Showing posts with label admin. Show all posts
Showing posts with label admin. Show all posts

Friday, March 9, 2012

Report Service not showing up in WSS 3.0 Central Admin

I installed the Reporting Service for Share Point just fine but when I go to central admin I do not see the reporting service section. Any Ideas?Can you check under site settings -> Site collection features and see if the feature is activated?|||

Install SharePoint.exe and Install SharePointRS.msi with same user ?

|||I had installed the reporting service and share point as different users on the server. I reinstalled RS using the same login as was used to install WSS and I now have the Report Service in Central Admin. THanks for all of the help.

Report Server Windows Service Problem

Hello,

I am my department's Sys Admin and a relativelty Noobie when it comes to SQL server. So I recently Installed SQL Server 2005 on a Win2003 Server. During install I set my domain account as the service account login. After the DB and Web Application were setup and running good I realized that the SQL service accounts were logging in as my domain account. Not a good thing right? So in SQL Server Configuration Manager I changed the services from logging on as my domain account to the local system account instead.

Enter the problem: now I notice in application event viewer the Report Server Windows Service is erroring every minute. The error reads "Report server windows service cannot connect to the report server database." Im sure this was caused by me changing what account the report server service logs in as and local system account not having appropriate permissions. So what account should the report server windows service log in as? I see where to change the windows report service identity in Configure Report Server but I am not able to backup an encryption key? Thanks in advance!

If everything is installed locally I'd suggest you use LocalSystem although the setup suggests you use a domain account. Use the Reporting Services Configuration Manager (found under the Configuration Tools program group in the Microsoft SQL Server 2005 program group) to reset the Windows Service account. Since you don't have a backup of the encryption key, you may need to delete the encrypted content (Encryption Keys section) before you can reset the account. The following info may help. The moral of this story is that you should always back up the encryption key (you can use the config utility) as a last step after RS is set up.

Wednesday, March 7, 2012

Report Server Password

I am in a panic right about now. We had to change the Admin (server) password and it is working fine to log on to Windows, but when I click on IE and navigate to the report server, it is asking me for the old password still. I am new to SRS, so I am learning as I go. I found some threads on using the rsconfig.exe and I fiddled around in it and now (in addition to requesting the old password to log on to the report server) all of the reports I created have a user name and password field that requires the SA password for connecting to the data source.

Is there any way I can fix this or do I just need to uninstall SRS from the server and re-install it? I found the following thread, but am a little skiddish about doing anything else in light of the current state I put the report server in.

https://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=1031391&SiteID=1

Any suggestions?I got it, amd it was actually pretty simple. I just had to delete the folders from the Report Server (the ones you see when you go to the http://) and then re-build them.

