IUSR_Machine account permissions in Report Builder

We have an ASP.NET application using Forms authentication which
launches the Report Builder via an HTML link with the href set to:
ReportServer/ReportBuilder/ReportBuilder.application
This will launch Report Builder and allow users to create, modify, and
save reports. But when the user tries to run the report, the above
error message comes up. Just for testing purposes, I tried adding the
IUSR account to the Administrators group but still with the same
result. It seems that everything we try still leads us to the
following error message:
The permissions granted to user '<domain>\IUSR_<machine>' are
insufficient for performing this operation. (rsAccessDenied)
After days of searching for a resolution to this I'm still unsure
about how to fix it. If anyone could give some advice or maybe provide
a link that explains how to resolve the situation we would be sincerely
grateful.
Thanks in advance!I'm encountering the same problem. Launching Report Builder from the
URL and authenticating the forms user, I can create a report and
save/deploy to the server but can't view it through Report Builder.
Also, Report Builder icon doesn't display in Report Manager when using
forms authentication for any user other than the default admin user.
I'll be writing an ASP.NET app to launch and deploy Report Builder but
it would be nice to have the icon in Report Manager
Chris wrote:
> We have an ASP.NET application using Forms authentication which
> launches the Report Builder via an HTML link with the href set to:
> ReportServer/ReportBuilder/ReportBuilder.application
> This will launch Report Builder and allow users to create, modify, and
> save reports. But when the user tries to run the report, the above
> error message comes up. Just for testing purposes, I tried adding the
> IUSR account to the Administrators group but still with the same
> result. It seems that everything we try still leads us to the
> following error message:
> The permissions granted to user '<domain>\IUSR_<machine>' are
> insufficient for performing this operation. (rsAccessDenied)
> After days of searching for a resolution to this I'm still unsure
> about how to fix it. If anyone could give some advice or maybe provide
> a link that explains how to resolve the situation we would be sincerely
> grateful.
> Thanks in advance!|||So have you had any luck with any kind of work-around? It's driving me
crazy and I have a client very anxious to start using it.
Chris
si.downes@.gmail.com wrote:
> I'm encountering the same problem. Launching Report Builder from the
> URL and authenticating the forms user, I can create a report and
> save/deploy to the server but can't view it through Report Builder.
> Also, Report Builder icon doesn't display in Report Manager when using
> forms authentication for any user other than the default admin user.
> I'll be writing an ASP.NET app to launch and deploy Report Builder but
> it would be nice to have the icon in Report Manager
> Chris wrote:
> > We have an ASP.NET application using Forms authentication which
> > launches the Report Builder via an HTML link with the href set to:
> >
> > ReportServer/ReportBuilder/ReportBuilder.application
> >
> > This will launch Report Builder and allow users to create, modify, and
> > save reports. But when the user tries to run the report, the above
> > error message comes up. Just for testing purposes, I tried adding the
> > IUSR account to the Administrators group but still with the same
> > result. It seems that everything we try still leads us to the
> > following error message:
> >
> > The permissions granted to user '<domain>\IUSR_<machine>' are
> > insufficient for performing this operation. (rsAccessDenied)
> >
> > After days of searching for a resolution to this I'm still unsure
> > about how to fix it. If anyone could give some advice or maybe provide
> > a link that explains how to resolve the situation we would be sincerely
> > grateful.
> >
> > Thanks in advance!|||Still no solution!!
Noticed in your error message the failure is for a domain user
<domain>\IUSR_.. mine is for the name of the forms user I have
created in the UserAccounts database. Under IIS I have reportBuilder
running with Anonymous Authentication as user IUSR_
It's starting to drive me mad too, this needs to be integrated into a
product for the end of the month.
Si
Chris wrote:
> So have you had any luck with any kind of work-around? It's driving me
> crazy and I have a client very anxious to start using it.
> Chris
>
> si.downes@.gmail.com wrote:
> > I'm encountering the same problem. Launching Report Builder from the
> > URL and authenticating the forms user, I can create a report and
> > save/deploy to the server but can't view it through Report Builder.
> >
> > Also, Report Builder icon doesn't display in Report Manager when using
> > forms authentication for any user other than the default admin user.
