Permissions used to Connect to SSIS on remote machine

We are trying to take advantage of the new Security Context for SSIS but users are unable to connect remotely to the SSIS Service unless they have been added to the Administrators Users Group on the server. I have tried adding them to Guests, Power Users, Remote Desktop Users, Users and SQLServer2005DTSUser$machine but the user is unable to connect.

The message received when the user is unable to connect is:

Cannot connect to 192.x.x.x
Additional Information
-> Failed to retrieve data for this request. (Microsoft.SqlServer.SmoEnum)
-> Connect to SSIS Service on machine "192.x.x.x" failed:
Access is denied

What is the list of permissions and privileges that a user that does not belong to the server's Administrator group and have sysadmin server role, must have to allow them to create and run a package through SSIS.

i have the same issue. i am able to connect to the local integration services. but when i try to access another servers integration services Access is denied. what permissions are needed?

aaks

|||Try these instructions: http://sqljunkies.com/WebLog/knight_reign/archive/2006/01/05/17769.aspx|||

You have to perform these steps in addition to the one's specified above.

http://mohansmindstorms.spaces.live.com/Blog/cns!69AE1BEA50F1D0E7!213.entry

Permissions used to Connect to SSIS on remote machine

We are trying to take advantage of the new Security Context for SSIS but users are unable to connect remotely to the SSIS Service unless they have been added to the Administrators Users Group on the server. I have tried adding them to Guests, Power Users, Remote Desktop Users, Users and SQLServer2005DTSUser$machine but the user is unable to connect.

The message received when the user is unable to connect is:

Cannot connect to 192.x.x.x
Additional Information
-> Failed to retrieve data for this request. (Microsoft.SqlServer.SmoEnum)
-> Connect to SSIS Service on machine "192.x.x.x" failed:
Access is denied

What is the list of permissions and privileges that a user that does not belong to the server's Administrator group and have sysadmin server role, must have to allow them to create and run a package through SSIS.

i have the same issue. i am able to connect to the local integration services. but when i try to access another servers integration services Access is denied. what permissions are needed?

aaks

|||Try these instructions: http://sqljunkies.com/WebLog/knight_reign/archive/2006/01/05/17769.aspx|||

You have to perform these steps in addition to the one's specified above.

http://mohansmindstorms.spaces.live.com/Blog/cns!69AE1BEA50F1D0E7!213.entry

Permissions issue?

I have a SQL Server 2005 Express db on my local machine for testing and I'm
using Dreamweaver 8 to connect to it. No problem. However.. when I try out
a page on localhost through a browser, I get this message:
Microsoft OLE DB Provider for ODBC Drivers (0x80004005)
[Microsoft][ODBC SQL Server Driver][SQL Server]Cannot open database
"Linker_app" requested by the login. The login failed.
/linkerapp/login.asp, line 24
That would usually be a permissions issue, but I found the database and
allowed the Internet Guest Account to access it . .but the message is still
there.
Can someone tell me what I'm doing wrong?
Many thanks!
Nancy
Here are some Express links that might come in handy. I would check to
ensure it allows remote connections and that the db is open.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnsse/html/sseoverview.asp
Express Overview
http://msdn2.microsoft.com/en-us/library/ms165672.aspx Comparing Express
with MSDE
http://msdn.microsoft.com/sql/default.aspx?pull=/library/en-us/dnsse/html/sqlexpuserinst.asp
User Instances
http://www.datamasker.com/SSE2005_NetworkCfg.htm Configuring Express
for Remote Access
https://blogs.msdn.com/sqlexpress/archive/2005/05/05/415084.aspx
Configuring Remote Access
http://www.kbalertz.com/Feedback_914277.aspx Configuring SQL2005 for
remote access
http://msdn.microsoft.com/sql/express/default.aspx?pull=/library/en-us/dnsse/html/emsqlexcustapp.asp
Embedding Express in Apps
http://blogs.msdn.com/rogerwolterblog/archive/2006/04/13/575974.aspx
Backing up Express
Andrew J. Kelly SQL MVP
"Nancy" <nancy@.webwish.com> wrote in message
news:eYRSl$oZHHA.3928@.TK2MSFTNGP03.phx.gbl...
>I have a SQL Server 2005 Express db on my local machine for testing and I'm
>using Dreamweaver 8 to connect to it. No problem. However.. when I try
>out a page on localhost through a browser, I get this message:
> Microsoft OLE DB Provider for ODBC Drivers (0x80004005)
> [Microsoft][ODBC SQL Server Driver][SQL Server]Cannot open database
> "Linker_app" requested by the login. The login failed.
> /linkerapp/login.asp, line 24
>
> That would usually be a permissions issue, but I found the database and
> allowed the Internet Guest Account to access it . .but the message is
> still there.
> Can someone tell me what I'm doing wrong?
> Many thanks!
> Nancy
>
|||got it .. thank you for the excellent links .. I have bookmarked many of
them.
Nancy
"Andrew J. Kelly" <sqlmvpnooospam@.shadhawk.com> wrote in message
news:ujFpbbsZHHA.4368@.TK2MSFTNGP06.phx.gbl...
> Here are some Express links that might come in handy. I would check to
> ensure it allows remote connections and that the db is open.
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnsse/html/sseoverview.asp
> Express Overview
> http://msdn2.microsoft.com/en-us/library/ms165672.aspx Comparing Express
> with MSDE
> http://msdn.microsoft.com/sql/default.aspx?pull=/library/en-us/dnsse/html/sqlexpuserinst.asp
> User Instances
> http://www.datamasker.com/SSE2005_NetworkCfg.htm Configuring Express
> for Remote Access
> https://blogs.msdn.com/sqlexpress/archive/2005/05/05/415084.aspx
> Configuring Remote Access
> http://www.kbalertz.com/Feedback_914277.aspx Configuring SQL2005 for
> remote access
> http://msdn.microsoft.com/sql/express/default.aspx?pull=/library/en-us/dnsse/html/emsqlexcustapp.asp
> Embedding Express in Apps
> http://blogs.msdn.com/rogerwolterblog/archive/2006/04/13/575974.aspx
> Backing up Express
> --
> Andrew J. Kelly SQL MVP
> "Nancy" <nancy@.webwish.com> wrote in message
> news:eYRSl$oZHHA.3928@.TK2MSFTNGP03.phx.gbl...
>

