User unable to launch APM Service running the action scheduler do to license expiry. System, NT Authority, was not granted permissions to the Bentley Registry when licensing was set-up. When the Select Server Permissions, or the Bentley Licensing Tool were run, the user received the following error message:
"-Granting user NT AUTHORITY\SYSTEM permissions to the folder C:\ProgramData\Bentley\Licensing
-Granting user NT AUTHORITY\SYSTEM permissions to the registry key SOFTWARE\Bentley\Licensing
-Failed to grant registry key permissions. Error: failed to grant user [NT AUTHORITY\SYSTEM] permission to registry location [SOFTWARE\Bentley\Licensing]. Error Message: [This access control list is not in canonical form and therefore cannot be modified.]"
This issue was corrected by launching the Windows Registry Editor (regedit) and updating the Bentley Licensing node: \HKEY_LOCAL_MACHINE\SOFTWARE\Bentley\Licensing permissions to allow the administrator and system account "Full Control".
Note - this same error can also result in the error message:
"This access control list is not in canonical form and therefore cannot be modified."
While this sometimes indicates that the user's registry is corrupted, it may also be resolved by finding the Registry node that is broken, changing the permissions to "Full Control" and making sure inheritance is turned on for child files. In this case you may need to contact the user's internal IS group to investigate and resolve as the problem is not just with the Bentley segment of the Windows Registry.