Cannot delegate Reporting Services Web access to domain user / group, User does not have required permissions

Hi
I have an SCCM 2012 SP1 CU3 installation on a Server 2008 R2 + SQL 2008 R2.
I'm having trouble delegating Reporting Services Web Access to a standard domain user.
I have followed the instructions from these blogs:
http://blog.coretech.dk/kea/creating-the-reporting-user-role-in-configmgr-2012/
http://www.wolffhaven45.com/blog/sccm/assigning-users-to-configmgr-reportusers-group-in-sccm-2012/
No matter how I try, I cannot get the reports to show for a standard domain user. In the console no reports are showing and in the web access I get
"User domain\user does not have required permissions........"
The only thing that is consistenly working when I test is to put the AD Group on the Security Role "Full Administrator".
Then everything will show up.
Any ideas on how to troubleshoot this?

Thanks everyone for helping me with tips. I have now solved the problem. It was the permissions from SCCM that did not replicate to the Reporting Server.
In srsrp.log I got these error messages:
Could not retrieve the reporting service name for instance 'MSSQLSERVER'
Invalid class
Could not stop the reporting serviceAfter googling a litte I found these 2 sites with similiar problems:http://social.technet.microsoft.com/Forums/en-US/d4a7f93a-506f-4e3f-b5fc-bd2b087277da/ssrs-permissions-do-not-add?forum=configmanagergeneral
http://www.microtom.net/microsoft-system-center/software-distribution/sccm-2012-reporting-services-do-not-install
So I ran the command for SQL 2008 R2: mofcomp.exe C:\Program Files (x86)\Microsoft SQL Server\100\Shared\sqlmgmproviderxpsp2up.mof
and BAAM, everything started to work =)
/ALX

Similar Messages

After auto update recently, norton internet security won't work. error message:windows cannot access specified path...you may not have appropriate permissions to access item

Firefox did an auto update and since then I cannot open/run Norton Internet Security. It won't even let me update it or re-install it. I get an error message stating Windows cannot find the specified path. You may not have appropriate permissions to access this.

Hi
Some required information are needed for us to help you.
Hi NabeelOmer,
We wonder if you have taken any action such as system restore after this issue occurred.
You might also try this command to restore your access control list.
Run this command to navigate to the drive letter, example is D
D:
To reset all permissions, run this command
icacls * /reset /t /c /q
Visual Studio is a very invasive program and which provides the ability to enumerate projects and solutions for system, user should never try uninstalling it manually without any guidance.
Visual Studio made changes for your whole system, if the file has been moved or deleted this error would occur.
Since you mentioned that you get this error almost everywhere even in control panel. We suggest you repair/reinstall your Visual Studio first and check if it could be fixed.
How to: Repair Visual Studio
https://msdn.microsoft.com/en-us/library/aa983433%28v=vs.90%29.aspx?f=255&MSPPError=-2147217396
Regards
D. Wu

Popup windows are small and cannot be resized in Firefox v31.0. v30.0 and earlier does not have this problem. Example: Hostgator's SmarterMail. XP, 7, 8.1.

My webmail interface is SmarterMail from Plesk as supplied by Hostgator. When Firefox updated to v31.0, I lost the ability to send mail because the popup windows for "New", "Reply", "Reply All", and "Forward" are too small to enter information and cannot be resized or maximized.
This problem does not occur with older versions of Firefox (tested 16.0.2, 21.0, 24.0, and 30.0) or with Chrome or Internet Explorer. While I am writing to you from a Windows XP Pro SP3 system, I have also verified the problem under Windows 7 Pro (x64) and Windows 8.1 (x64).
It's not profile settings, malware, or add-ons. I've tried Firefox Safemode and I've tried "Reset Firefox".
For the time being the workaround is to disable Firefox updates and downgrade everybody with v31 to v30. Please fix this ASAP. You have lots of people reporting it.

As a temporary workaround, you can block website scripts from resizing windows. It's a bit of a sledgehammer, but another user who has this problem indicated that it does stop the SmarterMail script from rolling up the window.
Here's how:
(1) In a new tab, type or paste '''about:config''' in the address bar and press Enter. Click the button promising to be careful.
(2) In the search box above the list, type or paste '''dom''' and pause while the list is filtered
(3) Double-click the '''dom.disable_window_move_resize''' preference to switch it from false to true.

SCVMM 2008 R2 - "The SQL Server service account does not have permission to access Active Directory Domain Services (AD DS)."