Permissions issue?

I have a SQL Server 2005 Express db on my local machine for testing and I'm
using Dreamweaver 8 to connect to it. No problem. However.. when I try out
a page on localhost through a browser, I get this message:
Microsoft OLE DB Provider for ODBC Drivers (0x80004005)
[Microsoft][ODBC SQL Server Driver][SQL Server]Cannot open datab
ase
"Linker_app" requested by the login. The login failed.
/linkerapp/login.asp, line 24
That would usually be a permissions issue, but I found the database and
allowed the Internet Guest Account to access it . .but the message is still
there.
Can someone tell me what I'm doing wrong?
Many thanks!
NancyHere are some Express links that might come in handy. I would check to
ensure it allows remote connections and that the db is open.
http://msdn.microsoft.com/library/d...r />
rview.asp
Express Overview
http://msdn2.microsoft.com/en-us/library/ms165672.aspx Comparing Express
with MSDE
http://msdn.microsoft.com/sql/defau... />
erinst.asp
User Instances
http://www.datamasker.com/SSE2005_NetworkCfg.htm Configuring Express
for Remote Access
https://blogs.msdn.com/sqlexpress/a.../05/415084.aspx
Configuring Remote Access
http://www.kbalertz.com/Feedback_914277.aspx Configuring SQL2005 for
remote access
http://msdn.microsoft.com/sql/expre...qlexcustapp.asp
Embedding Express in Apps
http://blogs.msdn.com/rogerwolterbl.../13/575974.aspx
Backing up Express
Andrew J. Kelly SQL MVP
"Nancy" <nancy@.webwish.com> wrote in message
news:eYRSl$oZHHA.3928@.TK2MSFTNGP03.phx.gbl...
>I have a SQL Server 2005 Express db on my local machine for testing and I'm
>using Dreamweaver 8 to connect to it. No problem. However.. when I try
>out a page on localhost through a browser, I get this message:
> Microsoft OLE DB Provider for ODBC Drivers (0x80004005)
> [Microsoft][ODBC SQL Server Driver][SQL Server]Cannot open dat
abase
> "Linker_app" requested by the login. The login failed.
> /linkerapp/login.asp, line 24
>
> That would usually be a permissions issue, but I found the database and
> allowed the Internet Guest Account to access it . .but the message is
> still there.
> Can someone tell me what I'm doing wrong?
> Many thanks!
> Nancy
>|||got it .. thank you for the excellent links .. I have bookmarked many of
them.
Nancy
"Andrew J. Kelly" <sqlmvpnooospam@.shadhawk.com> wrote in message
news:ujFpbbsZHHA.4368@.TK2MSFTNGP06.phx.gbl...
> Here are some Express links that might come in handy. I would check to
> ensure it allows remote connections and that the db is open.
> http://msdn.microsoft.com/library/d.../>
verview.asp
> Express Overview
> http://msdn2.microsoft.com/en-us/library/ms165672.aspx Comparing Express
> with MSDE
> http://msdn.microsoft.com/sql/defau...>
userinst.asp
> User Instances
> http://www.datamasker.com/SSE2005_NetworkCfg.htm Configuring Express
> for Remote Access
> https://blogs.msdn.com/sqlexpress/a.../05/415084.aspx
> Configuring Remote Access
> http://www.kbalertz.com/Feedback_914277.aspx Configuring SQL2005 for
> remote access
> http://msdn.microsoft.com/sql/expre...qlexcustapp.asp
> Embedding Express in Apps
> http://blogs.msdn.com/rogerwolterbl.../13/575974.aspx
> Backing up Express
> --
> Andrew J. Kelly SQL MVP
> "Nancy" <nancy@.webwish.com> wrote in message
> news:eYRSl$oZHHA.3928@.TK2MSFTNGP03.phx.gbl...
>

