Error message when you run the PerformancePoint Server 2007 Planning Server configuration as part of an installation: "Error 1: This access control list is not in canonical form and therefore cannot be modified"

Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows

Symptoms

When you run the Microsoft Office PerformancePoint Server 2007 Planning Server configuration as part of an installation, the configuration is not completed. Additionally, you receive the following error message:
Error 1: This access control list is not in canonical form and therefore cannot be modified.
The PlanningVerbose log file in the %Temp% folder indicates that this issue occurs when the configuration tries to set the access control list permissions for the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\PerformancePoint

Cause

This issue occurs when the NewSID tool is used to change the security identifier (SID) of the server.

Resolution

To resolve this issue, use one of the following methods.

Method 1: Use the secedit command to reset the local security database to default values

Note After you use this method to apply security settings, you cannot undo the changes without restoring the database from a backup. If you are uncertain about how to reset your security settings to the default security settings, you must make a complete backup that includes the system state.

Items that are reset include the following items:
  • NTFS file system files and folders
  • The registry
  • Policies
  • Services
  • User permissions
  • Group memberships
To back up the current local security database settings, use the /export option of the secedit command. An example of this command is as follows:
secedit /export c:\setupsecurity_backup.txt
For more information about the secedit command, visit the following Microsoft Web site: To reset the local security database settings to default values, use the following command:
secedit /configure /db setupsecurity.sdb /cfg "c:\windows\security\templates\setup security.inf" /verbose
For more information about how to use the secedit command to restore the local security database default settings, click the following article number to view the article in the Microsoft Knowledge Base:
313222 How to reset security settings back to the defaults

Method 2: Manually repair the affected registry subkey

To do this, follow these steps.

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.
  1. Click Start, click Run, type regedit, and then click OK.
  2. Locate and then right-click the following registry subkey:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\PerformancePoint
  3. Click Permissions. You receive the following error message:
    The permissions on PerformancePoint are incorrectly ordered.
  4. Click Cancel, and then reset the permissions for that registry subkey. For example, grant Full Control permissions to the account that you use to run the PerformancePoint Server 2007 Planning Server configuration.
  5. Open Planning Server Configuration Manager, and then complete the configuration.
プロパティ

文書番号:942517 - 最終更新日: 2008/04/18 - リビジョン: 1

フィードバック