Hi all, Hopefully any on you can help me with the following problems I have. I have installed MBAM in a test environment containing the following systems: - 1 domain controller with DNS (Windows Server 2008 R2) - contains the MBAM policy templates - 1 SQL server 2008 R2 Enterprise system (Windows Server 2008 R2) -> contains all MBAM databases - 1 IIS 7 system (Windows Server 2008 R2) - contains the 'Administration and Monitoring Server' console After installing and configuring my MBAM environment I installed 'MBAM Language Release' conform http://onlinehelp.microsoft.com/en-us/mdop/hh921956.aspx I first started updating the 'Compliance and Audit Reports' database, after this installation completed successfully I started the update for 'Administration and Monitoring Server'. This update also completed successfully. Unfortunately during the testing of the functionality I was confronted with several problems. After connecting the 'Administration and Monitoring Server' console I entered the Reports section and got this error message on all reports: "The permissions granted to user '<domain>\<userid>' are insufficient for performing this operation. (rsAccessDenied)" Then in the Hardware section I was presented with error: Data store request not completed As mentioned earlier, before the update everything worked fine. I hope any of you can help me with solving these issues.Regards, Marc

Hi, Maybe the domain user accounts privilege are insufficient in the SQL, please check the SQL Server settings so that the domain users have enough privilege for performing the operation. Here is one SQL Server 2008 R2 guide about permission can be referred to. Lesson 1: Setting Up Permissions for this Tutorial http://msdn.microsoft.com/en-us/library/ms365306(v=sql.105).aspx Hope that helps.Ivan-Liu TechNet Community Support

Hi, Maybe the domain user accounts privilege are insufficient in the SQL, please check the SQL Server settings so that the domain users have enough privilege for performing the operation. Here is one SQL Server 2008 R2 guide about permission can be referred to. Lesson 1: Setting Up Permissions for this Tutorial http://msdn.microsoft.com/en-us/library/ms365306(v=sql.105).aspx Hope that helps.Ivan-Liu TechNet Community Support

After setting up a new MBAM environment, buth not installing the language update, I compared the SQL security settings and found the cause of my problems. I discovered the local MBAM security groups were removed during update... Thank you Microsoft :-( To solve the problems I mentioned in my initial message I performed the following steps: Create local security groups on the SQL server (contains all the MBAM databases) MBAM Compliance Auditing DB Access (Members: NT AUTHORITY\NETWORKSERVICE (S-1-5-20) & <DOMAIN>\<ComputerAccount of the Administration and Monitoring server) MBAM Recovery and Hardware DB Access (Members: NT AUTHORITY\NETWORKSERVICE (S-1-5-20) & <DOMAIN>\<ComputerAccount of the Administration and Monitoring server) MBAM Report Users (Members: <DOMAIN>\MBAM Report Users)Started Microsoft SQL Server Managment Studio and connected to the server which contains the MBAM databasesUnder Security -> Logins I created the following logins: - <SQL SERVER NAME>\MBAM Compliance Auditing DB Access General Default database: MBAM Compliance Status, Default language: English Left the rest default - <SQL SERVER NAME>\MBAM Recovery and Hardware DB Access General Default database: MBAM Compliance Status, Default language: English Left the rest defaultNavigated to Users in Databases -> MBAM Compliance Status -> Security and added the following users (New User...): - MBAM Compliance Auditing DB Databas e Login name = <SQL SERVER NAME>\MBAM Compliance Auditing DB Access Database role membership = ComplianceWriteRole Left the rest default - MBAM Report Users Login name = <DOMAIN>\<SERVICE ACCOUNT FOR SQL ACCESS> Default schema = dbo Database role membership = ComplianceWriteRole Left the rest defaultNavigated to Users in Databases -> MBAM Recovery and Hardware Security and added the following user (New User...): - MBAM Recovery and Hardware DB Access Login name = <SQL SERVER NAME>\MBAM Recovery and Hardware DB Access Database role membership = RecoveryAndHardwareReadRole & RecoveryAndHardwareWriteRole Left the rest defaultStarted the Reporting Service Configuration Manager and connected to the SQL server containing the reporting databaseVia Report Manager URL I connected URL http://<SQL SERVER NAME>:80/ReportsOn folder Microsoft BitLocker Administration and ... I clicked on item Security Added <SQL SERVER NAME>\MBAM Report Users via New Role Assignement and assigned role MBAM Reports (Users May view MBAM folders, reports, and subscribe to reports.)Restarted the SQL server After the SQL server was up and running again I connected to the BitLocker Administration and Monitoring site. All reports (Enterprise Compliance Report, Computer Compliance Report, Hardware Audit Report and Recovery Report) were functional, no more RsAccessDenied messages. Also the Hardware Compatibility page was displayed without any error Regards, Marc