Permissions issue

I have an ASP website that uses SQL Server 2000 as its back end. It is
running successfully on SBS 2003--all on one machine. I am moving over to a
new domain which has the web site on one server and SQL Server 2000 on
another. I have progressed to the point where the web site comes up, but I
get error messages regarding permissions to SELECT, INSERT, etc. I can make
it work by setting the permission levels for each table, but I didn't need
to do that for the SBS setup. As far as I can tell, everything else is
configured the same way. I realize that I'm not giving you much information
at this point, but I'm hoping that this rings a bell of some sort and that
there is something I can do without having to set the permissions for each
table. Any ideas?
Hi
In the SBS world, the user that was connecting to the DB was probably SA or
had dbo role, so no object level permissions would be required.
Now, you need them as probably you have different permission set. The old
way would not have been very secure at all, as a hacker could have free
reign of your DB.
Are you using SQL Security, and what roles does the login have?
Regards
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"WC Justice" <wcjhome@.cox-internet.com> wrote in message
news:I8Koe.8490$I_1.2047@.okepread02...
>I have an ASP website that uses SQL Server 2000 as its back end. It is
> running successfully on SBS 2003--all on one machine. I am moving over to
> a
> new domain which has the web site on one server and SQL Server 2000 on
> another. I have progressed to the point where the web site comes up, but
> I
> get error messages regarding permissions to SELECT, INSERT, etc. I can
> make
> it work by setting the permission levels for each table, but I didn't need
> to do that for the SBS setup. As far as I can tell, everything else is
> configured the same way. I realize that I'm not giving you much
> information
> at this point, but I'm hoping that this rings a bell of some sort and that
> there is something I can do without having to set the permissions for each
> table. Any ideas?
>
|||I was using IUSR, with read permission only, and was using the following
connection string:
DSN=RLDP_SQL; UID=IUSR_WCJE05S;PWD=<>;DATABASE=RLDP_SQL;APP=ASPS cript;
TRUSTED_CONNECTION=YES
I have made the necessary changes to the connection string to allow for the
new DSN and ServerName, and it works, except for the permissions issue. If
I have to set the permission levels by table, that's not a problem. I just
wanted to make sure that I wasn't missing anything obvious.
"Mike Epprecht (SQL MVP)" <mike@.epprecht.net> wrote in message
news:%23fHHIZhaFHA.3712@.TK2MSFTNGP09.phx.gbl...
> Hi
> In the SBS world, the user that was connecting to the DB was probably SA
or[vbcol=seagreen]
> had dbo role, so no object level permissions would be required.
> Now, you need them as probably you have different permission set. The old
> way would not have been very secure at all, as a hacker could have free
> reign of your DB.
> Are you using SQL Security, and what roles does the login have?
> Regards
> --
> Mike Epprecht, Microsoft SQL Server MVP
> Zurich, Switzerland
> IM: mike@.epprecht.net
> MVP Program: http://www.microsoft.com/mvp
> Blog: http://www.msmvps.com/epprecht/
> "WC Justice" <wcjhome@.cox-internet.com> wrote in message
> news:I8Koe.8490$I_1.2047@.okepread02...
to[vbcol=seagreen]
but[vbcol=seagreen]
need[vbcol=seagreen]
that[vbcol=seagreen]
each
>
|||I was using IUSR, with read permission only, and was using the following
connection string:
DSN=RLDP_SQL; UID=IUSR_WCJE05S;PWD=<>;DATABASE=RLDP_SQL;APP=ASPS cript;
TRUSTED_CONNECTION=YES
I have made the necessary changes to the connection string to allow for the
new DSN and ServerName, and it works, except for the permissions issue. If
I have to set the permission levels by table, that's not a problem. I just
wanted to make sure that I wasn't missing anything obvious.
Follow-Up: I found that if I make the IUSR a dbo, then it works great. Is
this a mistake from a security standpoint?
"Mike Epprecht (SQL MVP)" <mike@.epprecht.net> wrote in message
news:%23fHHIZhaFHA.3712@.TK2MSFTNGP09.phx.gbl...
> Hi
> In the SBS world, the user that was connecting to the DB was probably SA
> or had dbo role, so no object level permissions would be required.
> Now, you need them as probably you have different permission set. The old
> way would not have been very secure at all, as a hacker could have free
> reign of your DB.
> Are you using SQL Security, and what roles does the login have?
> Regards
> --
> Mike Epprecht, Microsoft SQL Server MVP
> Zurich, Switzerland
> IM: mike@.epprecht.net
> MVP Program: http://www.microsoft.com/mvp
> Blog: http://www.msmvps.com/epprecht/
> "WC Justice" <wcjhome@.cox-internet.com> wrote in message
> news:I8Koe.8490$I_1.2047@.okepread02...
>