I know this question has been asked before, but never for R2, that I can tell, and the posted fixes aren't working. I have just installed SCVMM 2008 R2 on a Windows Server 2008 R2 server, using a remote SQL 2008 SP1 database. When I attempt to connect to SCVMM, I get the following error:
"The SQL Server service account does not have permission to access Active Directory Domain Services (AD DS).
Ensure that the SQL Server service is running under a domain account or a computer account that has permission to access AD DS. For more information, see "Some applications and APIs require access to authorization information on account objects" in the Microsoft Knowledge Base at http://go.microsoft.com/fwlink/?LinkId=121054.
ID: 2607"
What I've seen online is that this is usually becuase the domain account SCVMM is running as does not have the proper permissions on the SQL database. Here's what I've confirmed:
1) My SCVMM service account is a local admin on the SCVMM server
2) My SCVMM service account is a dbowner on the SCVMM database in SQL
3) My SQL service account is a dbowner on the SCVMM database in SQL
4) My SQL service account is a domain user (even made it a domain admin, just in case, and it still "doesn't have access to AD DS," which is obviously untrue)
5) Neither service account is locked out
Has anyone run in to this? It says in Technet that remote SQL 2008 is supported, as long as the SQL management studio is installed to the SCVMM server, and I installed and patched before I began the SCVMM installation. I just don't know what else to try - I have no errors in event logs, no issues during the installation itself...
Andrew Topp

That answer was very unhelpful fr33m4n. The individual mentions that they've received the error that points to the KB article. I currently receive the same error -- there seems to be no resolution. I've run the Microsoft VBS script to add TAUG to the WAAG
as suggested by 331951, and that made absolutely no difference.
1) My SCVMM service account is a local admin on the SCVMM server
2) My SCVMM service account is a dbowner on the SCVMM database in SQL
3) My SQL service account is a dbowner on the SCVMM database in SQL
4) My SQL service account is a domain user (even made it a domain admin, just in case, and it still
"doesn't have access to AD DS," which is obviously untrue)
The user is also a member of WAAG, the machines have delegated authority to each other. Is there any other solution?

Calling Reporting Services Web Service with jQuery possible?

Hi,
is it possible to call the Reporting Services Web Service with jQuery? If yes, can someone post me a small example?
Background:
My plan is to create a html with a form which is also uploaded then into the reportserver. I open this html later by clicking a link in a report (with gotoURL open.window). The report opens the html inclusive the overtaken of some additional parameters
(reportname, reportdescription). These parameters I will use in the html-form as defaultvalues for the corresponding input-text-fields. Now the user can make some changes (i.e. the decription). With a click on a button I will send the new description to
the Reporting Services Web Service by using the SetProperties method, closing the html-window and reload the report. Important is that I want to upload the html also into the reportserver itself.
I have already found how to consume a web service via jQuery but with the Reporting Services Web Service I did not get it running in my tests.
I have referenced to the following jQuery.js: http://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
Here you can see my tests I made with the results:
$.ajax({
type: 'POST',
url: 'http://<..>/ReportServer/ReportService2010.asmx/ListChildren',
data: {'ItemPath':'/','Recursive':false},
complete: function(xData, status) {
$('p').html($(xData.responseXML).text()); // result
$("#divStatus").text( status ); // status }
I got a NULL response with Status success. But where are the items?
Another test which should response only one value was that:
$.ajax({
type: "POST",
contentType: "text/xml; charset=utf-8",
url: "http://<..>/ReportServer/ReportService2010.asmx/GetItemType",
data: {"Item":"/Development"}, // Development is a Folder in my Reportserver-Root
dataType: "xml",
success: function (msg) {
$("#divResult").html(msg.responseXML);
error: function (data, status, error) {
$("#divResult").html("WebSerivce unreachable<br> <br>" + data.responseXML + "<br> <br>(" + error + ")");
Here I got an [object Error]
And here my last test:
var soapMessage = '<?xml version="1.0" encoding="utf-8"?>\
<soap:Envelope \
xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" \
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" \
xmlns:xsd="http://www.w3.org/2001/XMLSchema">\
<soap:Body>\
<GetItemType xmlns="http://www.microsoft.com/sql/ReportingServer">\
<ItemPath>/Development</ItemPath>\
</GetItemType>\
</soap:Body>\
</soap:Envelope>';
$.ajax({
type: "POST",
contentType: "text/xml; charset=utf-8",
url: http://<..>/ReportServer/ReportService2010.asmx?wsdl,
data: soapMessage,
dataType: "xml",
success: processSuccess,
error: processError
function processSuccess(data, status, req) {
if (status == "success")
$("#response").text($(req.responseXML).find("Type").text());
function processError(data, status, req) {
alert(req.responseText + " " + status);
Here I got an "Undefined error"
Can anyone help me?
Thanks
René Illner

