Report Generation fails with error: This access control list is not in canonical form and therefore cannot be modified

book

Article ID: 156163

calendar_today

Updated On:

Products

Control Compliance Suite Windows

Issue/Introduction

Report Generation jobs fail with error: This access control list is not in canonical form and therefore cannot be modified

This access control list is not in canonical form and therefore cannot be modified

Cause

Pre-existing permissions during installation may have affected directories and subdirectories of the product.

Resolution

Note: Please see Microsoft KB323007 to optionally backup current directory structure

1. Utilize Icacls.exe to verify permissions in the Symantec directory structure [modify path as required]:
C:\icacls.exe "C:\Program Files (x86)\Symantec" /verify /T /C /L /Q
2. If step 1 verification returns "Ace entries not in canonical order," reset by executing the following command:
C:\icacls.exe "C:\Program Files (x86)\Symantec" /reset /T /C /L /Q
3. Verify permissions once again per step 1; if successful, message will display "Successfully processed 0 files; Failed processing 0 files." This indicates Ace entries have been corrected.


Applies To

CCS R&A 10.5.1 PCU 2011-4, all in one installation on Windows 2008 R2
SQL server on different box
RMS data collection on different box. 10.50.129.20200