Same issue here.

@Cato, what did you change?

Need urgent help....

System.Web.Services.Protocols.SoapException: System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> System.Exception: Error executing 'CREATE_ORG' task on 'winvestor.com' ORGANIZATION ---> System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> This access control list is not in canonical form and therefore cannot be modified.
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at SolidCP.EnterpriseServer.OrganizationController.CreateOrganization(Int32 packageId, String organizationId, String organizationName, String domainName)
--- End of inner exception stack trace ---
at SolidCP.EnterpriseServer.OrganizationController.CreateOrganization(Int32 packageId, String organizationId, String organizationName, String domainName)
at SolidCP.EnterpriseServer.esOrganizations.CreateOrganization(Int32 packageId, String organizationID, String organizationName, String domainName)
--- End of inner exception stack trace ---
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at SolidCP.EnterpriseServer.HostedSolution.esOrganizations.CreateOrganization(Int32 packageId, String organizationID, String organizationName, String domainName)
at SolidCP.Portal.UserCreateSpace.CreateHostingSpace()

in event viewer:

[8/15/2019 3:32:40 PM] ERROR: HostedSolution
System.InvalidOperationException: This access control list is not in canonical form and therefore cannot be modified.
at System.Security.AccessControl.CommonAcl.ThrowIfNotCanonical()
at System.Security.AccessControl.CommonAcl.RemoveQualifiedAces(SecurityIdentifier sid, AceQualifier qualifier, Int32 accessMask, AceFlags flags, Boolean saclSemantics, ObjectAceFlags objectFlags, Guid objectType, Guid inheritedObjectType)
at System.Security.AccessControl.DiscretionaryAcl.RemoveAccess(AccessControlType accessType, SecurityIdentifier sid, Int32 accessMask, InheritanceFlags inheritanceFlags, PropagationFlags propagationFlags, ObjectAceFlags objectFlags, Guid objectType, Guid inheritedObjectType)
at System.Security.AccessControl.DirectoryObjectSecurity.ModifyAccess(AccessControlModification modification, ObjectAccessRule rule, Boolean& modified)
at System.Security.AccessControl.DirectoryObjectSecurity.RemoveAccessRule(ObjectAccessRule rule)
at System.Collections.Generic.List`1.ForEach(Action`1 action)
at SolidCP.Providers.HostedSolution.ActiveDirectoryUtils.RemoveIdentityAllows(String objectPath, IdentityReference identity)
at SolidCP.Providers.HostedSolution.ADPermission.SetOUAclPermissions(OrganizationProvider orgProvider, String organizationId, String rootDomain, String rootDomainPath)
at SolidCP.Providers.HostedSolution.OrganizationProvider.SetOUAclPermissions(String organizationId)

Hello,

We have identified an issue with the latest version depending on how the permissions are applied on the new OU created.

We should have this resolved for the next version.

Kind Regards,

Trevor

Trevor, it doesnt help us that you have identify the issue and dont post a solution, we need a howtodo how to fix it.

Please, someone have a productive enviroment or want start hosting customers like me.
Did we must buy support to get this fixed ?

As it's related to a windows update and heuristics (segregation) part of SolidCP code there's little to do manually from your side.

We therefor have been working and testing a bit of code which will be released next week to solve this problem for everyone.

Thanks Trevor