Hi Rene,
I have one vbscript class to call web services. May be if you need you can use it.
     dim ws
     set ws = new webservice
     ws.url = "http://servername/ReportServer/ReportService2010.asmx"
     ws.method = "MethodName"
     ws.parameters.Add "Parameter1", "Param1 Desc.."
     ws.parameters.Add "Parameter2","[email protected].."
     ws.execute
     set ws = nothing
'------web service calling class
class WebService
public Url
public Method
public Response
public Parameters
public function execute()
    dim xmlhttp
    Set xmlhttp = CreateObject("Microsoft.XMLHTTP")
    xmlhttp.open "POST", Url & "/" & Method, false
    xmlhttp.setRequestHeader "Content-Type", "application/x-www-form-urlencoded"
    xmlhttp.send Parameters.toString
    response = xmlhttp.responseText
    set xmlhttp = nothing
end function
Private Sub Class_Initialize()
    Set Parameters = new wsParameters
End Sub
Private Sub Class_Terminate()
    Set Parameters = Nothing
End Sub
End class
class wsParameters
public mCol
public function toString()
    dim nItem
    dim buffer
    buffer = ""
    for nItem = 1 to Count
      buffer = buffer & Item(nItem).toString & "&"
    next
    if right(buffer,1)="&" then
      buffer = left(buffer,len(buffer)-1)
    end if
    toString = buffer
end function
public sub Clear
    set mcol = nothing
    Set mCol = CreateObject("Scripting.Dictionary")
end sub
public sub Add(pKey,pValue)
    dim newParameter
    set newParameter = new wsParameter
    newParameter.Key = pKey
    newParameter.Value = pValue
    mCol.Add mCol.count+1, newParameter
    set newParameter = nothing
end sub
public function Item(nKey)
    set Item=mCol.Item(nKey)
end function
public function ExistsXKey(pKey)
    dim nItem
    for nItem = 1 to mcol.count
      if mCol.Item(nItem).key = pKey then
        ExistsXKeyword = true
        exit for
      end if
    next
end function
public sub Remove(nKey)
    mCol.Remove(nKey)
end sub
public function Count()
    Count=mCol.count
end function
Private Sub Class_Initialize()
    Set mCol = CreateObject("Scripting.Dictionary")
End Sub
Private Sub Class_Terminate()
    Set mCol = Nothing
End Sub
end class
class wsParameter
   public Key
   public Value
   public function toString()
     toString = Key & "=" & Value
   end function
end class
Regards, RSingh

The reporting service web service connection pool reached the max pool size

I got a problem that it throw an exception "The timeout peroid elapsed prior to obtaining a connection from the pool. This may have occurred because all pooled connection was in use and max pool size was reached."
The satuation is our service use 15 thread to render report, but sometimes we met such exception I list above. I didn't change any configuration in rsreportserver.config, and it seems the connection to reportserver database from reporting service web
service was not disposed.
Is there any configuration I can modify to fix this issue?

Hi Dexter,
In your case, we can try to increasing the size of the connection pool to resolve the issue. By default, the Max Pool Size is 100. You can refer to the similar issue below:
http://social.msdn.microsoft.com/Forums/en-US/c57c0432-c27b-45ab-81ca-b2df76c911ef/timeout-expired-the-timeout-period-elapsed-prior-to-obtaining-a-connection-from-the-pool?forum=adodotnetdataproviders
Since the issue is related with ADO.NET. I suggestion you post the question in the following forum:
http://social.msdn.microsoft.com/Forums/en-US/home?forum=adodotnetdataproviders
It is appropriate and more experts will assist you.
Regards,
Alisa Tang
Alisa Tang
TechNet Community Support

Accessing client using Windows 2008 Terminal Service - Web Access?

Dear experts,
We are developing a network infrastructure solution for our new customer's B1 8.8 implementation.
Our customer would like to utilize Windows Server 2008 Terminal Service to connect B1 client in remote branch with server in head office area. And they want to use Terminal Service - WEB ACCESS. Base on our experience, we successfully implement B1 using Remote Desktop Connection or Citrix to support B1 client in the remote area.
My question is, Has SAP already support to utilize windows "Terminal Service - Web Access" to access B1 client?
If Yes then what are possible issues and solutions?
Thanks,
Indra