Permissions issue

I have an ASP website that uses SQL Server 2000 as its back end. It is
running successfully on SBS 2003--all on one machine. I am moving over to a
new domain which has the web site on one server and SQL Server 2000 on
another. I have progressed to the point where the web site comes up, but I
get error messages regarding permissions to SELECT, INSERT, etc. I can make
it work by setting the permission levels for each table, but I didn't need
to do that for the SBS setup. As far as I can tell, everything else is
configured the same way. I realize that I'm not giving you much information
at this point, but I'm hoping that this rings a bell of some sort and that
there is something I can do without having to set the permissions for each
table. Any ideas?Hi
In the SBS world, the user that was connecting to the DB was probably SA or
had dbo role, so no object level permissions would be required.
Now, you need them as probably you have different permission set. The old
way would not have been very secure at all, as a hacker could have free
reign of your DB.
Are you using SQL Security, and what roles does the login have?
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"WC Justice" <wcjhome@.cox-internet.com> wrote in message
news:I8Koe.8490$I_1.2047@.okepread02...
>I have an ASP website that uses SQL Server 2000 as its back end. It is
> running successfully on SBS 2003--all on one machine. I am moving over to
> a
> new domain which has the web site on one server and SQL Server 2000 on
> another. I have progressed to the point where the web site comes up, but
> I
> get error messages regarding permissions to SELECT, INSERT, etc. I can
> make
> it work by setting the permission levels for each table, but I didn't need
> to do that for the SBS setup. As far as I can tell, everything else is
> configured the same way. I realize that I'm not giving you much
> information
> at this point, but I'm hoping that this rings a bell of some sort and that
> there is something I can do without having to set the permissions for each
> table. Any ideas?
>|||I was using IUSR, with read permission only, and was using the following
connection string:
DSN=RLDP_SQL; UID=IUSR_WCJE05S;PWD=<>;DATABASE=RLDP_SQL;APP=ASPScript;
TRUSTED_CONNECTION=YES
I have made the necessary changes to the connection string to allow for the
new DSN and ServerName, and it works, except for the permissions issue. If
I have to set the permission levels by table, that's not a problem. I just
wanted to make sure that I wasn't missing anything obvious.
"Mike Epprecht (SQL MVP)" <mike@.epprecht.net> wrote in message
news:%23fHHIZhaFHA.3712@.TK2MSFTNGP09.phx.gbl...
> Hi
> In the SBS world, the user that was connecting to the DB was probably SA
or
> had dbo role, so no object level permissions would be required.
> Now, you need them as probably you have different permission set. The old
> way would not have been very secure at all, as a hacker could have free
> reign of your DB.
> Are you using SQL Security, and what roles does the login have?
> Regards
> --
> Mike Epprecht, Microsoft SQL Server MVP
> Zurich, Switzerland
> IM: mike@.epprecht.net
> MVP Program: http://www.microsoft.com/mvp
> Blog: http://www.msmvps.com/epprecht/
> "WC Justice" <wcjhome@.cox-internet.com> wrote in message
> news:I8Koe.8490$I_1.2047@.okepread02...
to[vbcol=seagreen]
but[vbcol=seagreen]
need[vbcol=seagreen]
that[vbcol=seagreen]
each[vbcol=seagreen]
>|||I was using IUSR, with read permission only, and was using the following
connection string:
DSN=RLDP_SQL; UID=IUSR_WCJE05S;PWD=<>;DATABASE=RLDP_SQL;APP=ASPScript;
TRUSTED_CONNECTION=YES
I have made the necessary changes to the connection string to allow for the
new DSN and ServerName, and it works, except for the permissions issue. If
I have to set the permission levels by table, that's not a problem. I just
wanted to make sure that I wasn't missing anything obvious.
Follow-Up: I found that if I make the IUSR a dbo, then it works great. Is
this a mistake from a security standpoint?
"Mike Epprecht (SQL MVP)" <mike@.epprecht.net> wrote in message
news:%23fHHIZhaFHA.3712@.TK2MSFTNGP09.phx.gbl...
> Hi
> In the SBS world, the user that was connecting to the DB was probably SA
> or had dbo role, so no object level permissions would be required.
> Now, you need them as probably you have different permission set. The old
> way would not have been very secure at all, as a hacker could have free
> reign of your DB.
> Are you using SQL Security, and what roles does the login have?
> Regards
> --
> Mike Epprecht, Microsoft SQL Server MVP
> Zurich, Switzerland
> IM: mike@.epprecht.net
> MVP Program: http://www.microsoft.com/mvp
> Blog: http://www.msmvps.com/epprecht/
> "WC Justice" <wcjhome@.cox-internet.com> wrote in message
> news:I8Koe.8490$I_1.2047@.okepread02...
>