> > I'll be writing an ASP.NET app to launch and deploy Report Builder but
> > it would be nice to have the icon in Report Manager
> >
> > Chris wrote:
> > > We have an ASP.NET application using Forms authentication which
> > > launches the Report Builder via an HTML link with the href set to:
> > >
> > > ReportServer/ReportBuilder/ReportBuilder.application
> > >
> > > This will launch Report Builder and allow users to create, modify, and
> > > save reports. But when the user tries to run the report, the above
> > > error message comes up. Just for testing purposes, I tried adding the
> > > IUSR account to the Administrators group but still with the same
> > > result. It seems that everything we try still leads us to the
> > > following error message:
> > >
> > > The permissions granted to user '<domain>\IUSR_<machine>' are
> > > insufficient for performing this operation. (rsAccessDenied)
> > >
> > > After days of searching for a resolution to this I'm still unsure
> > > about how to fix it. If anyone could give some advice or maybe provide
> > > a link that explains how to resolve the situation we would be sincerely
> > > grateful.
> > >
> > > Thanks in advance!|||To create a user/group that can log into Report Manager and do
everything, create the user/group, then do the following:
1. Log into Report Manager as the admin user (or whatever name you gave
to the admin user).
2. Click "Site Settings" in the top-right corner
3. Under Security, click "Configure Item-level role definitions"
4. Name the Role and assign it to all of the tasks (click OK when done)
5. Click on "Site Settings" again
6. Under Security, click "Configure system-level role definitions"
7. Click "New Role"
8. Name the Role and assign it to all of the tasks (click OK when done)
9. Click "Site Settings"
10. Click "Configure Site-wide security"
11. If your user/group is already listed, click "Edit" next to it,
otherwise click "New Role Assignment" then type in your user/group name
on the next screen
12. Select the checkbox next to the system role you created in steps
6-8 (click Apply when done)
13. Click "Home" in the top-right corner
14. Click on the blue "Properties" tab
15. If your user/group is listed, click "Edit" next to it, otherwise
click "New Role Assignment" and type in your user/group name on the
next screen
16. Select the checkbox next to the role you created in steps 3-4
(click Apply when done).
17. Click Home. The end.
There are two different types of roles: item-level roles and
system-level roles. My guess would be that something was missing from
your list of 'tasks' in the item-level roles assigned to the
group/user. If you follow these instructions, you should end up with a
user/group that can do everything. This should help you determine if
it's a matter of permissions settings or something wonky with your
server setup. FYI, I would recommend against giving your users full
control over everything as described here.
I hope this helps.
Tim Larson

Issue in Domain User Accessing Report

Hello All,
I have created Reporting Services Report and I had given a user Browser
permissions to browse the report. But he is not able to get to the report.
The browser asks for userid and password and when typed it does not take it.
Only when I put the user in the local administrator group, the user is able
to see the report and all the reports.
I checked the app pool and it is running under network service and the
network service is in the local administrator group. Could anybody help?
Thanks!
--
SaravananOne thing you could try (and really is easier than adding user by user
browser permissions). Create a local group (I called mine Reports). Add all
users and groups of users to this report. Then add this group to the browser
role of Home. Everything inherits permissions from the Home directory.
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
news:84A3066B-05BB-4360-8A8E-DCE0DFF6E50D@.microsoft.com...
> Hello All,
> I have created Reporting Services Report and I had given a user Browser
> permissions to browse the report. But he is not able to get to the report.
> The browser asks for userid and password and when typed it does not take
> it.
> Only when I put the user in the local administrator group, the user is
> able
> to see the report and all the reports.
> I checked the app pool and it is running under network service and the
> network service is in the local administrator group. Could anybody help?
> Thanks!
> --
> Saravanan|||Thanks Bruce for your response. I am starting to test with a user now and
that I would be putting the users in groups and assign permissions to the
group. My concern is that, whether the users needs to be on the local admin
group?. Am I missing anything?
--
Saravanan
"Bruce L-C [MVP]" wrote:
> One thing you could try (and really is easier than adding user by user
> browser permissions). Create a local group (I called mine Reports). Add all
> users and groups of users to this report. Then add this group to the browser
> role of Home. Everything inherits permissions from the Home directory.
>
> --
> Bruce Loehle-Conger
> MVP SQL Server Reporting Services
> "Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
> news:84A3066B-05BB-4360-8A8E-DCE0DFF6E50D@.microsoft.com...
> > Hello All,
> > I have created Reporting Services Report and I had given a user Browser
> > permissions to browse the report. But he is not able to get to the report.
> > The browser asks for userid and password and when typed it does not take
> > it.
> >
> > Only when I put the user in the local administrator group, the user is
> > able
> > to see the report and all the reports.
