You cannot connect to an instance of SQL Server Analysis Services from an application in Windows 7 or in Windows Server 2008 R2 after you install Office Live Add-in 1.4 or Windows Live ID Sign-in Assistant 6.5

Consider the following scenario:

• You have a computer that is running Windows 7 or Windows Server 2008 R2.
• You install Microsoft Office Live Add-in 1.4 or Windows Live ID Sign-in Assistant 6.5 on the computer.
  
  Note Office Live Add-in 1.4 automatically installs Windows Live ID Sign-in Assistant 6.5.

When you try to connect to a SQL Server Analysis Services cube from an application, you receive the following error message: Note You frequently experience this problem when you connect to an instance of SQL Server Analysis Services from Office Excel 2007 or Office Excel 2010 Beta.

Windows Live ID Sign-in Assistant 6.5 installs a new Security Support Provider (SSP) package. The SSP package causes the Security Support Provider Interface (SSPI) that is used by the Analysis Services OLE DB provider not to switch to NTLM authentication.

Hotfix information

Prerequisites

There are no prerequisites for installing this hotfix.

Restart requirement

You have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any Windows 7 or Windows Server 2008 R2 updates or hotfixes.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows 7 and Windows Server 2008 R2 file information notes

• The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

  Version	Product	Milestone	Service branch
  6.1.760 0.16xxx	Windows 7 and Windows Server 2008 R2	RTM	GDR
  6.1.760 0.20xxx	Windows 7 and Windows Server 2008 R2	RTM	LDR

• GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
• The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows Server 2008 R2 and for Windows 7" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows 7

For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2

For all supported Itanium-based versions of Windows Server 2008 R2

To work around this problem, use one of the following methods.

Method 1: Configure the Analysis Services server to use the Kerberos authentication protocol

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

Method 2: Unregister the LiveSSP component

1. In Registry Editor, locate the following registry subkey:
   
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
2. Double-click the Security Packages registry entry.
3. In the Edit Multi-String dialog box, delete the line that contains the livessp value, and then click OK.
4. Restart the computer.

Method 3: Uninstall Windows Live ID Sign-In Assistant 6.5

Note You must be an administrator to uninstall Windows Live ID Sign-In Assistant 6.5.

1. In Control Panel, click Programs and Features.
2. Under Uninstall or change a program, right-click the Windows Live ID Sign-in Assistant item, and then click Uninstall.

After you uninstall Windows Live ID Sign-In Assistant 6.5, the following conditions occur:

• You revert to using the Office Live Single Sign-On (SSO) functionality.
• When you sign out Office Live Workspace in an Office client application, the Office client application seems to stop responding.
• You can no longer select multiple credentials when you open a Web site that has the Windows Live ID Authentication feature enabled.
• The Microsoft Identity Client Runtime Library (IDCRL) is removed.
  
  Note IDCRL provides a set of Live ID client APIs.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.