys6.1.7600.20547133,70412-Oct-200906:01
Lsasrv.dll6.1.7600.205471,037,31212-Oct-200905:49
Lsasrv.mofNot Applicable13,78010-Jun-200921:33
Lsass.exe6.1.7600.1638522,52814-Jul-200901:14
Secur32.dll6.1.7600.1638522,01614-Jul-200901:16
Sspicli.dll6.1.7600.1638599,84014-Jul-200901:16
Sspisrv.dll6.1.7600.1638515,36014-Jul-200901:16
For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2
Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Cng.sys6.1.7600.16385460,50414-Jul-200901:43
Ksecdd.sys6.1.7600.1638595,31214-Jul-200901:48
Ksecpkg.sys6.1.7600.20547153,16012-Oct-200906:29
Lsasrv.dll6.1.7600.205471,446,91212-Oct-200906:17
Lsasrv.mofNot Applicable13,78010-Jun-200920:52
Lsass.exe6.1.7600.1638531,23214-Jul-200901:39
Secur32.dll6.1.7600.1638528,16014-Jul-200901:41
Sspicli.dll6.1.7600.16385136,19214-Jul-200901:41
Sspisrv.dll6.1.7600.1638528,67214-Jul-200901:41
For all supported Itanium-based versions of Windows Server 2008 R2
Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Cng.sys6.1.7600.16385787,73614-Jul-200901:52
Ksecdd.sys6.1.7600.16385179,26414-Jul-200901:58
Ksecpkg.sys6.1.7600.20547307,27212-Oct-200905:21
Lsasrv.dll6.1.7600.205472,654,72012-Oct-200905:08
Lsasrv.mofNot Applicable13,78010-Jun-200920:57
Lsass.exe6.1.7600.1638556,32014-Jul-200901:44
Secur32.dll6.1.7600.1638548,64014-Jul-200901:48
Sspicli.dll6.1.7600.16385275,45614-Jul-200901:49
Sspisrv.dll6.1.7600.1638545,05614-Jul-200901:49
Back to the top | Give Feedback

WORKAROUND

To work around this problem, use one of the following methods.

Method 1: Configure the Analysis Services server to use the Kerberos authentication protocol

For more information, click the following article number to view the article in the Microsoft Knowledge Base:
917409
(http://support.microsoft.com/kb/917409/ )
How to configure SQL Server 2008 Analysis Services and SQL Server 2005 Analysis Services to use Kerberos authentication

Method 2: Unregister the LiveSSP component

  1. In Registry Editor, locate the following registry subkey:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
  2. Double-click the Security Packages registry entry.
  3. In the Edit Multi-String dialog box, delete the line that contains the livessp value, and then click OK.
  4. Restart the computer.

Method 3: Uninstall Windows Live ID Sign-In Assistant 6.5

Note You must be an administrator to uninstall Windows Live ID Sign-In Assistant 6.5.
  1. In Control Panel, click Programs and Features.
  2. Under Uninstall or change a program, right-click the Windows Live ID Sign-in Assistant item, and then click Uninstall.
After you uninstall Windows Live ID Sign-In Assistant 6.5, the following conditions occur:
  • You revert to using the Office Live Single Sign-On (SSO) functionality.
  • When you sign out Office Live Workspace in an Office client application, the Office client application seems to stop responding.
  • You can no longer select multiple credentials when you open a Web site that has the Windows Live ID Authentication feature enabled.
  • The Microsoft Identity Client Runtime Library (IDCRL) is removed.

    Note IDCRL provides a set of Live ID client APIs.
Back to the top | Give Feedback

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Back to the top | Give Feedback

Properties

Article ID: 976419 - Last Review: October 22, 2009 - Revision: 1.1
APPLIES TO
  • Windows Server 2008 R2 Datacenter
  • Windows Server 2008 R2 Enterprise
  • Windows Server 2008 R2 Standard
  • Windows 7 Enterprise
  • Windows 7 Home Basic
  • Windows 7 Home Premium
  • Windows 7 Professional
  • Windows 7 Ultimate, when used with:
    • Microsoft SQL Server 2005 Analysis Services
    • Microsoft SQL Server 2008 Analysis Services
    • Microsoft Office Excel 2007
    • Windows Live ID
Keywords: 
kbhotfixserver kbautohotfix kbsurveynew kbexpertiseadvanced kbqfe kbfix KB976419
Back to the top | Give Feedback

Give Feedback

 
Back to the topBack to the top