> >
> > I checked the app pool and it is running under network service and the
> > network service is in the local administrator group. Could anybody help?
> >
> > Thanks!
> > --
> > Saravanan
>
>|||No, definitely not. Do not put the user in the local admin group. I think
what you are missing is the process of adding to a role. Click on the home
directory, details, security (on the left panel). Then add a role and use
the new group that you have and give it browsing rights).
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
news:5A61A957-3E8B-464D-8E0F-D1DD886ADA39@.microsoft.com...
> Thanks Bruce for your response. I am starting to test with a user now and
> that I would be putting the users in groups and assign permissions to the
> group. My concern is that, whether the users needs to be on the local
> admin
> group?. Am I missing anything?
> --
> Saravanan
>
> "Bruce L-C [MVP]" wrote:
>> One thing you could try (and really is easier than adding user by user
>> browser permissions). Create a local group (I called mine Reports). Add
>> all
>> users and groups of users to this report. Then add this group to the
>> browser
>> role of Home. Everything inherits permissions from the Home directory.
>>
>> --
>> Bruce Loehle-Conger
>> MVP SQL Server Reporting Services
>> "Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
>> news:84A3066B-05BB-4360-8A8E-DCE0DFF6E50D@.microsoft.com...
>> > Hello All,
>> > I have created Reporting Services Report and I had given a user Browser
>> > permissions to browse the report. But he is not able to get to the
>> > report.
>> > The browser asks for userid and password and when typed it does not
>> > take
>> > it.
>> >
>> > Only when I put the user in the local administrator group, the user is
>> > able
>> > to see the report and all the reports.
>> >
>> > I checked the app pool and it is running under network service and the
>> > network service is in the local administrator group. Could anybody
>> > help?
>> >
>> > Thanks!
>> > --
>> > Saravanan
>>|||Thanks for the patience to answer me Bruce.
Before adding into the local administrators group, I tried that option too.
I included the group onto the Browser Role on the Home of Reporting Services,
then created the folder and I selected assign specific rights to the folder
I uploaded the reports , went to the security tab of the folder and included
the group into the Browser Role. As it did not work, I included the group
into local admin.
Thanks!
--
Saravanan
"Bruce L-C [MVP]" wrote:
> No, definitely not. Do not put the user in the local admin group. I think
> what you are missing is the process of adding to a role. Click on the home
> directory, details, security (on the left panel). Then add a role and use
> the new group that you have and give it browsing rights).
>
> --
> Bruce Loehle-Conger
> MVP SQL Server Reporting Services
>
> "Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
> news:5A61A957-3E8B-464D-8E0F-D1DD886ADA39@.microsoft.com...
> > Thanks Bruce for your response. I am starting to test with a user now and
> > that I would be putting the users in groups and assign permissions to the
> > group. My concern is that, whether the users needs to be on the local
> > admin
> > group?. Am I missing anything?
> > --
> > Saravanan
> >
> >
> > "Bruce L-C [MVP]" wrote:
> >
> >> One thing you could try (and really is easier than adding user by user
> >> browser permissions). Create a local group (I called mine Reports). Add
> >> all
> >> users and groups of users to this report. Then add this group to the
> >> browser
> >> role of Home. Everything inherits permissions from the Home directory.
> >>
> >>
> >> --
> >> Bruce Loehle-Conger
> >> MVP SQL Server Reporting Services
> >>
> >> "Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
> >> news:84A3066B-05BB-4360-8A8E-DCE0DFF6E50D@.microsoft.com...
> >> > Hello All,
> >> > I have created Reporting Services Report and I had given a user Browser
> >> > permissions to browse the report. But he is not able to get to the
> >> > report.
> >> > The browser asks for userid and password and when typed it does not
> >> > take
> >> > it.
> >> >
> >> > Only when I put the user in the local administrator group, the user is
> >> > able
> >> > to see the report and all the reports.
> >> >
> >> > I checked the app pool and it is running under network service and the
> >> > network service is in the local administrator group. Could anybody
> >> > help?
> >> >
> >> > Thanks!
> >> > --
> >> > Saravanan
> >>
> >>
> >>
>
>|||When you assigned specific rights to the folder you overwrote the inherited
rights to Home. All the folders inherit from Home. First, try and get this
working without doing anything to the new folder.
Do this:
1. Add a user to a local group
2. Can they see Home (even if you don't have any folders)
3. Add a folder
4. Can they see this folder?
5. Add a report to the folder.
Again, don't touch any of the rights on the folder you should have to. The
only time to do this is if you want them in some folders and not others. In
that case you can give browsing rights to the folder and not to home and
then a link that brings them directly to the folder in question.
