SQL Server: Installation completed with warning "Setup has detected a non canonical DACL on directory"

The first of SQL Server installataion completed with success. However, when I installed SQL Server second instance, I encounter the SQL Server with two warnings on DACL:

1. Setup has detected a non canonical discretionary access control list (DACL) on directory 'C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP\bin\'. Please verify your security settings and make corrections if needed. 
2. Setup has detected a non canonical discretionary access control list (DACL) on directory 'C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP\bin\'. Please verify your security settings and make corrections if needed. 

Upon investigation, I found extra DACL entries that can be safely removed.

Fortunately, SQL Server warning does not affect SQL Server operation.

Have a great day



Solution

1. Navigate to the warning folder location :
     "C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP"

     "C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP\bin"

2. On Folder, right click and select Properties -> Security tab -> Advanced Button

3. Click on "Change Permission", and delete two account name highlighted in item 2

4. Click 'OK' to apply.

C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Log\<timestamp>\Detail.txt

2014-03-27 12:08:10 Slp: Sco: Attempting to set directory full path 2014-03-27 12:08:10 Slp: Sco: Attempting to normalize directory path C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP\bin\ 2014-03-27 12:08:10 AS: Setting permision on folder C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP\bin\. 2014-03-27 12:08:10 Slp: Sco: Attempting to check if directory C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP\bin\ exists 2014-03-27 12:08:10 Slp: Sco: Attempting to set security descriptor for directory C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP\bin\, security descriptor (A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;CO)(A;OICI;0x1200a9;;;S-1-5-21-3451353373-3992323469-2735359049-1020) 2014-03-27 12:08:10 Slp: Sco: Attempting to check if directory C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP\bin\ exists 2014-03-27 12:08:10 Slp: Sco: Attempting to normalize security descriptor (A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;CO)(A;OICI;0x1200a9;;;S-1-5-21-3451353373-3992323469-2735359049-1020) 2014-03-27 12:08:10 Slp: Sco: Adding 'D:' DACL identifier to the input security descriptor (A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;CO)(A;OICI;0x1200a9;;;S-1-5-21-3451353373-3992323469-2735359049-1020) 2014-03-27 12:08:10 Slp: Sco: Attempting to replace account with sid in security descriptor D:(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;CO)(A;OICI;0x1200a9;;;S-1-5-21-3451353373-3992323469-2735359049-1020) 2014-03-27 12:08:10 Slp: ReplaceAccountWithSidInSddl -- SDDL to be processed: D:(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;CO)(A;OICI;0x1200a9;;;S-1-5-21-3451353373-3992323469-2735359049-1020) 2014-03-27 12:08:10 Slp: ReplaceAccountWithSidInSddl -- SDDL to be returned: D:(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;CO)(A;OICI;0x1200a9;;;S-1-5-21-3451353373-3992323469-2735359049-1020) 2014-03-27 12:08:10 Slp: Setup has detected a non canonical discretionary access control list (DACL) on directory 'C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP\bin\'. Please verify your security settings and make corrections if needed. 2014-03-27 12:08:10 Slp: Setup has detected a non canonical discretionary access control list (DACL) on directory 'C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP\bin\'. Please verify your security settings and make corrections if needed. 2014-03-27 12:08:11 AS: Done setting permision on folder C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP\bin\. 2014-03-27 12:08:11 AS: Action: Detecting Instance Install Directory 2014-03-27 12:08:11 AS: Action: Detecting Sql Install Directory 2014-03-27 12:08:11 AS: Result: C:\Program Files\Microsoft SQL Server\ 2014-03-27 12:08:11 AS: Action: Detecting Instance ID 2014-03-27 12:08:11 AS: Result: MSAS10_50.SS2008R2EE02 2014-03-27 12:08:11 AS: Result: C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP 2014-03-27 12:08:11 Slp: Sco: Attempting to set directory full path 2014-03-27 12:08:11 Slp: Sco: Attempting to normalize directory path C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP 2014-03-27 12:08:11 AS: Setting permision on folder C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP. 2014-03-27 12:08:11 Slp: Sco: Attempting to check if directory C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP exists 2014-03-27 12:08:11 Slp: Sco: Attempting to set security descriptor for directory C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP, security descriptor (A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;CO) 2014-03-27 12:08:11 Slp: Sco: Attempting to check if directory C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP exists 2014-03-27 12:08:11 Slp: Sco: Attempting to normalize security descriptor (A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;CO) 2014-03-27 12:08:11 Slp: Sco: Adding 'D:' DACL identifier to the input security descriptor (A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;CO) 2014-03-27 12:08:11 Slp: Sco: Attempting to replace account with sid in security descriptor D:(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;CO) 2014-03-27 12:08:11 Slp: ReplaceAccountWithSidInSddl -- SDDL to be processed: D:(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;CO) 2014-03-27 12:08:11 Slp: ReplaceAccountWithSidInSddl -- SDDL to be returned: D:(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;CO) 2014-03-27 12:08:11 Slp: Setup has detected a non canonical discretionary access control list (DACL) on directory 'C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP'. Please verify your security settings and make corrections if needed. 2014-03-27 12:08:11 Slp: Setup has detected a non canonical discretionary access control list (DACL) on directory 'C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP'. Please verify your security settings and make corrections if needed. 2014-03-27 12:08:11 AS: Done setting permision on folder C:\Program Files\Microsoft SQL Server\MSAS10_50.SS2008R2EE02\OLAP.