Hi,
when we said to customer that it is better to use citrix, they will see some concerns as follows:
1. Investment to buy citrix server
2. License of citrix
3. installation time for ICA client
4. maintenance cost for citrix and its server
The benefits are as follows:
1. Reduce cost to purchase B1 license. Remote and LAN users can access B1 through citrix
2. The connection speed. Citrix is more faster than RDC or terminal services either web access or not
3. The security reason. Check this link:
http://www.virtualizationadmin.com/articles-tutorials/terminal-services/management-tools/terminal-services-internet-information-server.html
In the support platform, there is no windows terminal services web access info. You may check it here:
http://service.sap.com/smb/sbo/platforms
The supported hosted environments are using citrix or windows terminal service. For remote users, the citrix is used for web access and windows terminal services are using IP and the connection is using internet (do not use VPN).
The citrix is not very expensive. We must make them realize the benefit.
Kita harus pastikan citrix itu bagus dan tidak mahal2 amat kok. Beli dari reseller citrix yang diauthorized tetapi tidak big company agar tidak mahal sekali. SAP AG menyarankan menggunakan citrix karena memang sangat bagus.
(in english : we must convince the customer about the citrixs benefit. it is not too expensive. The citrix could be buy from small reseller company so that its price is acceptable. SAP AG suggested to use citrix because it is very best web access).
I know bhs because I am from Indonesia hehehe....
JimM

Connecting to Terminal Services Web Access

Is there any way to connect to Terminal Services Web Access from a Mac that runs OSX v. 10.8.3?

Not that I know of, but you can connect to an RDP server using this:
CoRD: Remote Desktop for Mac OS X

SSL VPN message "This (client) machine does not have the web access privilege."