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
news:7FF767C5-2371-4CFB-BAD9-120049766893@.microsoft.com...
> Thanks for the patience to answer me Bruce.
> Before adding into the local administrators group, I tried that option
> too.
> I included the group onto the Browser Role on the Home of Reporting
> Services,
> then created the folder and I selected assign specific rights to the
> folder
> I uploaded the reports , went to the security tab of the folder and
> included
> the group into the Browser Role. As it did not work, I included the group
> into local admin.
> Thanks!
> --
> Saravanan
>
> "Bruce L-C [MVP]" wrote:
>> No, definitely not. Do not put the user in the local admin group. I think
>> what you are missing is the process of adding to a role. Click on the
>> home
>> directory, details, security (on the left panel). Then add a role and use
>> the new group that you have and give it browsing rights).
>>
>> --
>> Bruce Loehle-Conger
>> MVP SQL Server Reporting Services
>>
>> "Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
>> news:5A61A957-3E8B-464D-8E0F-D1DD886ADA39@.microsoft.com...
>> > Thanks Bruce for your response. I am starting to test with a user now
>> > and
>> > that I would be putting the users in groups and assign permissions to
>> > the
>> > group. My concern is that, whether the users needs to be on the local
>> > admin
>> > group?. Am I missing anything?
>> > --
>> > Saravanan
>> >
>> >
>> > "Bruce L-C [MVP]" wrote:
>> >
>> >> One thing you could try (and really is easier than adding user by user
>> >> browser permissions). Create a local group (I called mine Reports).
>> >> Add
>> >> all
>> >> users and groups of users to this report. Then add this group to the
>> >> browser
>> >> role of Home. Everything inherits permissions from the Home directory.
>> >>
>> >>
>> >> --
>> >> Bruce Loehle-Conger
>> >> MVP SQL Server Reporting Services
>> >>
>> >> "Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
>> >> news:84A3066B-05BB-4360-8A8E-DCE0DFF6E50D@.microsoft.com...
>> >> > Hello All,
>> >> > I have created Reporting Services Report and I had given a user
>> >> > Browser
>> >> > permissions to browse the report. But he is not able to get to the
>> >> > report.
>> >> > The browser asks for userid and password and when typed it does not
>> >> > take
>> >> > it.
>> >> >
>> >> > Only when I put the user in the local administrator group, the user
>> >> > is
>> >> > able
>> >> > to see the report and all the reports.
>> >> >
>> >> > I checked the app pool and it is running under network service and
>> >> > the
>> >> > network service is in the local administrator group. Could anybody
>> >> > help?
>> >> >
>> >> > Thanks!
>> >> > --
>> >> > Saravanan
>> >>
>> >>
>> >>
>>|||Hi Bruce,
Thanks for the step by step instructions. This is what I did
1. Created a Usergroup named ReportUsers
2. Included a Domain User into it (who does not have any access on the
machine)
3. I went to the Reporting services home and selected Properties > Security
and provided this group a role of Browser
4. I asked the user to go into the home page as
http://machinename/reports/Pages/Folder.aspx
5. The user is prompted with the a userid and password dialog box with the
machinename.domain.com in the dialog box above the userid text box.
Please let me know, if this makes sense.
Thanks for your support
--
Saravanan
"Bruce L-C [MVP]" wrote:
> When you assigned specific rights to the folder you overwrote the inherited
> rights to Home. All the folders inherit from Home. First, try and get this
> working without doing anything to the new folder.
> Do this:
> 1. Add a user to a local group
> 2. Can they see Home (even if you don't have any folders)
> 3. Add a folder
> 4. Can they see this folder?
> 5. Add a report to the folder.
> Again, don't touch any of the rights on the folder you should have to. The
> only time to do this is if you want them in some folders and not others. In
> that case you can give browsing rights to the folder and not to home and
> then a link that brings them directly to the folder in question.
>
> --
> Bruce Loehle-Conger
> MVP SQL Server Reporting Services
> "Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
> news:7FF767C5-2371-4CFB-BAD9-120049766893@.microsoft.com...
> > Thanks for the patience to answer me Bruce.
> >
> > Before adding into the local administrators group, I tried that option
> > too.
