Hi all, We are installing SQL Server 2008 r2 onto a server, and this installation includes Reporting Services. SSRS works, I can deploy reports, use Report Manager, Report Builder, etc., all using my admin privs. The problem is when NON-ADMIN users connect to \\server\reports. They get the following error: User 'DOMAIN\user' does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed. This error is resolved by giving the DOMAIN\user account local admin privs on the server. Granting admin privs is not a solution. We have accountants and other non-technical people that will use Report Manager and Report Builder. We can't just give every person admin privs on the production SQL server. I have done a lot of research on the web... I see a results involving earlier versions of SQL Server and Report Manager, but this is 2008 r2 - different webserver, etc. How can I resolve this issue?

This is a frequent asked question and is related to UAC, I believe the links below will have the solution you need :-) http://skamie.wordpress.com/2010/06/24/ssrs-and-uac/ http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx Hope this helps!Thanks, Michael Mei

This is a frequent asked question and is related to UAC, I believe the links below will have the solution you need :-) http://skamie.wordpress.com/2010/06/24/ssrs-and-uac/ http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx Hope this helps!Thanks, Michael Mei

Maybe I am answering the wrong question, and you may have already done this, but users of the site must be added using Site Settings. For Everyone we add NT Authority\Authenticated Users to the System User role. hope this helps...Managing Consultant - Mariner

Maybe I am answering the wrong question, and you may have already done this, but users of the site must be added using Site Settings. For Everyone we add NT Authority\Authenticated Users to the System User role. hope this helps...Managing Consultant - Mariner

@Michael, based on the error message provided by jason, some times, it is related to UAC if the users have sufficient permissions to access report manager and are running windows vista. @jason, i would suggest you verify whether the users have access to report manager. To do it, follow http://msdn.microsoft.com/en-us/library/aa337491.aspx on how to setting permissions in reporting services. If the users have sufficient permissions and issue persists, use "Run as administrator" option to open IE or disable the UAC. please let us know if you have more question. thanks, Jerry

@Michael, based on the error message provided by jason, some times, it is related to UAC if the users have sufficient permissions to access report manager and are running windows vista. @jason, i would suggest you verify whether the users have access to report manager. To do it, follow http://msdn.microsoft.com/en-us/library/aa337491.aspx on how to setting permissions in reporting services. If the users have sufficient permissions and issue persists, use "Run as administrator" option to open IE or disable the UAC. please let us know if you have more question. thanks, Jerry

Thank you all. And, in fact, adding DOMAIN\username to Report Manager security does work - SOMETIMES. Jerry, I do have more questions. 1) When I Remote Desktop into the server, fire up IE and go to http://server/reports, I get the same error message, EVEN when I am logged on as a local administrator! Why would this be happening locally but not remotely? 2) Sometimes, remotely, it works. Other times, it pops up a dialog box and asks for Username & Password. I type in my username & password, it asks a 2nd time, then a 3rd time, then only a blank page shows up. I am part of BUILTIN\Administrators, and have entered the correct password, Domain\Username, many times, and it still does not accept it. What do I need to do to get Report Manager to accept the username/password I enter? Thank you, Jason

Thank you all. And, in fact, adding DOMAIN\username to Report Manager security does work - SOMETIMES. Jerry, I do have more questions. 1) When I Remote Desktop into the server, fire up IE and go to http://server/reports, I get the same error message, EVEN when I am logged on as a local administrator! Why would this be happening locally but not remotely? 2) Sometimes, remotely, it works. Other times, it pops up a dialog box and asks for Username & Password. I type in my username & password, it asks a 2nd time, then a 3rd time, then only a blank page shows up. I am part of BUILTIN\Administrators, and have entered the correct password, Domain\Username, many times, and it still does not accept it. What do I need to do to get Report Manager to accept the username/password I enter? Thank you, Jason

Hi Jason, Follow the following solutions alternatively to solve this issue. 1) Remove RSWindowsNegotiate and ensure RSWindowsNTLM is specified in the file rsreportserver.config 2) OR, change the report server service account to Network Service thanks, Jerry

Hi Jason, Follow the following solutions alternatively to solve this issue. 1) Remove RSWindowsNegotiate and ensure RSWindowsNTLM is specified in the file rsreportserver.config 2) OR, change the report server service account to Network Service thanks, Jerry

The only problem with 1) is there is no "rsreportserver.config" on the server hard drives. I'm doing a search for the file, on my local hard drives, and getting 0 results. Are you sure that is not a SSRS 2005 fix? If it does exist in 2008 r2, where should it be located? I will try 2) in the morning, thank you for the ideas.

