Installing AD Rights Management Services gives error

  • Thread starter Thread starter Bob
  • Start date Start date
B

Bob

Guest
My network:
one Win2008 DC, and one Win2008 AD RMS, both running in Vmware Workstation
with VMware tools installed.

Whenever I isntall RMS role, I'll get an error. The error is as following:

Active Directory Rights Management Services: Installation succeeded with
errors


<Error>: Attempt to configure Active Directory Rights Management Server
failed. This access control list is not in canonical form and therefore
cannot be modified. at
System.Security.AccessControl.CommonAcl.RemoveInheritedAces() at
System.Security.AccessControl.CommonSecurityDescriptor.SetDiscretionaryAclProtection(Boolean
isProtected, Boolean preserveInheritance) at
System.Security.AccessControl.ObjectSecurity.SetAccessRuleProtection(Boolean
isProtected, Boolean preserveInheritance) at
Microsoft.RightsManagementServices.Configuration.ProvisionSecurity.ACLConnectionStringInRegistry()
at
Microsoft.RightsManagementServices.Configuration.EnterpriseProvisionSecurity.ApplyPostProvisionSecurity()
at
Microsoft.RightsManagementServices.Configuration.GlicProvisionSecurity.ApplyPostProvisionSecurity()
at
Microsoft.RightsManagementServices.Configuration.ProvisioningBase.ApplyPostProvisionSecurity()
at Microsoft.RightsManagementServices.Configuration.ProvisioningBase.Run() at
Microsoft.RightsManagementServices.Configuration.ProvisionerBase.DoProvision()
at
Microsoft.RightsManagementServices.Configuration.ProvisionerHelper.Run(OperationType
operationType, Object data) at
Microsoft.RightsManagementServices.Configuration.ProvisionEngine.Run(OperationType
operationType, Boolean passwordEncrypted) at
Microsoft.RightsManagementServices.Configuration.CmdLineHandler.Run() Remove
and re-install AD RMS to attempt provisioning again.

<Warning>: Before you can administer AD RMS on this server, you must log
off and log on again.

The following role services were installed:

Active Directory Rights Management Server

Full log can be downloaded from:
http://www.4shared.com/dir/8290411/63f0e95/sharing.html (ServerManager2.zip)

Help?
 
RE: Installing AD Rights Management Services gives error

See if this is related to your issue:
http://kbalertz.com/916893/Error-me...ePoint-Services-access-control-canonical.aspx

--
Jabez Gan [MVP]
http://www.blizhosting.com
http://www.msblog.org


"Bob" wrote:

> My network:
> one Win2008 DC, and one Win2008 AD RMS, both running in Vmware Workstation
> with VMware tools installed.
>
> Whenever I isntall RMS role, I'll get an error. The error is as following:
>
> Active Directory Rights Management Services: Installation succeeded with
> errors
>
>
> <Error>: Attempt to configure Active Directory Rights Management Server
> failed. This access control list is not in canonical form and therefore
> cannot be modified. at
> System.Security.AccessControl.CommonAcl.RemoveInheritedAces() at
> System.Security.AccessControl.CommonSecurityDescriptor.SetDiscretionaryAclProtection(Boolean
> isProtected, Boolean preserveInheritance) at
> System.Security.AccessControl.ObjectSecurity.SetAccessRuleProtection(Boolean
> isProtected, Boolean preserveInheritance) at
> Microsoft.RightsManagementServices.Configuration.ProvisionSecurity.ACLConnectionStringInRegistry()
> at
> Microsoft.RightsManagementServices.Configuration.EnterpriseProvisionSecurity.ApplyPostProvisionSecurity()
> at
> Microsoft.RightsManagementServices.Configuration.GlicProvisionSecurity.ApplyPostProvisionSecurity()
> at
> Microsoft.RightsManagementServices.Configuration.ProvisioningBase.ApplyPostProvisionSecurity()
> at Microsoft.RightsManagementServices.Configuration.ProvisioningBase.Run() at
> Microsoft.RightsManagementServices.Configuration.ProvisionerBase.DoProvision()
> at
> Microsoft.RightsManagementServices.Configuration.ProvisionerHelper.Run(OperationType
> operationType, Object data) at
> Microsoft.RightsManagementServices.Configuration.ProvisionEngine.Run(OperationType
> operationType, Boolean passwordEncrypted) at
> Microsoft.RightsManagementServices.Configuration.CmdLineHandler.Run() Remove
> and re-install AD RMS to attempt provisioning again.
>
> <Warning>: Before you can administer AD RMS on this server, you must log
> off and log on again.
>
> The following role services were installed:
>
> Active Directory Rights Management Server
>
> Full log can be downloaded from:
> http://www.4shared.com/dir/8290411/63f0e95/sharing.html (ServerManager2.zip)
>
> Help?
 
Back
Top