> > I included the group onto the Browser Role on the Home of Reporting
> > Services,
> > then created the folder and I selected assign specific rights to the
> > folder
> >
> > I uploaded the reports , went to the security tab of the folder and
> > included
> > the group into the Browser Role. As it did not work, I included the group
> > into local admin.
> > Thanks!
> > --
> > Saravanan
> >
> >
> > "Bruce L-C [MVP]" wrote:
> >
> >> No, definitely not. Do not put the user in the local admin group. I think
> >> what you are missing is the process of adding to a role. Click on the
> >> home
> >> directory, details, security (on the left panel). Then add a role and use
> >> the new group that you have and give it browsing rights).
> >>
> >>
> >> --
> >> Bruce Loehle-Conger
> >> MVP SQL Server Reporting Services
> >>
> >>
> >> "Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
> >> news:5A61A957-3E8B-464D-8E0F-D1DD886ADA39@.microsoft.com...
> >> > Thanks Bruce for your response. I am starting to test with a user now
> >> > and
> >> > that I would be putting the users in groups and assign permissions to
> >> > the
> >> > group. My concern is that, whether the users needs to be on the local
> >> > admin
> >> > group?. Am I missing anything?
> >> > --
> >> > Saravanan
> >> >
> >> >
> >> > "Bruce L-C [MVP]" wrote:
> >> >
> >> >> One thing you could try (and really is easier than adding user by user
> >> >> browser permissions). Create a local group (I called mine Reports).
> >> >> Add
> >> >> all
> >> >> users and groups of users to this report. Then add this group to the
> >> >> browser
> >> >> role of Home. Everything inherits permissions from the Home directory.
> >> >>
> >> >>
> >> >> --
> >> >> Bruce Loehle-Conger
> >> >> MVP SQL Server Reporting Services
> >> >>
> >> >> "Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
> >> >> news:84A3066B-05BB-4360-8A8E-DCE0DFF6E50D@.microsoft.com...
> >> >> > Hello All,
> >> >> > I have created Reporting Services Report and I had given a user
> >> >> > Browser
> >> >> > permissions to browse the report. But he is not able to get to the
> >> >> > report.
> >> >> > The browser asks for userid and password and when typed it does not
> >> >> > take
> >> >> > it.
> >> >> >
> >> >> > Only when I put the user in the local administrator group, the user
> >> >> > is
> >> >> > able
> >> >> > to see the report and all the reports.
> >> >> >
> >> >> > I checked the app pool and it is running under network service and
> >> >> > the
> >> >> > network service is in the local administrator group. Could anybody
> >> >> > help?
> >> >> >
> >> >> > Thanks!
> >> >> > --
> >> >> > Saravanan
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>|||When prompted can they do this:
domainname\username put into the userid box and then their password?
I had this happen to me before and tore my hair out resolving it. For me the
issue was that the server did not have a fixed IP address, it was using
DHCP. Once I made it a fixed IP address then the problem went away.
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
news:0C759E42-7D5E-4CD0-872E-E7F1619884DE@.microsoft.com...
> Hi Bruce,
> Thanks for the step by step instructions. This is what I did
> 1. Created a Usergroup named ReportUsers
> 2. Included a Domain User into it (who does not have any access on the
> machine)
> 3. I went to the Reporting services home and selected Properties >
> Security
> and provided this group a role of Browser
> 4. I asked the user to go into the home page as
> http://machinename/reports/Pages/Folder.aspx
> 5. The user is prompted with the a userid and password dialog box with the
> machinename.domain.com in the dialog box above the userid text box.
> Please let me know, if this makes sense.
> Thanks for your support
> --
> Saravanan
>
> "Bruce L-C [MVP]" wrote:
>> When you assigned specific rights to the folder you overwrote the
>> inherited
>> rights to Home. All the folders inherit from Home. First, try and get
>> this
>> working without doing anything to the new folder.
>> Do this:
>> 1. Add a user to a local group
>> 2. Can they see Home (even if you don't have any folders)
>> 3. Add a folder
>> 4. Can they see this folder?
>> 5. Add a report to the folder.
>> Again, don't touch any of the rights on the folder you should have to.
>> The
>> only time to do this is if you want them in some folders and not others.
>> In
>> that case you can give browsing rights to the folder and not to home and
>> then a link that brings them directly to the folder in question.
>>
>> --
>> Bruce Loehle-Conger
>> MVP SQL Server Reporting Services
>> "Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
>> news:7FF767C5-2371-4CFB-BAD9-120049766893@.microsoft.com...
>> > Thanks for the patience to answer me Bruce.
