Permanently set registry EnableRbacReporting=0 in reporting services ?

Question

Hi Guys and gals
I would like to permanently disable the "EnableRbacReporting" setting i SCCM 2012 R2 - Reporting Services.
How is this possible and is this in fact possible?
/Leth

Answer 1

Hi Garth
I don't know how to explain this in an easy way, so instead let me put out the scenarios i have tried:
Local System with EnableRbacReporting=1 Without any SPN's registered other than the ones the system makes for us:
When this is the case we cannot remotely access the reportserver and pass variables to the reports (using the
HTTP://Servername/ReportServer.aspx?blabla), but we can access the report and manually give the report the parameters.
Execution time: ~8-10 minutes.
Local System with EnableRbacReporting=0 Without any SPN's registered other than the ones the system makes for us:
Everything works as it should. We can access the report, and pass the username and device variables used in our URL.
Execution time: ~20-30 seconds.
Service Account EnableRbacReporting=1 with SPN registered on the username both with a port given and without a port given (in total 4 SPN registrations):
We can access the report server and pass the variables given to the URL which we need and everything in regards to Reports work as they should.
BUT, the Web Services which we also have on this server does not work, and no SPN registrations changes that (it run's under other user accounts).
Execution time: ~8-10 minutes.
So, as you can see it's not a matter of the execution time when we run on a service account, it's a matter of the remote usage.
In regards of your 1% overhead, this is NOT the numbers we see in this environment.
I can't see how changing the queries do much, when i can conclude that when simply changing the registry changes the execution time. (also, it's a builtin report).
So if we should look into something in that regard, it might be better to look at the stored procedure running the RBA? (or am i off here?)
The installation is as follows:
Server A: SCCM 2012 R2 CU2
Server B: SQL 2008 R2 SP2 CU13 / Reporting Services
Server C: WSUS
Server D: MP
Server E: MP
DP's in total is about 80
And this is not a subject to change.
TBH.
I would very much like it if we used the RBA, but to this customer, it gives him NO value, and i cannot possibly see how i can keep using the RBA other than if i get the other web services off this machine.
And this is not in scope atm.
Therefore i would like it if we could get back to the original question.
Is it possible to change this setting for good?
/Leth