Reporting Services SQL 2008 R2 Snafu...

Question

Permissions error "User '<machine name>\<user>' does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed."

To start, my platform is a clean install of Windows 2008 Server R2 in a VMWare environment, is not a member of a domain, running SQL Server 2008 Enterprise R2, with a default installation of SSRS. Both database and reporting services use the default instance. I've set up a FQDN for SSRS and assigned both /reportserver and /reports to use port 8080.

Ok, I've spent 2 weeks jumping through all of the recommended hoops returned in google search for correcting this error. My findings... the only solution that works is not an option and that is to remove UAC functionality, add any users of SSRS to the machines Administrator group as well as all of the default SSRS groups? Seriously MS? If I have 10 users who only need to be able publish reports, why on God's green earth would I want to add them to the Administrator's group? They do not need that kind of power.

Here are my requirements (policy-wise).

1. Reports Manager must be accessible by end-users with standard user accounts through their web browser (IE8).

2. Most end-users are running Windows XP SP3, they have no UAC controls and they also do not have the "Run as Administrator" option.

3. I can give users a remote desktop connection to the machine running sql server so they can use IE on the machine running SSRS. However this still only works when users are added to the administrators group, not gonna happen.

Anyone have an actual documented microsoft step by step that I haven't already tried before I run back to Crystal Reports and beg for forgiveness?

Thanks, and HAPPY MONDAY!

---

Bill

Answer 1

Hi Bill,

The issue may occur if you haven’t set the Item-level permission properly on the report server. Please ensure the following steps are finished:

1. In Report Manager, on the Home page, click Folder Settings.
2. In the Folder Settings page, click Security.
3. Click New Role Assignment.
4. Type your Windows user account in this format: <domain>\<user>.
5. Select Browser.
6. Click OK. 

Besides, the UAC feature only affects the operations performed on the local computer. For the HTTP requests sent from the clients computers, they are not affected by the UAC feature on the report server computer. So, on the client computers that use Windows XP SP3, the end-users don’t need to care about the UAC feature.

Reference:
How to: Configure a Report Server for Local Administration on Windows Vista and Windows Server 2008 (UAC)

Regards,

---

Mike Yin
TechNet Community Support