>> >
>> > Before adding into the local administrators group, I tried that option
>> > too.
>> > I included the group onto the Browser Role on the Home of Reporting
>> > Services,
>> > then created the folder and I selected assign specific rights to the
>> > folder
>> >
>> > I uploaded the reports , went to the security tab of the folder and
>> > included
>> > the group into the Browser Role. As it did not work, I included the
>> > group
>> > into local admin.
>> > Thanks!
>> > --
>> > Saravanan
>> >
>> >
>> > "Bruce L-C [MVP]" wrote:
>> >
>> >> No, definitely not. Do not put the user in the local admin group. I
>> >> think
>> >> what you are missing is the process of adding to a role. Click on the
>> >> home
>> >> directory, details, security (on the left panel). Then add a role and
>> >> use
>> >> the new group that you have and give it browsing rights).
>> >>
>> >>
>> >> --
>> >> Bruce Loehle-Conger
>> >> MVP SQL Server Reporting Services
>> >>
>> >>
>> >> "Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
>> >> news:5A61A957-3E8B-464D-8E0F-D1DD886ADA39@.microsoft.com...
>> >> > Thanks Bruce for your response. I am starting to test with a user
>> >> > now
>> >> > and
>> >> > that I would be putting the users in groups and assign permissions
>> >> > to
>> >> > the
>> >> > group. My concern is that, whether the users needs to be on the
>> >> > local
>> >> > admin
>> >> > group?. Am I missing anything?
>> >> > --
>> >> > Saravanan
>> >> >
>> >> >
>> >> > "Bruce L-C [MVP]" wrote:
>> >> >
>> >> >> One thing you could try (and really is easier than adding user by
>> >> >> user
>> >> >> browser permissions). Create a local group (I called mine Reports).
>> >> >> Add
>> >> >> all
>> >> >> users and groups of users to this report. Then add this group to
>> >> >> the
>> >> >> browser
>> >> >> role of Home. Everything inherits permissions from the Home
>> >> >> directory.
>> >> >>
>> >> >>
>> >> >> --
>> >> >> Bruce Loehle-Conger
>> >> >> MVP SQL Server Reporting Services
>> >> >>
>> >> >> "Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
>> >> >> news:84A3066B-05BB-4360-8A8E-DCE0DFF6E50D@.microsoft.com...
>> >> >> > Hello All,
>> >> >> > I have created Reporting Services Report and I had given a user
>> >> >> > Browser
>> >> >> > permissions to browse the report. But he is not able to get to
>> >> >> > the
>> >> >> > report.
>> >> >> > The browser asks for userid and password and when typed it does
>> >> >> > not
>> >> >> > take
>> >> >> > it.
>> >> >> >
>> >> >> > Only when I put the user in the local administrator group, the
>> >> >> > user
>> >> >> > is
>> >> >> > able
>> >> >> > to see the report and all the reports.
>> >> >> >
>> >> >> > I checked the app pool and it is running under network service
>> >> >> > and
>> >> >> > the
>> >> >> > network service is in the local administrator group. Could
>> >> >> > anybody
>> >> >> > help?
>> >> >> >
>> >> >> > Thanks!
>> >> >> > --
>> >> >> > Saravanan
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>|||Hi Bruce,
Thanks for your ideas.
Even if they put their Domain userid and password it is not letting them in.
I checked the IP configuration and I can see that the IP has been assigned
static
--
Saravanan
"Bruce L-C [MVP]" wrote:
> When prompted can they do this:
> domainname\username put into the userid box and then their password?
> I had this happen to me before and tore my hair out resolving it. For me the
> issue was that the server did not have a fixed IP address, it was using
> DHCP. Once I made it a fixed IP address then the problem went away.
>
> --
> Bruce Loehle-Conger
> MVP SQL Server Reporting Services
>
> "Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
> news:0C759E42-7D5E-4CD0-872E-E7F1619884DE@.microsoft.com...
> > Hi Bruce,
> > Thanks for the step by step instructions. This is what I did
> > 1. Created a Usergroup named ReportUsers
> > 2. Included a Domain User into it (who does not have any access on the
> > machine)
> > 3. I went to the Reporting services home and selected Properties >
> > Security
> > and provided this group a role of Browser
> > 4. I asked the user to go into the home page as
> > http://machinename/reports/Pages/Folder.aspx
> > 5. The user is prompted with the a userid and password dialog box with the
> > machinename.domain.com in the dialog box above the userid text box.
> >
> > Please let me know, if this makes sense.