report server no longer sends emails

We had to change the administrator password recently. So I took the
opportunity and created a sql user (yes.. it is domain admin) and moved the
sql and reporting services to run under this user instead of administrator.
Since this time, my report server doesn't send out the reports via email. I
am not sure where to look to even determine what exactly the problem is.
Thanks.
StaceyI think i found the problem.. just no solution. When I look at the history
of the job that executed the report. It says that it Executed as user: NT
AUTHORITY\NETWORK SERVICE. instead of executing as the user that I want.
Any idea how to change this?
"Stacey" <StaceyL@.community.nospam> wrote in message
news:OoEkrGeJGHA.208@.tk2msftngp13.phx.gbl...
> We had to change the administrator password recently. So I took the
> opportunity and created a sql user (yes.. it is domain admin) and moved
> the sql and reporting services to run under this user instead of
> administrator. Since this time, my report server doesn't send out the
> reports via email. I am not sure where to look to even determine what
> exactly the problem is. Thanks.
>
> Stacey
>|||If a domain admin sets up the subscription does it work?|||Hi Stace,
Welcome to use MSDN Managed Newsgroup!
What is the current startup account of Reporting Services? From the error
message, it seems that the startup account of Reporting Services is still
Network Services.
To change the startup account of RS, you can open the Services Control
Panel, find the ReportServer windows services and change its logon account.
You mentioned that you have created a new windows account for RS. After
that, have you configured the RS? Please let me know your configuration
steps.
If anything is unclear, please feel free to let me know.
Thanks & Regards,
Justin Shen
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.
This and other support options are available here:
BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/
If you are outside the United States, please visit our International
Support page:
http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--
| From: "Stacey" <StaceyL@.community.nospam>
| References: <OoEkrGeJGHA.208@.tk2msftngp13.phx.gbl>
| Subject: Re: report server no longer sends emails
| Date: Mon, 30 Jan 2006 16:35:04 -0500
| Lines: 20
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
| X-RFC2646: Format=Flowed; Response
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
| Message-ID: <uDiQjReJGHA.1388@.TK2MSFTNGP11.phx.gbl>
| Newsgroups: microsoft.public.sqlserver.reportingsvcs
| NNTP-Posting-Host: 208.49.251.54
| Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP11.phx.gbl
| Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.reportingsvcs:67827
| X-Tomcat-NG: microsoft.public.sqlserver.reportingsvcs
|
| I think i found the problem.. just no solution. When I look at the
history
| of the job that executed the report. It says that it Executed as user: NT
| AUTHORITY\NETWORK SERVICE. instead of executing as the user that I want.
| Any idea how to change this?
| "Stacey" <StaceyL@.community.nospam> wrote in message
| news:OoEkrGeJGHA.208@.tk2msftngp13.phx.gbl...
| > We had to change the administrator password recently. So I took the
| > opportunity and created a sql user (yes.. it is domain admin) and moved
| > the sql and reporting services to run under this user instead of
| > administrator. Since this time, my report server doesn't send out the
| > reports via email. I am not sure where to look to even determine what
| > exactly the problem is. Thanks.
| >
| >
| >
| > Stacey
| >
| >
|
|
||||I found the solution. There was a new user created in Active Directory that
report services and sql were running under. The report would not email.
And the jobs did not execute as that user. When I added that user explicitly
to SQL Logins, then everything started working fine. I did not think that
was necessary - but I guess it is.
"Justin Shen[MSFT]" <v-yishen@.online.microsoft.com> wrote in message
news:62vwFbiJGHA.3680@.TK2MSFTNGXA02.phx.gbl...
> Hi Stace,
> Welcome to use MSDN Managed Newsgroup!
> What is the current startup account of Reporting Services? From the error
> message, it seems that the startup account of Reporting Services is still
> Network Services.
> To change the startup account of RS, you can open the Services Control
> Panel, find the ReportServer windows services and change its logon
> account.
> You mentioned that you have created a new windows account for RS. After
> that, have you configured the RS? Please let me know your configuration
> steps.
> If anything is unclear, please feel free to let me know.
> Thanks & Regards,
> Justin Shen
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================> Business-Critical Phone Support (BCPS) provides you with technical phone
> support at no charge during critical LAN outages or "business down"
> situations. This benefit is available 24 hours a day, 7 days a week to all
> Microsoft technology partners in the United States and Canada.
> This and other support options are available here:
> BCPS:
> https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
> Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/
> If you are outside the United States, please visit our International
> Support page:
> http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
> =====================================================> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> --
> | From: "Stacey" <StaceyL@.community.nospam>
> | References: <OoEkrGeJGHA.208@.tk2msftngp13.phx.gbl>
> | Subject: Re: report server no longer sends emails
> | Date: Mon, 30 Jan 2006 16:35:04 -0500
> | Lines: 20
> | X-Priority: 3
> | X-MSMail-Priority: Normal
> | X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
> | X-RFC2646: Format=Flowed; Response
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
> | Message-ID: <uDiQjReJGHA.1388@.TK2MSFTNGP11.phx.gbl>