Permissions

The Report Manager will not show on a client machine unless I logon with the local machine administrator account of the report server. The logon credentials that I am using, on the client, is in the administrators group of the local machine of the server.

I am only able to author and view reports when physically logged on to the machine with the report server. The same credentials that were used on client machine are used when logging on to the server machine. I have granted as much permission to the user account as possible unless I am missing something in the report server.

It seems like a related permission issue happens when trying to run Report Builder. I get a better error message when running Report Builder(See Below). To be sure I have given explicit server administrator to the client logon. Furthermore I have given content manager rights to the client logon for a model and a report.

The client machine has framework 2.0 installed.

Here is the error produced when attempting to run the Report Builder.

PLATFORM VERSION INFO
Windows : 5.1.2600.131072 (Win32NT)
Common Language Runtime : 2.0.50727.42
System.Deployment.dll : 2.0.50727.42 (RTM.050727-4200)
mscorwks.dll : 2.0.50727.42 (RTM.050727-4200)
dfdll.dll : 2.0.50727.42 (RTM.050727-4200)
dfshim.dll : 2.0.50727.42 (RTM.050727-4200)

SOURCES
Deployment url : http://{Server Name:port number}/ReportServer/ReportBuilder/ReportBuilder.application

ERROR SUMMARY
Below is a summary of the errors, details of these errors are listed later in the log.
* Activation of http://{Server Name:port number}/ReportServer/ReportBuilder/ReportBuilder.application resulted in exception. Following failure messages were detected:
+ Downloading http://{Server Name:port number}/ReportServer/ReportBuilder/ReportBuilder.application did not succeed.
+ The remote server returned an error: (401) Unauthorized.
+ The target principal name is incorrect

COMPONENT STORE TRANSACTION FAILURE SUMMARY
No transaction error was detected.

WARNINGS
There were no warnings during this operation.

OPERATION PROGRESS STATUS
* [1/23/2006 1:55:22 PM] : Activation of http://{Server Name:port number}/ReportServer/ReportBuilder/ReportBuilder.application has started.