The only problem with 1) is there is no "rsreportserver.config" on the server hard drives. I'm doing a search for the file, on my local hard drives, and getting 0 results. Are you sure that is not a SSRS 2005 fix? If it does exist in 2008 r2, where should it be located? I will try 2) in the morning, thank you for the ideas.

Michael - Thank you for the links. The first solved the error message, however it should not be necessary if my accounts are already part of BUILTIN\Administrators. The second, well, UAC config is outside of my knowledge base. :/ Wayne - Thank you for the idea - yes we tried adding users to a Group, then adding the Group - no luck. We also added the Authenticated Users, which for us had no effect. I don't want to let everyone in, just a department of (non-technical) users.

Michael - Thank you for the links. The first solved the error message, however it should not be necessary if my accounts are already part of BUILTIN\Administrators. The second, well, UAC config is outside of my knowledge base. :/ Wayne - Thank you for the idea - yes we tried adding users to a Group, then adding the Group - no luck. We also added the Authenticated Users, which for us had no effect. I don't want to let everyone in, just a department of (non-technical) users.

Hi, Open this link http://msdn.microsoft.com/en-us/library/ms155866.aspx to learn configuration files in reporting services. The rsreportserver.config configuration file is stored at <drive>:\Program Files\Microsoft SQL Server\MSSQL.n\\Reporting Services \ReportServer. Find this file and open it, then locate the <Authentication><\Authentication> section and apply my solution mentioned in my previous post. If you can't find authentication, refer to http://msdn.microsoft.com/en-us/library/ms157273.aspx for more details about this. thanks, Jerry

Hi, Open this link http://msdn.microsoft.com/en-us/library/ms155866.aspx to learn configuration files in reporting services. The rsreportserver.config configuration file is stored at <drive>:\Program Files\Microsoft SQL Server\MSSQL.n\\Reporting Services \ReportServer. Find this file and open it, then locate the <Authentication><\Authentication> section and apply my solution mentioned in my previous post. If you can't find authentication, refer to http://msdn.microsoft.com/en-us/library/ms157273.aspx for more details about this. thanks, Jerry

I am still getting this error message. Just formatted a new install of SQL Server. And getting the same error message: User 'DOMAIN\user' does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed. It happens when a NON-ADMIN connects to the Report Manager, from another workstation in the network. Adding this username to Site Settings > Security has no effect, and UAC is turned off. What else could resolve thsi error message?

Hi Jason, If you are using Internet Explorer(IE) 8 to access the Report Manager, please check off 'Enable Protected Mode'. Thanks, Jin ChenJin Chen - MSFT

I am also having this exact same problem, but the problem is a little deeper for me because i am trying to execute a report on my asp.net application which runs under the iis user of Plesk(Yes, server is a vps and setup using the plesk admin tools). I have added the plesk user under the site settings in report manager but this again seems to have no effect, what the ____ can it be?????????? Come on people some one out there must know the answer to this....

Hi, Jason I had the same problem when I tried to configure and test sql 2008 report service. I got the same permissions error even I have added the user into system user role in site settings->security. I finally sorted out the problem by going to folder settings and assigned suitable permission to the user. It fixed the permission problem. Hope it will help your case

Hi, all, Having the same problem, and have tried almost all solutions provided here. The only way that works is granting users to the server admin, and that's not right. Here is what I have done. 1. Added NT AUTHORITY\Authenticated Users to Site Setting and folders. Added it to ReportServer database. 2. Added individual users to Site Setting and folder settings. 3. Disabled UAC. 4. Commented out RSWindowsNegotiate, but leave RSWindowsNTLM in the file rsreportserver.config (but not specified. What to specify?). So it looks like this now, < AuthenticationTypes> <!-- RSWindowsNegotiate/--> < RSWindowsNTLM/> </ AuthenticationTypes> 5. Changed Service Account to Network Service. None of them work, need help !!