Hello!
I am trying to configure the SSL VPN (WebVPN) and I am almost done but when clicking on the URL's I configured in the bookmarks, I get the message "This (client) machine does not have the web access privilege. Please contact your SSLVPN provider for assistance." I looked through the many tutorials and guides in existence and none talks about such error and the fix for it. In fact, if I search the net for this error message I get only one match, in the Cisco website, where is say that "The client computer does not meet the security criteria of having web access functionality through the SSL VPN gateway." and as fix it gave this tip "Check the URL to the gateway or contact the administrator if it persists." So, nothing on the website about what this issue is and how to fix it. I will provide my IOS configuration and hopefully someone will spot the issue. Here it goes:
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname R1
boot-start-marker
boot-end-marker
logging message-counter syslog
no logging buffered
enable secret 5 $1$1LLX$u7aTc8XfNqPZhPVGwEF/J0
enable password xxxxxxxx
aaa new-model
aaa authentication login userAuthen local
aaa authentication login sdm_vpn_xauth_ml_1 local
aaa authorization network groupauthor local
aaa session-id common
crypto pki trustpoint TP-self-signed-1279712955
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1279712955
revocation-check none
rsakeypair TP-self-signed-1279712955
crypto pki certificate chain TP-self-signed-1279712955
certificate self-signed 01
3082023A 308201A3 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31323739 37313239 3535301E 170D3130 30333233 31313030
33375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 32373937
31323935 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100A8EF 34E3E792 36660498 9801F934 E8A41865 3599EA35 B073AC91 D7A53AF4
A4390D2F CB3DB2DE 936B28F0 A25F3CE1 6F40FD9E E79096F2 F89620E0 B31A7B34
649BBA22 AE44CB55 9F38BF0C 2F2770CF 8380C167 C17D760C 380E28E4 FF7D6874
9EFC310A 2AA60835 F1AA384F CD1A0173 19C98192 EBFBD531 24CB9203 EA9E7D54
B2C30203 010001A3 62306030 0F060355 1D130101 FF040530 030101FF 300D0603
551D1104 06300482 02523130 1F060355 1D230418 30168014 0D9D62EC DA77EAF3
11ABF64D 933633F9 2BA362DC 301D0603 551D0E04 1604140D 9D62ECDA 77EAF311
ABF64D93 3633F92B A362DC30 0D06092A 864886F7 0D010104 05000381 81006853
48ED4E3E 5721C653 D9A2547C 36E4F0CB A6764B29 9AFFD30A 1B382C8C C6FDAA55
265BCF6C 51023F5D 4AF6E177 C76C4560 57DE5259 40DE4254 E79B3E13 ABD0A78D
7E0B623A 0F2D9C01 E72EF37D 5BAB72FF 65A176A1 E3709758 0229A66B 510F9AA2
495CBB4B 2CD721A7 D6F6EB43 65538BE6 B45550D7 A80A4504 E529D092 73CD
   quit
dot11 syslog
ip source-route
ip dhcp excluded-address 192.168.0.1 192.168.0.10
ip dhcp pool myPOOL
   network 192.168.0.0 255.255.255.0
   default-router 192.168.0.1
   dns-server 87.216.1.65 87.216.1.66
ip cef
ip name-server 87.216.1.65
ip name-server 87.216.1.66
ip ddns update method mydyndnsupdate
HTTP
add http://username:[email protected]/nic/update?system=dyndns&hostname=<h>&myip=<a>
interval maximum 1 0 0 0
no ipv6 cef
multilink bundle-name authenticated
vpdn enable
vpdn-group pppoe
request-dialin
protocol pppoe
username cisco privilege 15 password 0 xxxxxxxx
crypto isakmp policy 3
encr 3des
authentication pre-share
group 2
crypto isakmp fragmentation
crypto isakmp client configuration group vpnclient
key cisco123
domain selfip.net
pool ippool
acl 110
crypto ipsec transform-set myset esp-3des esp-md5-hmac
crypto dynamic-map dynmap 10
set transform-set myset
reverse-route
crypto map clientmap client authentication list userAuthen
crypto map clientmap isakmp authorization list groupauthor
crypto map clientmap client configuration address respond
crypto map clientmap 10 ipsec-isakmp dynamic dynmap
archive
log config
hidekeys
interface Loopback0
ip address 10.11.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly
interface Loopback2
description SSL VPN Website IP address
ip address 10.10.10.1 255.255.255.0
interface Loopback1
description SSL DHCP Pool Gateway Address
ip address 192.168.250.1 255.255.255.0
interface FastEthernet0
description $ES_LAN$
ip address 192.168.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
interface BRI0
no ip address
encapsulation hdlc
shutdown
interface FastEthernet1
interface FastEthernet2
switchport access vlan 2
interface FastEthernet3
interface FastEthernet4
interface FastEthernet5
interface FastEthernet6
interface FastEthernet7
interface FastEthernet8
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
bundle-enable
dsl operating-mode auto
interface Vlan1
no ip address
interface Dialer1
ip ddns update hostname myserver.selfip.net
ip ddns update mydyndnsupdate host members.dyndns.org
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip policy route-map VPN-Client
dialer pool 1
ppp chap hostname xxx
ppp chap password 0 xxxx
ppp pap sent-username xxx password 0 xxxx
crypto map clientmap
ip local pool ippool 192.168.50.100 192.168.50.200
ip local pool sslvpnpool 192.168.250.2 192.168.250.100
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
ip http server
ip http authentication local
ip http secure-server
ip nat inside source static tcp 192.168.0.2 21 interface Dialer1 790
ip nat inside source static tcp 192.168.0.15 21 interface Dialer1 789
ip nat inside source list 102 interface Dialer1 overload
ip nat inside source static tcp 10.10.10.1 443 interface Dialer1 443
ip nat inside source static tcp 10.10.10.1 80 interface Dialer1 80
access-list 102 deny   ip 192.168.0.0 0.0.0.255 192.168.50.0 0.0.0.255
access-list 102 permit ip 192.168.0.0 0.0.0.255 any
access-list 110 permit ip 192.168.0.0 0.0.0.255 192.168.50.0 0.0.0.255
access-list 144 permit ip 192.168.50.0 0.0.0.255 any
route-map VPN-Client permit 10
match ip address 144
set ip next-hop 10.11.0.2
control-plane
banner motd ^C
================================================================
                UNAUTHORISED ACCESS IS PROHIBITED!!!
=================================================================
^C
line con 0
line aux 0
line vty 0 4
password mypassword
transport input telnet ssh
webvpn gateway MyGateway
ip address 10.10.10.1 port 443
http-redirect port 80
ssl trustpoint TP-self-signed-1279712955
inservice
webvpn install svc flash:/webvpn/svc_1.pkg sequence 1
webvpn install csd flash:/webvpn/sdesktop.pkg
webvpn context SecureMeContext
title "My SSL VPN Service"
secondary-color #C0C0C0
title-color #808080
ssl authenticate verify all
url-list "MyServers"
   heading "My Intranet"
   url-text "Cisco" url-value "http://192.168.0.2"
   url-text "NetGear" url-value "http://192.168.0.3"
login-message "Welcome to My VPN"
policy group MyDefaultPolicy
   url-list "MyServers"
   functions svc-enabled
   svc address-pool "sslvpnpool"
   svc keep-client-installed
default-group-policy MyDefaultPolicy
aaa authentication list userAuthen
gateway MyGateway domain testvpn
max-users 100
csd enable
inservice
end
Thank you!