> > Thanks for your support
> > --
> > Saravanan
> >
> >
> > "Bruce L-C [MVP]" wrote:
> >
> >> When you assigned specific rights to the folder you overwrote the
> >> inherited
> >> rights to Home. All the folders inherit from Home. First, try and get
> >> this
> >> working without doing anything to the new folder.
> >> Do this:
> >> 1. Add a user to a local group
> >> 2. Can they see Home (even if you don't have any folders)
> >> 3. Add a folder
> >> 4. Can they see this folder?
> >> 5. Add a report to the folder.
> >>
> >> Again, don't touch any of the rights on the folder you should have to.
> >> The
> >> only time to do this is if you want them in some folders and not others.
> >> In
> >> that case you can give browsing rights to the folder and not to home and
> >> then a link that brings them directly to the folder in question.
> >>
> >>
> >> --
> >> Bruce Loehle-Conger
> >> MVP SQL Server Reporting Services
> >>
> >> "Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
> >> news:7FF767C5-2371-4CFB-BAD9-120049766893@.microsoft.com...
> >> > Thanks for the patience to answer me Bruce.
> >> >
> >> > Before adding into the local administrators group, I tried that option
> >> > too.
> >> > I included the group onto the Browser Role on the Home of Reporting
> >> > Services,
> >> > then created the folder and I selected assign specific rights to the
> >> > folder
> >> >
> >> > I uploaded the reports , went to the security tab of the folder and
> >> > included
> >> > the group into the Browser Role. As it did not work, I included the
> >> > group
> >> > into local admin.
> >> > Thanks!
> >> > --
> >> > Saravanan
> >> >
> >> >
> >> > "Bruce L-C [MVP]" wrote:
> >> >
> >> >> No, definitely not. Do not put the user in the local admin group. I
> >> >> think
> >> >> what you are missing is the process of adding to a role. Click on the
> >> >> home
> >> >> directory, details, security (on the left panel). Then add a role and
> >> >> use
> >> >> the new group that you have and give it browsing rights).
> >> >>
> >> >>
> >> >> --
> >> >> Bruce Loehle-Conger
> >> >> MVP SQL Server Reporting Services
> >> >>
> >> >>
> >> >> "Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
> >> >> news:5A61A957-3E8B-464D-8E0F-D1DD886ADA39@.microsoft.com...
> >> >> > Thanks Bruce for your response. I am starting to test with a user
> >> >> > now
> >> >> > and
> >> >> > that I would be putting the users in groups and assign permissions
> >> >> > to
> >> >> > the
> >> >> > group. My concern is that, whether the users needs to be on the
> >> >> > local
> >> >> > admin
> >> >> > group?. Am I missing anything?
> >> >> > --
> >> >> > Saravanan
> >> >> >
> >> >> >
> >> >> > "Bruce L-C [MVP]" wrote:
> >> >> >
> >> >> >> One thing you could try (and really is easier than adding user by
> >> >> >> user
> >> >> >> browser permissions). Create a local group (I called mine Reports).
> >> >> >> Add
> >> >> >> all
> >> >> >> users and groups of users to this report. Then add this group to
> >> >> >> the
> >> >> >> browser
> >> >> >> role of Home. Everything inherits permissions from the Home
> >> >> >> directory.
> >> >> >>
> >> >> >>
> >> >> >> --
> >> >> >> Bruce Loehle-Conger
> >> >> >> MVP SQL Server Reporting Services
> >> >> >>
> >> >> >> "Saravanan" <Saravanan@.discussions.microsoft.com> wrote in message
> >> >> >> news:84A3066B-05BB-4360-8A8E-DCE0DFF6E50D@.microsoft.com...
> >> >> >> > Hello All,
> >> >> >> > I have created Reporting Services Report and I had given a user
> >> >> >> > Browser
> >> >> >> > permissions to browse the report. But he is not able to get to
> >> >> >> > the
> >> >> >> > report.
> >> >> >> > The browser asks for userid and password and when typed it does
> >> >> >> > not
> >> >> >> > take
> >> >> >> > it.
> >> >> >> >
> >> >> >> > Only when I put the user in the local administrator group, the
> >> >> >> > user
> >> >> >> > is
> >> >> >> > able
> >> >> >> > to see the report and all the reports.
> >> >> >> >
> >> >> >> > I checked the app pool and it is running under network service
> >> >> >> > and
> >> >> >> > the
> >> >> >> > network service is in the local administrator group. Could
> >> >> >> > anybody
> >> >> >> > help?