> | Newsgroups: microsoft.public.sqlserver.reportingsvcs
> | NNTP-Posting-Host: 208.49.251.54
> | Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP11.phx.gbl
> | Xref: TK2MSFTNGXA02.phx.gbl
> microsoft.public.sqlserver.reportingsvcs:67827
> | X-Tomcat-NG: microsoft.public.sqlserver.reportingsvcs
> |
> | I think i found the problem.. just no solution. When I look at the
> history
> | of the job that executed the report. It says that it Executed as user:
> NT
> | AUTHORITY\NETWORK SERVICE. instead of executing as the user that I want.
> | Any idea how to change this?
> | "Stacey" <StaceyL@.community.nospam> wrote in message
> | news:OoEkrGeJGHA.208@.tk2msftngp13.phx.gbl...
> | > We had to change the administrator password recently. So I took the
> | > opportunity and created a sql user (yes.. it is domain admin) and
> moved
> | > the sql and reporting services to run under this user instead of
> | > administrator. Since this time, my report server doesn't send out the
> | > reports via email. I am not sure where to look to even determine what
> | > exactly the problem is. Thanks.
> | >
> | >
> | >
> | > Stacey
> | >
> | >
> |
> |
> |
>|||Hi Stacey,
I am glad that you found the solution. It is my pleasure to work with you.
Hope you get a good experience with Reporting Services. :)
Regards,
Justin Shen
Microsoft Online Partner Support
--
| From: "Stacey" <StaceyL@.community.nospam>
| References: <OoEkrGeJGHA.208@.tk2msftngp13.phx.gbl>
<uDiQjReJGHA.1388@.TK2MSFTNGP11.phx.gbl>
<62vwFbiJGHA.3680@.TK2MSFTNGXA02.phx.gbl>
| Subject: Re: report server no longer sends emails
| Date: Tue, 31 Jan 2006 09:55:28 -0500
| Lines: 103
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
| X-RFC2646: Format=Flowed; Original
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
| Message-ID: <#gy9TXnJGHA.3936@.TK2MSFTNGP10.phx.gbl>
| Newsgroups: microsoft.public.sqlserver.reportingsvcs
| NNTP-Posting-Host: 208.49.251.54
| Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
| Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.reportingsvcs:67862
| X-Tomcat-NG: microsoft.public.sqlserver.reportingsvcs
|
| I found the solution. There was a new user created in Active Directory
that
| report services and sql were running under. The report would not email.
| And the jobs did not execute as that user. When I added that user
explicitly
| to SQL Logins, then everything started working fine. I did not think
that
| was necessary - but I guess it is.
|
|
| "Justin Shen[MSFT]" <v-yishen@.online.microsoft.com> wrote in message
| news:62vwFbiJGHA.3680@.TK2MSFTNGXA02.phx.gbl...
| > Hi Stace,
| >
| > Welcome to use MSDN Managed Newsgroup!
| >
| > What is the current startup account of Reporting Services? From the
error
| > message, it seems that the startup account of Reporting Services is
still
| > Network Services.
| > To change the startup account of RS, you can open the Services Control
| > Panel, find the ReportServer windows services and change its logon
| > account.
| >
| > You mentioned that you have created a new windows account for RS. After
| > that, have you configured the RS? Please let me know your configuration
| > steps.
| >
| > If anything is unclear, please feel free to let me know.
| >
| > Thanks & Regards,
| > Justin Shen
| >
| > Microsoft Online Partner Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > When responding to posts, please "Reply to Group" via your newsreader so
| > that others may learn and benefit from your issue.
| >
| > =====================================================| > Business-Critical Phone Support (BCPS) provides you with technical phone
| > support at no charge during critical LAN outages or "business down"
| > situations. This benefit is available 24 hours a day, 7 days a week to
all
| > Microsoft technology partners in the United States and Canada.
| >
| > This and other support options are available here:
| >
| > BCPS:
| >
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
| >
| > Others:
https://partner.microsoft.com/US/technicalsupport/supportoverview/
| >
| > If you are outside the United States, please visit our International
| > Support page:
| > http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
| > =====================================================| >
| > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| >
| > --
| > | From: "Stacey" <StaceyL@.community.nospam>
| > | References: <OoEkrGeJGHA.208@.tk2msftngp13.phx.gbl>
| > | Subject: Re: report server no longer sends emails
| > | Date: Mon, 30 Jan 2006 16:35:04 -0500
| > | Lines: 20
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
| > | X-RFC2646: Format=Flowed; Response
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
| > | Message-ID: <uDiQjReJGHA.1388@.TK2MSFTNGP11.phx.gbl>
| > | Newsgroups: microsoft.public.sqlserver.reportingsvcs
| > | NNTP-Posting-Host: 208.49.251.54
| > | Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP11.phx.gbl
| > | Xref: TK2MSFTNGXA02.phx.gbl
| > microsoft.public.sqlserver.reportingsvcs:67827
| > | X-Tomcat-NG: microsoft.public.sqlserver.reportingsvcs
| > |
| > | I think i found the problem.. just no solution. When I look at the
| > history
| > | of the job that executed the report. It says that it Executed as
user:
| > NT
| > | AUTHORITY\NETWORK SERVICE. instead of executing as the user that I
want.
| > | Any idea how to change this?
| > | "Stacey" <StaceyL@.community.nospam> wrote in message
| > | news:OoEkrGeJGHA.208@.tk2msftngp13.phx.gbl...
| > | > We had to change the administrator password recently. So I took the
| > | > opportunity and created a sql user (yes.. it is domain admin) and
| > moved
| > | > the sql and reporting services to run under this user instead of
| > | > administrator. Since this time, my report server doesn't send out
the
| > | > reports via email. I am not sure where to look to even determine
what
| > | > exactly the problem is. Thanks.
| > | >
| > | >
| > | >
| > | > Stacey
| > | >
| > | >
| > |
| > |
| > |
| >
|
|
|