Hi, all, Having the same problem, and have tried almost all solutions provided here. The only way that works is granting users to the server admin, and that's not right. Here is what I have done. 1. Added NT AUTHORITY\Authenticated Users to Site Setting and folders. Added it to ReportServer database. 2. Added individual users to Site Setting and folder settings. 3. Disabled UAC. 4. Commented out RSWindowsNegotiate, but leave RSWindowsNTLM in the file rsreportserver.config (but not specified. What to specify?). So it looks like this now, < AuthenticationTypes> <!-- RSWindowsNegotiate/--> < RSWindowsNTLM/> </ AuthenticationTypes> 5. Changed Service Account to Network Service. None of them work, need help !!

I am also having same issue.I tried all options but still getting same error. User 'DOMAIN\user' does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed.

I am also having same issue.I tried all options but still getting same error. User 'DOMAIN\user' does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed.

Guys, My issue has been resolved, please find the steps: a. I added myself as System Admin in the Site Setting: b. Opened the browser again in Admin mode. Navigated to the home folder and added myself and assigned to all the roles. c. Within Internet explorer tools, Internet Option -> Security -> Custom Level -> Settings (Go to bottom) -> User Authentication -> Logon I changed from Automatic logon only in Intranet zone to Automatic logon with current user name and password d. Restarted SSRS box. After this when I ran the browser in normal mode, I was able to access all report manager and all the folders. Enjoy SQL SERVER Database Administrator

Guys, My issue has been resolved, please find the steps: a. I added myself as System Admin in the Site Setting: b. Opened the browser again in Admin mode. Navigated to the home folder and added myself and assigned to all the roles. c. Within Internet explorer tools, Internet Option -> Security -> Custom Level -> Settings (Go to bottom) -> User Authentication -> Logon I changed from Automatic logon only in Intranet zone to Automatic logon with current user name and password d. Restarted SSRS box. After this when I ran the browser in normal mode, I was able to access all report manager and all the folders. Enjoy SQL SERVER Database Administrator

Here is what I have discovered. And this may help a lot of people who are overlooking a simple thing. The Microsoft MVPs on this thread pointed it out. But for all those impatient report server site admins out there who did not read through it, here is a short form: You may have gone to site setting and given your DOMAIN\user - system user permissions (but still your user logs in and gets the error message). HOWEVER, you will need to additionally go to the home folder - folder settings and add DOMAIN\user as a browser (only then will the user see the folders instead of the error message)!!! So hopefully you lazy souls see this and find it helpful. Additionally all child folders and reports under the home folder will inherit the home folder permissions, so you should be good to go.

Here is what I have discovered. And this may help a lot of people who are overlooking a simple thing. The Microsoft MVPs on this thread pointed it out. But for all those impatient report server site admins out there who did not read through it, here is a short form: You may have gone to site setting and given your DOMAIN\user - system user permissions (but still your user logs in and gets the error message). HOWEVER, you will need to additionally go to the home folder - folder settings and add DOMAIN\user as a browser (only then will the user see the folders instead of the error message)!!! So hopefully you lazy souls see this and find it helpful. Additionally all child folders and reports under the home folder will inherit the home folder permissions, so you should be good to go.

Anand - thanks for the summary! That really helped my situation alot! Here's a follow up question, and it has to do with your last sentence: What if I want to limit what folders a user will see when they are at the HOME folder? IOW, I have 10 folders below the Home folder and I only want a user to see 5 of them. TIA

Found the answer already! This works: http://social.msdn.microsoft.com/Forums/en/sqlreportingservices/thread/c068b8a5-6113-487b-99f5-ccf2de2f11d0