1-800-691-1991 | 9am - 8pm ET

BEM install fails with “This access control list is not in canonical form and therefore cannot be modified.”


When attempt to install Veeam Backup Enterprise Manager v8 the following error occurs:

User-added image

“This access control list is not in canonical form and therefore cannot be modified.”



To resolve this issue the Veeam related keys within the registry must be Reordered. Please follow these steps to correct this issue:

1. Open the Registry Editor (Regedit.exe)
2. Navigate to HKLM\Software\Veeam
3. Expand the Veeam key
4. Right-click each of the Keys below “Veeam” and select ‘Permissions.’

User-added image

4. One or more of these keys will display a Warning relating to needing to Reorder.
5. Click Reorder.

User-added image

After checking all of the Veeam related keys to see if they need to be Reordered, proceed with attempting to install Veeam Backup Enterprise Manager.
The Reorder operation may need to be performed on one or more Keys within the Registry.
Veeam Backup & Replication
Last Modified:
Please rate how helpful this article was to you:
5 out of 5 based on 1 ratings
Thank you for helping us improve!
An error occurred during voting. Please try again later.

Couldn't find what you were looking for?

Below you can submit an idea for a new knowledge base article.
Report a typo on this page:

Please select a spelling error or a typo on this page with your mouse and press CTRL + Enter to report this mistake to us. Thank you!

Spelling error in text

Knowledge base content request
By submitting, you agree that your personal data will be managed by Veeam in accordance with the Privacy Policy.

ty icon

Thank you!

We have received your request and our team will reach out to you shortly.


error icon

Oops! Something went wrong.

Please go back try again later.