Hi, I have SCCM installed on a single server, running W2K8 R2 64-bit. Everything is working (discovery, client deployment, software deployment) except reporting. I have installed a reporting point, have added my users to the "SMS Reporting Users" group, given the users read permissions on the Reporting object class in the console and have even set a higher ASP buffer limit (as per directions in other postings) for the smsreporting virtual directory in IIS (7.5). Nothing seems to work. On the server, when browsing the URL using http://localhost/SMSReporting_MySiteCode the basic page displays, but in the left hand side I get an error message "An error occurred on the server when processing the URL. Please contact the system administrator." Clicking on the IE "error on page" icon reveals: Webpage error details User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729) Timestamp: Tue, 9 Feb 2010 00:02:25 UTC Message: Object required: 'XMLReports' Line: 894 Char: 2 Code: 0 URI: http://localhost/smsreporting_MySiteCode/ReportsNav.asp?ReportID=&DashboardID=&ShowTree=True When browsing from another machine, going to http://MyServerName/smsreporting_MySiteCode, and entering the credentials of my user account (added to the "SMS Reporting Users" group, which also happens to be a domain admin and an administrator of the SCCM server) I simply get: You do not have permission to view this directory or page. Removed and added the reporting point role a couple of times as well and that does not work. RSetup.log shows it installed correctly (returned 0). Any ideas what to try next? Thanks, Richard

Hi Richard, Could you please check the proxy setting on IE, and bypass this computer name, then acess the URL again and check whether SCCM report ing is working.

Hi Eric, I had no proxy settings but your comment made me think of using the IP address instead of the host name. If I put in the IP address, it works. If I use the hostname, either alone or with the FQDN, it does not work. I get "You do not have permission to view this directory or page". I have checked that our DNS is setup correctly - it is. The hostname of the SCCM server has the correct IP address entry. So why if I use the hostname do I get "You do not have permission to view this directory or page". Thanks, Richard

Hi,When you try to browsing the URL, the error that you receive is exactly "HTTP Error 401.1" or "HTTP Error 401.3" ?See : HTTP Error 401.1 : http://support.microsoft.com/kb/942044/en-usHTTP Error 401.3 http://support.microsoft.com/kb/942042/en-usThank's.Bechir Gharbi. MCSA, MCSE M+S, MCITP Server/Enterprise Administrator, MCT, MCTS ConfigMgr

Hi Bechir, It does not have the exact wording to either of those definitions. It is simply a white page that says: "You do not have permission to view this directory or page." Closet to the 401.1 wording, but not the same. I looked at the security log on on the server. When I used the host name in the URL it is trying to use for Kerberos authentication ("Logon Process: Kerberos") , and I see a "Logon" (event 4624) and then immediately a "Logoff" (4634) event. When I use the IP address it uses NTLM ("Logon Process: NtLmSsp") and I only see a Logon event (4624). I wonder why it is trying to use Kerberos? Is this the default setup? Regards, Richard

Have you checked your IIS 7.5 role features? Reporting server requires that Application Development --> ASP is enabled. ASP is not required for MP or BITS enabled DP roles, so you might have missed that.

I have a similar issue when I try to run the reports locally on the server, but if I run the IE as administrator everthing is fine. Do I really have to disable the UAC?

Sorry I meant to hit reply - anyway - for me the fix was to install Basic and Windows authentication in IIS and took me about 2 hours to find out...

Where exactly do I put the AD Security group I created to run reports? I keep looking for configuration settings for security that will enablel this group to run and view reports and nothing is looking to intuitive.

Add it to the local SMS Reporting User group and grant ConfigMgr security rights to run reports.

This is what worked for me (I'm using SCCM 2007 R2 w/ SP2 running on W2k8R2 server) - Open the IIS Manager and go to your SCCM site (mine is Default Web Site) expand that and find "SMSReporting_***" Double click Authentication under IIS Click on Windows Authentication and then choose "Providers..." under Actions Add NTLM if it isn't there and move it to the top. Click OK Reboot World Wide Web Publishing Service I'm now able to open reports from the SCCM Console that is installed on my Windows 7 client computer.

This is what worked for me (I'm using SCCM 2007 R2 w/ SP2 running on W2k8R2 server) - Open the IIS Manager and go to your SCCM site (mine is Default Web Site) expand that and find "SMSReporting_***" Double click Authentication under IIS Click on Windows Authentication and then choose "Providers..." under Actions Add NTLM if it isn't there and move it to the top. Click OK Reboot World Wide Web Publishing Service I'm now able to open reports from the SCCM Console that is installed on my Windows 7 client computer. Thanks Tyson...you saved my butt. I had installed WSUS which screwed my reporting up. I had NTLM but it was not at the top. Once I moved it to the top, and restarted that service, I was golden. Thank you much.

Thanks Tyson_M.... it worked. mike

This worked for me as well, thank you!

Cool tnx works like a charm,

Tank you, works fine! Very Helpful.Att. Rodrigo Krug