Hi,
Please check SAP note:
2004579 - You cannot create a FR company from a Package
Thanks & Regards,
Nagarajan

Reporting Services through ISA server for All Authenticated Users

Hello colleagues.
I have MS SQL 2012 server with Reporting Services and it work via link:
https://reports2.domain.com/reports
In LAN all work fine, but I want publish this resource via ISA for All Authenticated Users.
When in publish rule I configure (in Condition) "All users" - all work fine, but when I configure "All Authenticated Users" - I have trouble on web form on
https://reports2.domain.com/reports/Pages/Report.aspx?ItemPat... - scripts not work, because it run how "anonymous" (I see on ISA logging) and ISA block scripts.
I can't use "All Users", because it's not secure.
Maybe somebody publish Reporting Services through ISA server for All Authenticated Users?
OR maybe - how on Reporting Services configure Negotiate authenticated for scripts?

Hi Alexander,
All users or applications who request access to report server content or operations must be authenticated using the authentication type configured on the report server before access is allowed. The AuthenticationType named RSWindowsNegotiate is supported
by Reporting Services. To configure Windows Authentication on the Report Server, please see:
http://msdn.microsoft.com/en-us/library/cc281253(v=sql.110).aspx
Besides, we can publish report server via ISA server. Please note that you should use a new web port number with a new listener which shouldn’t be used by other web site for report server. Reference:
http://social.technet.microsoft.com/Forums/forefront/en-US/1cc68996-1ce6-4d88-a30d-2bfd13fba06e/how-to-publish-ssrs-2008-through-isa-2006?forum=Forefrontedgegeneral
Hope this helps.
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support
Katherine thanks for answer.
Report Server service started as Domain account.
I have in RSReportServer.config this:
<Authentication>
<AuthenticationTypes>
<RSWindowsNegotiate />
</AuthenticationTypes>
<RSWindowsExtendedProtectionLevel>Allow</RSWindowsExtendedProtectionLevel>
<RSWindowsExtendedProtectionScenario>Proxy</RSWindowsExtendedProtectionScenario>
<EnableAuthPersistence>true</EnableAuthPersistence>
</Authentication>
In web.config I have this:
<authentication mode="Windows" />
<identity impersonate="true" />
I can go (from Internet through ISA) to
https://reports2.domain.com/reports and LogOn Authentication is work, but scripts not work, because it run how "anonymous" (I see this on ISA logging) and ISA block scripts.
Do you know where in Reporting Services configure run scripts with Negotiate authentication?

Device is connected to to a wifi network but does not have access to Blackberry services over wifi connection

please help me, my blackberry curve has been working perfectly fine (everything network and wifi connection are working great) since i got it but all of the sudden when i connect to our wifi at home i noticed that the wifi logo on the upper screen is grayed out. i checked the manual and it says: device is connected to to a wifi network but does not have access to Blackberry services over wifi connection. i dont know what to do, i tried the hard reset (removed batt for 1 min while phone is on and put it back in) i also tried to remove the wifi profile and added it back up but still nothing seems to work, my service provider has BB services available on my phone, i can received BBM, pushed email, use FB on my phone using my network but i cant use my wifi to browse.. what should i do? help me please!

With a PC, the Windows Firewall and/or the anti-virus software will sometimes block an attempted Internet connection.
Check both applications to see if you can find a "blocked" item and then take steps to "allow" the connection.
If still no luck, temporarily disable the wireless security for a short period to see if the PC can connect that way. If it can.....then you know it is security related issue.
See if the PC can connect using a setting like WPA-PSK-TKIP. The equivalent Apple setting would be WPA/WPA2 Personal.

Cannot upload epub book: Apple ID does not have permission to access itunes connect.

Apple ID does not have permission to access itunes connect.
I signed up itunesconnect.apple.com/Webobjects/iTunesConnect.woa/wa/apply (This is all to upload my ebook in ibook format)
and the computer is new and updated and before I did this I had a valid new itunes account with my tax id that is
separate from my other itunes accounts. I put in all the info and itunes producer didnt come up on the screen but i
sent all of the info to apple and the forms seemed to take it.(accept) I then when to itunesconnect.apple.com and I
get the error message Apple ID does not
have permission or access to itunes connect.
I went to apple ID and apple developer and verified all of my information and it is correct and I did also with itunes and apple ID!
I cannot login to itunesconnect.apple.com so I can upload my ebook.(yes its in epub format)
I did call apple care and the apple devel 800 numbers and they said to email itunes and ibookstore and its
been a long long time and I have not received any help at all. - Steve Jobs are you out there? Lots of other people are having similar or the same problem.
From Erik
<Edited by Host>

I have the same problem -- please post if you find the solution.