> >> >> >> >
> >> >> >> > Thanks!
> >> >> >> > --
> >> >> >> > Saravanan
> >> >> >>
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>|||> > > 5. The user is prompted with the a userid and password dialog box with the
> > > machinename.domain.com in the dialog box above the userid text box.
>
This sounds to me like it is related to permissions required to access
the report manager website (permissions set in IIS) rather than
permissions to access the reports via report manager. You may need to
give the user/group permission to read the actual folder where the
report server website is installed (should be similar to 'C:\Program
Files\Microsoft SQL Server\MSSQL\Reporting Services\'). Check to
ensure the user has these privileges.
Rowen|||Unless IIS permissions have been changed from outside of RS there is never a
need to do anything with IIS permissions. However, if anyone has been
changing permissions with IIS then there could be a problem with a mismatch
between the two.
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"Rowen" <rowenmcd@.gmail.com> wrote in message
news:1170200769.300637.219980@.h3g2000cwc.googlegroups.com...
>> > > 5. The user is prompted with the a userid and password dialog box
>> > > with the
>> > > machinename.domain.com in the dialog box above the userid text box.
> This sounds to me like it is related to permissions required to access
> the report manager website (permissions set in IIS) rather than
> permissions to access the reports via report manager. You may need to
> give the user/group permission to read the actual folder where the
> report server website is installed (should be similar to 'C:\Program
> Files\Microsoft SQL Server\MSSQL\Reporting Services\'). Check to
> ensure the user has these privileges.
> Rowen
>|||Thanks Rowen and Bruce. No body changed the permissions on the server, but
when I followed Rowen's idea it worked. Now the users are able see the report
without Admin priveliges on the report server machine.
Again! Thanks a lot
--
Saravanan
"Bruce L-C [MVP]" wrote:
> Unless IIS permissions have been changed from outside of RS there is never a
> need to do anything with IIS permissions. However, if anyone has been
> changing permissions with IIS then there could be a problem with a mismatch
> between the two.
>
> --
> Bruce Loehle-Conger
> MVP SQL Server Reporting Services
> "Rowen" <rowenmcd@.gmail.com> wrote in message
> news:1170200769.300637.219980@.h3g2000cwc.googlegroups.com...
> >
> >> > > 5. The user is prompted with the a userid and password dialog box
> >> > > with the
> >> > > machinename.domain.com in the dialog box above the userid text box.
> >>
> >
> > This sounds to me like it is related to permissions required to access
> > the report manager website (permissions set in IIS) rather than
> > permissions to access the reports via report manager. You may need to
> > give the user/group permission to read the actual folder where the
> > report server website is installed (should be similar to 'C:\Program
> > Files\Microsoft SQL Server\MSSQL\Reporting Services\'). Check to
> > ensure the user has these privileges.
> >
> > Rowen
> >
>
>|||On Feb 1, 5:32 am, Saravanan <Sarava...@.discussions.microsoft.com>
wrote:
> Thanks Rowen and Bruce. No body changed the permissions on the server, but
> when I followed Rowen's idea it worked. Now the users are able see the report
> without Admin priveliges on the report server machine.
> Again! Thanks a lot
> --
> Saravanan
> "Bruce L-C [MVP]" wrote:
> > Unless IIS permissions have been changed from outside of RS there is never a
> > need to do anything with IIS permissions. However, if anyone has been
> > changing permissions with IIS then there could be a problem with a mismatch
> > between the two.
> > --
> > Bruce Loehle-Conger
> > MVP SQL Server Reporting Services
> > "Rowen" <rowen...@.gmail.com> wrote in message
> >news:1170200769.300637.219980@.h3g2000cwc.googlegroups.com...
> > >> > > 5. The user is prompted with the a userid and password dialog box
> > >> > > with the
> > >> > > machinename.domain.com in the dialog box above the userid text box.
> > > This sounds to me like it is related to permissions required to access
> > > the report manager website (permissions set in IIS) rather than
> > > permissions to access the reports via report manager. You may need to
> > > give the user/group permission to read the actual folder where the
> > > report server website is installed (should be similar to 'C:\Program
> > > Files\Microsoft SQL Server\MSSQL\Reporting Services\'). Check to
> > > ensure the user has these privileges.
> > > Rowen
Glad to hear this solved the problem. It may have been there since
reporting services was installed (particularly when using reporting
services 2003, which often requires manual configuration after
installation).
Rowen