ERROR DETAILS
Following errors were detected during this operation.
* [1/23/2006 1:55:22 PM] System.Deployment.Application.DeploymentDownloadException (Unknown subtype)
- Downloading http://{Server Name:port number}/ReportServer/ReportBuilder/ReportBuilder.application did not succeed.
- Source: System.Deployment
- Stack trace:
at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
at System.Deployment.Application.SystemNetDownloader.DownloadAllFiles()
at System.Deployment.Application.FileDownloader.Download(SubscriptionState subState)
at System.Deployment.Application.DownloadManager.DownloadManifestAsRawFile(Uri& sourceUri, String targetPath, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)
at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestDirectBypass(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, SubscriptionState& subState, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)
at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestBypass(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, SubscriptionState& subState, IDownloadNotification notification, DownloadOptions options)
at System.Deployment.Application.ApplicationActivator.PerformDeploymentActivation(Uri activationUri, Boolean isShortcut)
at System.Deployment.Application.ApplicationActivator.ActivateDeploymentWorker(Object state)
Inner Exception
System.Net.WebException
- The remote server returned an error: (401) Unauthorized.
- Source: System
- Stack trace:
at System.Net.HttpWebRequest.GetResponse()
at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
Inner Exception
System.ComponentModel.Win32Exception
- The target principal name is incorrect
- Source: System
- Stack trace:
at System.Net.NTAuthentication.GetOutgoingBlob(Byte[] incomingBlob, Boolean throwOnError, SecurityStatus& statusCode)
at System.Net.NTAuthentication.GetOutgoingBlob(String incomingBlob)
at System.Net.NegotiateClient.DoAuthenticate(String challenge, WebRequest webRequest, ICredentials credentials, Boolean preAuthenticate)
at System.Net.NegotiateClient.Authenticate(String challenge, WebRequest webRequest, ICredentials credentials)
at System.Net.AuthenticationManager.Authenticate(String challenge, WebRequest request, ICredentials credentials)
at System.Net.AuthenticationState.AttemptAuthenticate(HttpWebRequest httpWebRequest, ICredentials authInfo)
at System.Net.HttpWebRequest.CheckResubmitForAuth()
at System.Net.HttpWebRequest.CheckResubmit(Exception& e)

COMPONENT STORE TRANSACTION DETAILS
No transaction information is available.

reading the other posts about permissions leads me to believe that the permissions problem has to do with the number of hops from the client to the server processes. I have not fixed the problem but I am sure this is what it is.

I am still not sure about one thing. Since windows auth. is used, is it possible that the web service and the front end are picking up on the credentials when running it from the server machine? Alternatively, when running it from the client, kerberos auth. must be used to pass the credentials from the front end to the web service.

|||I am getting the same error trying to donwnload the report builder to any client. Works fine with a server\local account but not with a network account. I added myself to the local Server\SQLServer2005SQLBrowserUser & Server\SQLServer2005SQLReportServerUser groups with no avail.

Permissions

The Report Manager will not show on a client machine unless I logon with the local machine administrator account of the report server. The logon credentials that I am using, on the client, is in the administrators group of the local machine of the server.

I am only able to author and view reports when physically logged on to the machine with the report server. The same credentials that were used on client machine are used when logging on to the server machine. I have granted as much permission to the user account as possible unless I am missing something in the report server.

It seems like a related permission issue happens when trying to run Report Builder. I get a better error message when running Report Builder(See Below). To be sure I have given explicit server administrator to the client logon. Furthermore I have given content manager rights to the client logon for a model and a report.

The client machine has framework 2.0 installed.

Here is the error produced when attempting to run the Report Builder.

PLATFORM VERSION INFO
Windows : 5.1.2600.131072 (Win32NT)
Common Language Runtime : 2.0.50727.42
System.Deployment.dll : 2.0.50727.42 (RTM.050727-4200)
mscorwks.dll : 2.0.50727.42 (RTM.050727-4200)
dfdll.dll : 2.0.50727.42 (RTM.050727-4200)
dfshim.dll : 2.0.50727.42 (RTM.050727-4200)

SOURCES
Deployment url : http://{Server Name:port number}/ReportServer/ReportBuilder/ReportBuilder.application

ERROR SUMMARY
Below is a summary of the errors, details of these errors are listed later in the log.
* Activation of http://{Server Name:port number}/ReportServer/ReportBuilder/ReportBuilder.application resulted in exception. Following failure messages were detected:
+ Downloading http://{Server Name:port number}/ReportServer/ReportBuilder/ReportBuilder.application did not succeed.
+ The remote server returned an error: (401) Unauthorized.
+ The target principal name is incorrect

COMPONENT STORE TRANSACTION FAILURE SUMMARY
No transaction error was detected.

WARNINGS
There were no warnings during this operation.

OPERATION PROGRESS STATUS
* [1/23/2006 1:55:22 PM] : Activation of http://{Server Name:port number}/ReportServer/ReportBuilder/ReportBuilder.application has started.

