RS on a Domain Controller, now what?
-
After a few hedaches, I've installed RS on a W2000 SP4 machine that is also a Backup Domain Controller, now, I you check the documentation it says that after the installation only the local admin users can set roles and access to the reports.
How the hell am I going to do this if in a Domain Controller there are no local accounts?
Since its a W2000 machine, the account for the web service is NT AUTHORITY, the account for IIS is aspnet and the account for the data source is an sql account.
Has anyone had the same issue? anyone here has experience with Domain Controllers? any thoughs?
Regards,
Mike
-
Update:
What I've done so far:
- Add my account (in the Domain Controller Security Policy) to the BUILTIN/Administrator group: No luck
- Add the "Log on locally" right (in the Domain Controller Security Policy, local policies) to my account: No luck
- Add the IWAM_<machine> and IUSR_<machine> accounts to the BUILTIN/Administator group: No luck
As you can see in the last test, I'm kinda desperate about this situation. As far as I know, I only need to access the RS administration ONCE and grant the "System Administrator" role to my account ant that's it, I can handle everything from that point.
Any help will be highly appreciated
Mike
-
It's not clear from your ealier post(s), so I'll ask anyway - have you followed the steps outlined in section 1.8 of the readme.htm (comes with the CD/installer) re: "Reporting Services on a domain controller requires manual configuration after setup".
HTH,
Steve.
-
Hi, Steve
Yes, Of course, I went into a bit of trouble actually but I found the steps at the RS Books Online in the MSDN library, I:
- Granted Impersonate Privilege to the IWAM_<machine> account
- Removed the IWAM_<machine> account from the Guest group
- Reboot the computer
- Activated RS (rsactivate.exe)
And all went fine, my question is about the permissions/roles you set at the report manager, i access <A href="http:///reports">http://<servername>/reports and I can't see the option "Site Settings" at the right-top corner, all the options I have are: Home, My Subscriptions and Help. I though that makes sense because I am not in the local administrators group (which have access to "Site Settings" by default) but I am on a domain controller and domain controllers don't have local accounts or groups. Right now, not even a domain admin can see the option "Site Settings".
Any suggestions?
-
One thing to check is the Directory Security setting on the virtual dir for "/Reports", if this is set to anonymous (regardless of whether you have basic or integrated also selected) then those options (Site Settings) won't show up.
If this is set correctly (ie not allowing anon) then we'll have to come up with something else
Cheers,
Steve.
-
I checked the directory security this morning and it does not allow anonymous access
I'm raising a ticket with Microsoft, they should have 72 hrs to answer my ticket by the time you read this post, I'll inform this forum about the solution given by Microsoft.
If any of you have any idea or another suggestion or thing that needs to be checked, please post a reply! your help is highly appreciated.
Thank you Steve, for your help so far.
Mike
-
Update:
Well, I spent all the afternoon with a team from MS until we get to an IIS expert and found out the problem, it turned not to be a RS problem, not even an IIS problem.
The problem was about some missing files in the directory "C:\Inetpub" as it seems, those script files were responsible for authentification with the report server.
We found those files in a directory called "E:\Data moved from C to E\Inetpub" or some other lame directory name like that. With all honesty, I couldn't do anything but laugh when I found that directory name.
I found out that the responsible for this and all my night-overs was the system administrator of my client. Why would he choose to move THOSE files (1 Mb in size) to a bigger partition is far, far beyond me.
I have some lessons learned, tho:
- Even if the documentation doesn't say so, a domain adminv (should) have access to the administrative options
- When your installation is successful on a domain controller, rsactivate.exe says your product is activated, you can deploy your reports from a VS.Net and you can see them in the ReporServer database, you can see report manager without error but without the "Site-settings" option, your event log is clean and your IIS doesn't complain at all, blame IIS anyway
- Never trust a sysadmin
Ok, the last one is personal but seriously, I am completely amazed with the ineptitude of this sysadmin, let alone the directory name, he doesn't have a clue of what he is doing. I'm gonna have to talk with my client and let him know this...
On the other hand, I would like to thank all of you who took the time to actually read this posts and try to help, specially to Steve and his willingness to help, that's very remarkable, Thank you
Mike
-
Hehe, you should post the story here... that's gonna make someone laugh
.
Viewing 8 posts - 1 through 7 (of 7 total)
You must be logged in to reply to this topic. Login to reply