Installing AD Rights Management Services gives error

[Guest Bob]

My network:

one Win2008 DC, and one Win2008 AD RMS, both running in Vmware Workstation

with VMware tools installed.

 

Whenever I isntall RMS role, I'll get an error. The error is as following:

 

Active Directory Rights Management Services: Installation succeeded with

errors

 

 

<Error>: Attempt to configure Active Directory Rights Management Server

failed. This access control list is not in canonical form and therefore

cannot be modified. at

System.Security.AccessControl.CommonAcl.RemoveInheritedAces() at

System.Security.AccessControl.CommonSecurityDescriptor.SetDiscretionaryAclProtection(Boolean

isProtected, Boolean preserveInheritance) at

System.Security.AccessControl.ObjectSecurity.SetAccessRuleProtection(Boolean

isProtected, Boolean preserveInheritance) at

Microsoft.RightsManagementServices.Configuration.ProvisionSecurity.ACLConnectionStringInRegistry()

at

Microsoft.RightsManagementServices.Configuration.EnterpriseProvisionSecurity.ApplyPostProvisionSecurity()

at

Microsoft.RightsManagementServices.Configuration.GlicProvisionSecurity.ApplyPostProvisionSecurity()

at

Microsoft.RightsManagementServices.Configuration.ProvisioningBase.ApplyPostProvisionSecurity()

at Microsoft.RightsManagementServices.Configuration.ProvisioningBase.Run() at

Microsoft.RightsManagementServices.Configuration.ProvisionerBase.DoProvision()

at

Microsoft.RightsManagementServices.Configuration.ProvisionerHelper.Run(OperationType

operationType, Object data) at

Microsoft.RightsManagementServices.Configuration.ProvisionEngine.Run(OperationType

operationType, Boolean passwordEncrypted) at

Microsoft.RightsManagementServices.Configuration.CmdLineHandler.Run() Remove

and re-install AD RMS to attempt provisioning again.

 

<Warning>: Before you can administer AD RMS on this server, you must log

off and log on again.

 

The following role services were installed:

 

Active Directory Rights Management Server

 

Full log can be downloaded from:

http://www.4shared.com/dir/8290411/63f0e95/sharing.html (ServerManager2.zip)

 

Help?

[Guest Jabez Gan [MVP]]

RE: Installing AD Rights Management Services gives error

 

See if this is related to your issue:

http://kbalertz.com/916893/Error-message-install-Windows-SharePoint-Services-access-control-canonical.aspx

 

--

Jabez Gan [MVP]

http://www.blizhosting.com

http://www.msblog.org

 

 

"Bob" wrote:

> My network:

> one Win2008 DC, and one Win2008 AD RMS, both running in Vmware Workstation

> with VMware tools installed.

>

> Whenever I isntall RMS role, I'll get an error. The error is as following:

>

> Active Directory Rights Management Services: Installation succeeded with

> errors

>

>

> <Error>: Attempt to configure Active Directory Rights Management Server

> failed. This access control list is not in canonical form and therefore

> cannot be modified. at

> System.Security.AccessControl.CommonAcl.RemoveInheritedAces() at

> System.Security.AccessControl.CommonSecurityDescriptor.SetDiscretionaryAclProtection(Boolean

> isProtected, Boolean preserveInheritance) at

> System.Security.AccessControl.ObjectSecurity.SetAccessRuleProtection(Boolean

> isProtected, Boolean preserveInheritance) at

> Microsoft.RightsManagementServices.Configuration.ProvisionSecurity.ACLConnectionStringInRegistry()

> at

> Microsoft.RightsManagementServices.Configuration.EnterpriseProvisionSecurity.ApplyPostProvisionSecurity()

> at

> Microsoft.RightsManagementServices.Configuration.GlicProvisionSecurity.ApplyPostProvisionSecurity()

> at

> Microsoft.RightsManagementServices.Configuration.ProvisioningBase.ApplyPostProvisionSecurity()

> at Microsoft.RightsManagementServices.Configuration.ProvisioningBase.Run() at

> Microsoft.RightsManagementServices.Configuration.ProvisionerBase.DoProvision()

> at

> Microsoft.RightsManagementServices.Configuration.ProvisionerHelper.Run(OperationType

> operationType, Object data) at

> Microsoft.RightsManagementServices.Configuration.ProvisionEngine.Run(OperationType

> operationType, Boolean passwordEncrypted) at

> Microsoft.RightsManagementServices.Configuration.CmdLineHandler.Run() Remove

> and re-install AD RMS to attempt provisioning again.

>

> <Warning>: Before you can administer AD RMS on this server, you must log

> off and log on again.

>

> The following role services were installed:

>

> Active Directory Rights Management Server

>

> Full log can be downloaded from:

> http://www.4shared.com/dir/8290411/63f0e95/sharing.html (ServerManager2.zip)

>

> Help?