ERROR DETAILS
Following errors were detected during this operation.
* [1/23/2006 1:55:22 PM] System.Deployment.Application.DeploymentDownloadException (Unknown subtype)
- Downloading http://{Server Name:port number}/ReportServer/ReportBuilder/ReportBuilder.application did not succeed.
- Source: System.Deployment
- Stack trace:
at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
at System.Deployment.Application.SystemNetDownloader.DownloadAllFiles()
at System.Deployment.Application.FileDownloader.Download(SubscriptionState subState)
at System.Deployment.Application.DownloadManager.DownloadManifestAsRawFile(Uri& sourceUri, String targetPath, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)
at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestDirectBypass(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, SubscriptionState& subState, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)
at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestBypass(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, SubscriptionState& subState, IDownloadNotification notification, DownloadOptions options)
at System.Deployment.Application.ApplicationActivator.PerformDeploymentActivation(Uri activationUri, Boolean isShortcut)
at System.Deployment.Application.ApplicationActivator.ActivateDeploymentWorker(Object state)
Inner Exception
System.Net.WebException
- The remote server returned an error: (401) Unauthorized.
- Source: System
- Stack trace:
at System.Net.HttpWebRequest.GetResponse()
at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
Inner Exception
System.ComponentModel.Win32Exception
- The target principal name is incorrect
- Source: System
- Stack trace:
at System.Net.NTAuthentication.GetOutgoingBlob(Byte[] incomingBlob, Boolean throwOnError, SecurityStatus& statusCode)
at System.Net.NTAuthentication.GetOutgoingBlob(String incomingBlob)
at System.Net.NegotiateClient.DoAuthenticate(String challenge, WebRequest webRequest, ICredentials credentials, Boolean preAuthenticate)
at System.Net.NegotiateClient.Authenticate(String challenge, WebRequest webRequest, ICredentials credentials)
at System.Net.AuthenticationManager.Authenticate(String challenge, WebRequest request, ICredentials credentials)
at System.Net.AuthenticationState.AttemptAuthenticate(HttpWebRequest httpWebRequest, ICredentials authInfo)
at System.Net.HttpWebRequest.CheckResubmitForAuth()
at System.Net.HttpWebRequest.CheckResubmit(Exception& e)

COMPONENT STORE TRANSACTION DETAILS
No transaction information is available.

reading the other posts about permissions leads me to believe that the permissions problem has to do with the number of hops from the client to the server processes. I have not fixed the problem but I am sure this is what it is.

I am still not sure about one thing. Since windows auth. is used, is it possible that the web service and the front end are picking up on the credentials when running it from the server machine? Alternatively, when running it from the client, kerberos auth. must be used to pass the credentials from the front end to the web service.

|||I am getting the same error trying to donwnload the report builder to any client. Works fine with a server\local account but not with a network account. I added myself to the local Server\SQLServer2005SQLBrowserUser & Server\SQLServer2005SQLReportServerUser groups with no avail.

Permission Problem

Hello,
I have a problem with SQL Express.
I have a machine with SQL Express Instance installed correct.I did a copy of
the hard disk and installed this hard disk in another machine. Change the
name in the new machine.
My problem is with the user
SQLServer2005MSSQLUser$<COMPUTERNAME>$MSSQLSERVER, but the another
computernameHi Maria,
Copying the hard disk and placing it on another machine the way you have
done is going to cause you a whole host of problems especially if you
are part of a domain. You should NEVER do it this way. At best make a
syspreped image and then apply it to another computer. This way you can
have the system's SID regenerated.
Even then you should not just indiscriminately install applications
prior to syspreping and expect them to work on another machine. In your
case I think that the best thing for you to do is to uninstall SQL
Server and reinstall it.
Jonathan
Maria Paz wrote:
> Hello,
> I have a problem with SQL Express.
> I have a machine with SQL Express Instance installed correct.I did a copy of
> the hard disk and installed this hard disk in another machine. Change the
> name in the new machine.
> My problem is with the user
> SQLServer2005MSSQLUser$<COMPUTERNAME>$MSSQLSERVER, but the another
> computername

Permission Problem

Hello,
I have a problem with SQL Express.
I have a machine with SQL Express Instance installed correct.I did a copy of
the hard disk and installed this hard disk in another machine. Change the
name in the new machine.
My problem is with the user
SQLServer2005MSSQLUser$<COMPUTERNAME>$MSSQLSERVER, but the another
computernameHi Maria,
Copying the hard disk and placing it on another machine the way you have
done is going to cause you a whole host of problems especially if you
are part of a domain. You should NEVER do it this way. At best make a
syspreped image and then apply it to another computer. This way you can
have the system's SID regenerated.
Even then you should not just indiscriminately install applications
prior to syspreping and expect them to work on another machine. In your
case I think that the best thing for you to do is to uninstall SQL
Server and reinstall it.
Jonathan
Maria Paz wrote:
> Hello,
> I have a problem with SQL Express.
> I have a machine with SQL Express Instance installed correct.I did a copy
of
> the hard disk and installed this hard disk in another machine. Change the
> name in the new machine.
> My problem is with the user
> SQLServer2005MSSQLUser$<COMPUTERNAME>$MSSQLSERVER, but the another
> computername