User does not have access to the Cloud Service Type

Where do it edit the access the the user? How do i fix this problem?
"messages" :
"hint" : "User 'DBAAS' does not have access to the Cloud Service Type 'dbaas' resource interaction with method 'POST' on accept type 'application/oracle.com.cloud.common.DbPlatformInstance' and content type 'text/plain'" ,
"stack_trace" : "oracle.sysman.emInternalSDK.ssa.cloudapi.CloudSecurityException: User 'DBAAS' does not have access to the Cloud Service Type 'dbaas' resource interaction with method 'POST' on accept type 'application/oracle.com.cloud.common.DbPlatformInstance' and content type 'text/plain'\n\tat oracle.sysman.emInternalSDK.ssa.cloudapi.EMCloudServlet.routeToServiceType(EMCloudServlet.java:180)\n\tat oracle.sysman.emInternalSDK.ssa.cloudapi.EMCloudServlet.perform(EMCloudServlet.java:235)\n\tat oracle.sysman.emInternalSDK.ssa.cloudapi.EMCloudServlet.performPost(EMCloudServlet.java:385)\n\tat oracle.sysman.emInternalSDK.ssa.cloudapi.rest.AbstractRestServlet.doPost(AbstractRestServlet.java:137)\n\tat javax.servlet.http.HttpServlet.service(HttpServlet.java:727)\n\tat javax.servlet.http.HttpServlet.service(HttpServlet.java:820)\n\tat weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)\n\tat weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)" ,
"text" : "Could not route to the Cloud Service Type 'dbaas'. The exception stack trace should provide some information about the reason of the failure" ,
"date" : "2012-12-04T12:27:11+0000"
}

I'm trying to create a new DbPlatformInstance using the EM12c Cloud API but i keep getting an error "User 'DBAAS' does not have access to the Cloud Service Type 'dbaas' resource interaction with method 'POST' on accept type 'application/oracle.com.cloud.common.DbPlatformInstance'
Below are the request and response.
REQUEST:
POST /em/cloud/dbzone/D7EEE339C1249F83FC4587C722EB20B5
Authorization: Basic xxxxxxxxxx
Content-Type: application/oracle.com.cloud.common.DbPlatformInstance+json
Accept: application/oracle.com.cloud.common.DbPlatformInstance +json
     "name" : "Database 11.2.0.3.0 Instance for SSA_USER_1",
     "description" : "Instance 2 of Oracle Database 11.2.0.1.0" ,
     "based_on" : "/em/cloud/dbplatformtemplate/B59EDC65951039E8E040E50A8F5B0435",
     "params" : { "username": "xxx", "password" : "yyy" }
RESPONSE:
Response Headers:
Status Code: 403 Forbidden
Connection: Keep-Alive
Content-Language: en,en-us
Content-Type: application/oracle.com.cloud.common.Messages+json; charset=ISO-8859-1
Date: Tue, 04 Dec 2012 14:38:08 GMT
Keep-Alive: timeout=5, max=100
Server: Oracle-Application-Server-11g
Set-Cookie: ORA_SMP_EM_AUTH_-4568676491231894381=52W7Q2KQ5w5FTn8MQYrZ3Hqp5QnqBLkNwVKvHSS728pMzyQpxJpd!352643837; path=/em; secure; H ttpOnly
Transfer-Encoding: chunked
X-ORCL-EMOA: true
X-Oracle-DMS-ECID: 004o0VGXIE08XrqpKK4Eye0001P_00009q
X-Powered-By: Servlet/2.5 JSP/2.1
x-specification-version
Response Body:
"messages" :
"hint" : "User 'DBAAS' does not have access to the Cloud Service Type 'dbaas' resource interaction with method 'POST' on accept type 'application/oracle.com.cloud.common.DbPlatformInstance' and content type 'text/plain'" ,
"stack_trace" : "oracle.sysman.emInternalSDK.ssa.cloudapi.CloudSecurityException: User 'DBAAS' does not have access to the Cloud Service Type 'dbaas' resource interaction with method 'POST' on accept type 'application/oracle.com.cloud.common.DbPlatformInstance' and content type 'text/plain'\n\tat oracle.sysman.emInternalSDK.ssa.cloudapi.EMCloudServlet.routeToServiceType(EMCloudServlet.java:180)\n\tat oracle.sysman.emInternalSDK.ssa.cloudapi.EMCloudServlet.perform(EMCloudServlet.java:235)\n\tat oracle.sysman.emInternalSDK.ssa.cloudapi.EMCloudServlet.performPost(EMCloudServlet.java:385)\n\tat oracle.sysman.emInternalSDK.ssa.cloudapi.rest.AbstractRestServlet.doPost(AbstractRestServlet.java:137)\n\tat javax.servlet.http.HttpServlet.service(HttpServlet.java:727)\n\tat javax.servlet.http.HttpServlet.service(HttpServlet.java:820)\n\tat weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)\n\tat weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)" ,
"text" : "Could not route to the Cloud Service Type 'dbaas'. The exception stack trace should provide some information about the reason of the failure" ,
"date" : "2012-12-04T14:38:09+0000"
}

Cannot access my iTunesConnect account, I get: "Apple ID does not have permission to access iTunes Connect"

iTune Connect does let me log in. "Apple ID does not have permission to access iTunes Connect."