Saturday, February 25, 2012

Report server database security question

I am currently the only Reportbuilder / Contentmanager / Publisher and admin in the Report server database. I am using windows authentication when creating subscriptions and saving them in this database. Some of the reports that i create have very sencitive information. What risks and procautions do i need to assess if i want to add another reportbuilder / content manager that can manage subscriptions? The main thing is I do not want the other builder and content manager to see my report information. is it just meta data that it holds or do i need to worrie about the data also? if so what do others do to block them from viewing other peoples data?

Summery : I just want them to see data that is relevent to their work and not mine. Is this even an issue? I know it will save query results if i do a snapshot.

I read something concering this in Brian Larson's Reporting Services 2005 book

I think basically you're stuck with Windows Authentication if you want everyone to see only their own stuff (and control their permissions in SQL server)

Ours have shared data source with one account into SQL Server, security is only at the RS folder level

but the situation is different than yours as in our environment, everyone sees the same thing (e.g. all managers see one report)

|||

Thanks, hopefully i can gather some more info on this. It seems to me that this is not an uncommon need with reporting services.

Brian

|||Hi,
There are probably different layers of access control here.
For starters, you have to use stored procedures to generate the report data and not use cache and filters. This way, your SP can check the user credential at runtime and deliver only the parameters values and the slice of data this user is allowed to access. Always pass the userid as sp parameter.
This is on the top of the ReportManager folder security.
To achieve this you will probably want to use only Windows group membership info, no SQL Server logins. yo have to either query LDAP/AD or maintain a local table of groups, users and group membership.
you would also have to create a couple SQL server application accounts, one for each report builder, then I think you can control access to various schema's so another report builder cannot see tables in your confidential schema (or database).
As far as subscriptions are concerned I believe that only meta data is stored in the ReportServer database. Unless your metadata is confidential, I do not think you have to care about this. you may just want to make sure one cannot create subscriptions for someone else and make sure no subscriptions will ever be sent to expired accounts.
You may also want to explore the config files to see what options you have as limiting access to subscriptions and access to domains.
This is not a very precise answer however your question is broad, so I cannot do better than giving hints.
Philippe|||

Do you know if actual data is kept in the Report server database ? I know snap shots are and from what I understand they would have data in them but other than that do you know if any quried data would be kept in there. I am not conserned with others seeing meta data for the report so at least that is not an issue.

Brian

|||anyone else