Permission error when trying to set parameters of a server report

Hi There,

I am using SQL Server Reporting Services and generating reports and have them deployed on a report server on Machine A. I have an asp.net web application hosted on MAchine B which has a report viewer control which is used to display a predefined report that is already published on a Reporting Services report server except that it passes a set of parameters for the report. I get this error...The permissions granted to user 'Bla.." are insufficient for performing this operation. (rsAccessDenied) when I try to set the parameters..like this..

param[1] = new Microsoft.Reporting.WebForms.ReportParameter("EndDate", DateTime.Now.ToShortDateString());
param[2] = new Microsoft.Reporting.WebForms.ReportParameter("Site", "1");
reportViewer.ServerReport.SetParameters(param);
reportViewer.ServerReport.Refresh();

I have integrated windows authentication set on the web application (report and report server)

Can anybody suggest me why I am getting this error(breaks at code in red). Any suggestions are greatly aprreciated!!

Thanks.

Sam.

Does the report render fine if you do not set parameters via code?

permission denied in accessing SQl 2000

Good day,

Is there anyone could help me, I'm moving our database from old machine to a new one and Iused DTS to move it the new box. Somehow it was moved but I'm still having probelm with my front-end application when I'm trying to open it the error is something like this.

"3704-Operation is not allowed when the object is closed.
an error occurred in Cal_General.CheckDBVSN.Global Error:
-2147217911 -SELECT permission denied on object 'Global_config', Database 'dbase1', owner "App1.
underlying Errors:
Error #-217217911
SELECT permission denied on object 'Global_config' database 'calsql1', owner "App1'.
(Source MIcrosoft OLE Provider for SQL Server)
(SQL State: 42000)
(NativeError:229)
No Help file available."

Hope someone could resolve my query.

Thanks,

The databases may have been moved but not the permissions. If you have a security script with the scripted permissions you should execute it on the new server. The error indicates that the objects exists but the connecting user has no permissions querying them.

Jens K. Suessmeyer

http://www.sqlserver2005.de
|||

Hi Jens,

I already checked the permission of the table and selected those admin rights to make sure that I could be able to use the tabel but still the same proble I get. It is hard for me to work with the SQL co'z my boss assigned my from Sys admin to DB admin I'm really have a hard time to solve the problem.

Vinci

|||OK, having dbadmin rights should be eough in your case to administer the permissions needed. Did you make sure that the user has permissions accessing the following objects:

SELECT permission denied on object 'Global_config', Database 'dbase1', owner "App1.
SELECT permission denied on object 'Global_config' database 'calsql1', owner "App1'.

if the object are views, make sure that the underlying tables are also accessible to the user (if the ownership chain is broken)

Jens K. Suessmeyer

http://www.sqlserver2005.de

permission denied in accessing SQl 2000

Good day,

Is there anyone could help me, I'm moving our database from old machine to a new one and Iused DTS to move it the new box. Somehow it was moved but I'm still having probelm with my front-end application when I'm trying to open it the error is something like this.

"3704-Operation is not allowed when the object is closed.
an error occurred in Cal_General.CheckDBVSN.Global Error:
-2147217911 -SELECT permission denied on object 'Global_config', Database 'dbase1', owner "App1.
underlying Errors:
Error #-217217911
SELECT permission denied on object 'Global_config' database 'calsql1', owner "App1'.
(Source MIcrosoft OLE Provider for SQL Server)
(SQL State: 42000)
(NativeError:229)
No Help file available."

Hope someone could resolve my query.

Thanks,

The databases may have been moved but not the permissions. If you have a security script with the scripted permissions you should execute it on the new server. The error indicates that the objects exists but the connecting user has no permissions querying them.

Jens K. Suessmeyer

http://www.sqlserver2005.de
|||

Hi Jens,

I already checked the permission of the table and selected those admin rights to make sure that I could be able to use the tabel but still the same proble I get. It is hard for me to work with the SQL co'z my boss assigned my from Sys admin to DB admin I'm really have a hard time to solve the problem.

Vinci

|||OK, having dbadmin rights should be eough in your case to administer the permissions needed. Did you make sure that the user has permissions accessing the following objects:

SELECT permission denied on object 'Global_config', Database 'dbase1', owner "App1.
SELECT permission denied on object 'Global_config' database 'calsql1', owner "App1'.

if the object are views, make sure that the underlying tables are also accessible to the user (if the ownership chain is broken)

Jens K. Suessmeyer

http://www.sqlserver2005.de