Hi, I have come across a very very strange issue and I will try my best to explain it in detail. We have a report server SSRS2008R2 hosted on windows 2008 server and the service is running with Network Service account(please note this). We have deployed a lot of reports on this server and totally 3 data sources are used and each one has same login called 'domain\ssrs_virtual' to connect to the databases for reading the data and executing stored procedure. All these reports are called by a internet webpage where user enter their credentials(common credentials stored in a table). If credentials are correct, it takes them to a list of reports, they click on it and internally the above reports are called. I also learnt that the account mentioned above domain\ssrs_virtual is mapped with this webpage also and has been given browser permissions to browse the reports. So far so good. Now, 2 days back a new report was deployed with the same process. A user called 'Sandy' sits on her work station and opens the webpage,types the username and password(generic ones) and she gets to see the list of reports including the new one. When she clicks on the report link, she gets an error saying : Reporting Services Error -------------------------------------------------------------------------------- For more information about this error navigate to the report server on the local server machine, or enable remote errors I silently went inside reportserver logs and found an error: domain\sandy does not have sufficient permissions to perform this task.Access is denied. I tried asking different users and report server logs shows the same or them. It does not give an error to me because I am an admin, but my question is why is the SSRS picking up account information from their workstations? It should still use domain\ssrs_virtual account for its operations. Please help me. Let me know if there is any other information I can provide you with. Thanks Chandan

Hi, check whether sandy have the Browser rights on the parent folder of report manager. regards, Noman Rao

Hi, check whether sandy have the Browser rights on the parent folder of report manager. regards, Noman Rao I already mentioned that the users do not have to have browser permissions. We have a basic authentication setup on the internet webpage and it should use one common account to reach the SSRS report because it has got browser permissions. We cannot give all the individual users browser permissions. In that case what will happen to non-domain users? Think it like this, when I open my bank statement report, there will be an authentication set for me. I just put my id and password. I need not have the browser permissions to bank server or read permissions on databases. Thanks Chandan

Does anybody has any solution to this? Thanks Chandan

Hi Chandan, Sorry for the delay. From your description, does the issue occur when opening the new report or opening all the reports on the report server? If the issue occurs when viewing any report on the report server, the issue might be the Basic Authentication related. To configure the Basic Authentication in Reporting Services, please see: How to: Configure Basic Authentication in Reporting Services If the issue occurs only when accessing the new report, I suggest that you check the data source properties of the report. If the report uses a custom data source, please configure the stored credentials by using the domain\ssrs_virtual account. Hope this helps. Regards, Mike Yin TechNet Subscriber Support If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.

Hi Chandan, Sorry for the delay. From your description, does the issue occur when opening the new report or opening all the reports on the report server? If the issue occurs when viewing any report on the report server, the issue might be the Basic Authentication related. To configure the Basic Authentication in Reporting Services, please see: How to: Configure Basic Authentication in Reporting Services If the issue occurs only when accessing the new report, I suggest that you check the data source properties of the report. If the report uses a custom data source, please configure the stored credentials by using the domain\ssrs_virtual account. Hope this helps. Regards, Mike Yin TechNet Subscriber Support If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here. Thanks for your reply. The connection from the report internally is going to the databases as domain\ssrs_virtual only. The problem comes when a user tries to browse the report. We have custom build security so any non-domain guys should able to access the report if they suppy correct username and password. However, the SSRs expects them to have browser rights. since these guys come under 'anonymous' category, we need to build anonymous access for SSRS reports but this is not supported in 2008R2 because IIS is no longer used by SSRS. So in short, we need to have anonymous access to these reports but we are not able to find help. Web forums do give some tips but nobody is damn sure if that helps. Kindly help me. Thanks Chandan

Hi Chandan, Thanks for your posting. In SQL Server 2008 R2, the Anonymous access to report server cannot be enabled unless we use a custom authentication. Now that you use the Basic Authentication, you can refer to the Microsofts suggestion in the following link: https://connect.microsoft.com/SQLServer/feedback/details/565010/anonymous-access-with-ssrs-2008-r2-not-working If you are interested in the custom authentication, please see: Implementing a Security ExtensionSQL2008R2.Reporting_Services.SamplesSecurity Extension Sample For the detailed information to enable Anonymous access in SQL Server 2008 R2 Reporting Services with custom authentication, please see the blogs below: SSRS 2008 R2 Anonymous AccessAnonymous access in SQL RS 2008Setting up Anonymous Access for Reporting Services in SQL Server 2008 R2 Regards, Mike Yin

Hi Chandan, Thanks for your posting. In SQL Server 2008 R2, the Anonymous access to report server cannot be enabled unless we use a custom authentication. Now that you use the Basic Authentication, you can refer to the Microsofts suggestion in the following link: https://connect.microsoft.com/SQLServer/feedback/details/565010/anonymous-access-with-ssrs-2008-r2-not-working If you are interested in the custom authentication, please see: Implementing a Security ExtensionSQL2008R2.Reporting_Services.SamplesSecurity Extension Sample For the detailed information to enable Anonymous access in SQL Server 2008 R2 Reporting Services with custom authentication, please see the blogs below: SSRS 2008 R2 Anonymous AccessAnonymous access in SQL RS 2008Setting up Anonymous Access for Reporting Services in SQL Server 2008 R2 Regards, Mike Yin

Hi Chandan, Please refer User Account Control (UAC) and SSRSThanks, Sandip Shinde Please remember to mark the replies as answers if they help you and unmark them if they provide no help.

Hi Chandan, Thanks for your posting. In SQL Server 2008 R2, the Anonymous access to report server cannot be enabled unless we use a custom authentication. Now that you use the Basic Authentication, you can refer to the Microsofts suggestion in the following link: https://connect.microsoft.com/SQLServer/feedback/details/565010/anonymous-access-with-ssrs-2008-r2-not-working If you are interested in the custom authentication, please see: Implementing a Security ExtensionSQL2008R2.Reporting_Services.SamplesSecurity Extension Sample For the detailed information to enable Anonymous access in SQL Server 2008 R2 Reporting Services with custom authentication, please see the blogs below: SSRS 2008 R2 Anonymous AccessAnonymous access in SQL RS 2008Setting up Anonymous Access for Reporting Services in SQL Server 2008 R2 Regards, Mike Yin I will accept this as an answer and I believe it is out of a DBA's scope(in my case:-)) to deploy dll files. I will forward this solution to the dev team and hope they come out with flying colors. Thanks for help. Chandan

Hi Chandan, Please refer User Account Control (UAC) and SSRS Thanks, Sandip Shinde Please remember to mark the replies as answers if they help you and unmark them if they provide no help. Thanks for the answer but this is not the issue here. Chandan