You cannot connect to an instance of SQL Server Analysis Services from an application in Windows 7 or in Windows Server 2008 R2 after you install Office Live Add-in 1.4 or Windows Live ID Sign-in Assistant 6.5

Consider the following scenario:
  • You have a computer that is running Windows 7 or Windows Server 2008 R2.
  • You install Microsoft Office Live Add-in 1.4 or Windows Live ID Sign-in Assistant 6.5 on the computer.

    Note Office Live Add-in 1.4 automatically installs Windows Live ID Sign-in Assistant 6.5.
When you try to connect to a SQL Server Analysis Services cube from an application, you receive the following error message:
The security database on the server does not have a computer account for this workstation trust relationship.
Note You frequently experience this problem when you connect to an instance of SQL Server Analysis Services from Office Excel 2007 or Office Excel 2010 Beta.
Windows Live ID Sign-in Assistant 6.5 installs a new Security Support Provider (SSP) package. The SSP package causes the Security Support Provider Interface (SSPI) that is used by the Analysis Services OLE DB provider not to switch to NTLM authentication.

Hotfix information


There are no prerequisites for installing this hotfix.

Restart requirement

You have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any Windows 7 or Windows Server 2008 R2 updates or hotfixes.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Windows 7 and Windows Server 2008 R2 file information notes
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.1.760 0.16xxxWindows 7 and Windows Server 2008 R2RTMGDR
    6.1.760 0.20xxxWindows 7 and Windows Server 2008 R2RTMLDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows Server 2008 R2 and for Windows 7" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
For all supported x86-based versions of Windows 7
File nameFile versionFile sizeDateTime
Lsasrv.mofNot Applicable13,78010-Jun-200921:33
For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2
File nameFile versionFile sizeDateTime
Lsasrv.mofNot Applicable13,78010-Jun-200920:52
For all supported Itanium-based versions of Windows Server 2008 R2
File nameFile versionFile sizeDateTime
Lsasrv.mofNot Applicable13,78010-Jun-200920:57
To work around this problem, use one of the following methods.

Method 1: Configure the Analysis Services server to use the Kerberos authentication protocol

For more information, click the following article number to view the article in the Microsoft Knowledge Base:
917409 How to configure SQL Server 2008 Analysis Services and SQL Server 2005 Analysis Services to use Kerberos authentication

Method 2: Unregister the LiveSSP component

  1. In Registry Editor, locate the following registry subkey:
  2. Double-click the Security Packages registry entry.
  3. In the Edit Multi-String dialog box, delete the line that contains the livessp value, and then click OK.
  4. Restart the computer.

Method 3: Uninstall Windows Live ID Sign-In Assistant 6.5

Note You must be an administrator to uninstall Windows Live ID Sign-In Assistant 6.5.
  1. In Control Panel, click Programs and Features.
  2. Under Uninstall or change a program, right-click the Windows Live ID Sign-in Assistant item, and then click Uninstall.
After you uninstall Windows Live ID Sign-In Assistant 6.5, the following conditions occur:
  • You revert to using the Office Live Single Sign-On (SSO) functionality.
  • When you sign out Office Live Workspace in an Office client application, the Office client application seems to stop responding.
  • You can no longer select multiple credentials when you open a Web site that has the Windows Live ID Authentication feature enabled.
  • The Microsoft Identity Client Runtime Library (IDCRL) is removed.

    Note IDCRL provides a set of Live ID client APIs.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Article ID: 976419 - Last Review: 10/22/2009 03:03:37 - Revision: 1.1

Windows Server 2008 R2 Datacenter, Windows Server 2008 R2 Enterprise, Windows Server 2008 R2 Standard, Windows 7 Enterprise, Windows 7 Home Basic, Windows 7 Home Premium, Windows 7 Professional, Windows 7 Ultimate

  • kbhotfixserver kbautohotfix kbsurveynew kbexpertiseadvanced kbqfe kbfix KB976419