I'm going crazy here. I've emailed, called, and banged my head on every apple support door in existence including:
- itunes
- Independent Labels
- Apple Developer
- Apple Marketing
- Apple Support
I filled out an application to sell music on iTunes but messed up one field in the form. I received an email from apple alerting to me about the error and asking me to login to iTunes Connect and finish my application. When I went to the page to fix the form (itunesconnect.apple.com) I received the following error "Your iTunes Connect ID has not been enabled." I tried to start over filling out the application from scratch and received this error "This tax ID is already associated with an iTunes store application."
Seriously, this has been going on in heartless loop since NOVEMBER. It sure doesn't feel like anyone at Apple cares, at least none of the 20 people I've communicated with. Yes, I am about to throw in the towel and sell exclusively on Google Play store.

Windows 8 Pro volume license version does not have "Add Features" therefore cannot install media center.

As the title describes, Windows 8 Pro installed from the Volume License ISO does not have the Add Features wizard, and as such it appears to be impossible to install the Windows Media Pack.
I've consulted with Live Chat support who cannot provide an answer to this, they simply said it should be done through "Add Features" which does not exist.
A similar thread was answered by saying install from a Retail disc and upgrade. However this is hardly a solution, paying for an additional Windows license when you already have a volume license.
Can anyone, preferably MSFT, provide a proper answer on how Windows Media Center can be install on Windows 8 Pro which is volume licensed. If it can't be done can some reason or justification be given as to why it can't be done.
Please see previous thread here: http://social.technet.microsoft.com/Forums/en-US/w8itproinstall/thread/d63b46e5-c542-4dbe-be41-c46cda440723

I would like to pile on here and say "ditto" to all of the above. you have a licensed product and they don't even support the MSFT version of a DVD player. Nah, no one EVER has to play a older technology in corporate America due to training or presentation
(A funny clip of a movie before a ppt)? Nah.
But, I'd like to add a warning to MSFT senior management. I know you want to force everyone to use YOUR cloud just like apple did to theirs. Wont' work. Some of us refuse to sign onto a web site and let you track all of our moves... some
distrust the cloud (Target anyone?) etc etc. All good points, now for the out of the park. The Harvard Business Review some years ago did a study on long term profitability of a company (you have to have a profit to stay in business). The
most highly correlated factor: Customer Sat. Sorry, but I don't see customer sat in all of these entries.
IF you made your product easier to use and NOT have to have a IT support person to move from a small workgroup to a server configuration (and PS, what in the heck to you get from a workgroup? File Replication, Remote access to outlook files as one
does via exchange? Really, every computer is in a workgoup any more, so there is ZERO value add in a workgroup on a MSFDT platform, however there is great value, even with a couple of users, in an Exchange/Windows Server Platform -- so why so you make
it so damned hard to implement one... Difficult for one to implement in an SMB environment (so lets just kill SBS) but growth from small business is where your growth is... just like IBM did before you, MSFT only appears to be listening to Fortune 500 it execs,
but I really digressed) This is just one more pain in the butt to use MSFT in the small environment. So what is the rational business decision? Yes one can pick MSFT but with Zero value add in the workgroup, why not them other guys (who may
be apple, or android or even some Linux platforms)
SO you want to continue to mil the cash cow, listen to your forums.
One more note on the STORE. Lets say you do pick a competitive product in the windows store. Have them been verified they don't contain malware like MSFT products? I believe the answer here is "NO" So this adds another layer of complexity
and security risk on the corporate problem of "How do I play a DVD on my laptop" I am sure none of you has ever played a movie on your laptop flying for business?
So, MSFT management, let me paraphrase the posts above: "WHY don't you support our business needs"
And remember, people buy to have their needs met..... (IBM Planned Sales Call)
If you don't meet small business needs, someone will... and that too is fraught with risk.
(For example of how to make computers easy to use in SMB I reference SBS, the Systems Management Interface tool in IBM Unix, or best of all, the AS/400.... something even Ellison couldn't kill, though he tried.

Cannot delegate Reporting Services Web access to domain user / group, User does not have required permissions

Similar Messages

Maybe you are looking for