FCS 6 Servers - Management Server Settings

Answered FCS 6 Servers - Management Server Settings

  • Thursday, January 27, 2011 1:19 AM
     
      Has Code

    Hello,

    I am working on http://technet.microsoft.com/en-us/library/bb404246.aspx it asks me to use an account which is local administartor on all FCS servers, what i did but still I am getting an issue:

    [1/26/2011 5:12:26 PM] Task(Import Reports on the Reporting Server)
    Process C:\Program Files\Microsoft Forefront\Client Security\Server\rptutil.exe completed.
    [1/26/2011 5:12:26 PM] Task(Reporting Server Adjustments)
    Starting reporting server adjustments.
    [1/26/2011 5:12:26 PM] Task(Reporting Server Adjustments)
    Setting data source of collection database.
    Server: SOPFCSDB1
    User: ad\svcFFCS
    [1/26/2011 5:12:26 PM] Task(Reporting Server Adjustments)
    Setting data source of the reporting database.
    Server: SOPFCSRS1
    User: ad\svcFFCS
    [1/26/2011 5:12:27 PM] Task(Reporting Server Adjustments)
    Marking FCS sub-reports as hidden.
    [1/26/2011 5:12:27 PM] Task(Reporting Server Adjustments)
    Hiding report elements.
    [1/26/2011 5:13:06 PM] Task(Reporting Server Adjustments)
    System.Web.Services.Protocols.SoapException: The permissions granted to user 'AD\Dominiqued' are insufficient for performing this operation. ---> The permissions granted to user 'AD\Dominiqued' are insufficient for performing this operation.
     at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
     at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
     at Microsoft.Forefront.ClientSecurity.Configure.ReportManagerWS.ReportingService.ExecuteBatch()
     at Microsoft.Forefront.ClientSecurity.Configure.ReportServerAdjustmentTask.ReportServerTask()
     at Microsoft.Forefront.ClientSecurity.Configure.ReportServerAdjustmentTask.ThreadedWebServiceTask(Object x)Number of tasks completed: [1/26/2011 5:13:06 PM]

    so it seems Local Administrator is not sufficient? which other rights permissions are needed?

    the reporting server and the reporting server database are in the trusted site with automatic logon on intranet.

    The process is loaded with svcFFCS but it seems it is using my own account afterwards... even i launched the Run As Administrator on the ServerSetup.exe??? why is it using another account and what should be the permissions?

    Thanks,
    Dom


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

All Replies

  • Thursday, January 27, 2011 3:45 AM
     
      Has Code

    Hello,

    I tried already http://social.technet.microsoft.com/Forums/en-US/Forefrontclientgeneral/thread/fc41e1c7-b856-4683-bb5a-6094004921ba/ on the Management Server, I will try also on the Reporting Server...

    but no luck

    If I use both URL http://votfcsrs1/reports/Pages/Folder.aspx or http://votfcsrs1/reportserver with any accounts svcFFCS or Dominiqued (both accounts are Local Administrators or the six servers) from the VRMS1 (Management Server) it works fine so why it does not work during the batch?

    the accounts have sysadmin on all databases: ReportServer, ReportServerTempDB, SystemCenterReporting User=dbo and schema=dbo.

    Dominiqued is dbo on ReportServer database, db_datareader, db_owner checked and RSEscRole unchecked.. as dbo is not allowed, it is the owner of the db apparently...

    TITLE: Microsoft SQL Server Management Studio ------------------------------ Add member failed for DatabaseRole 'RSExecRole'. (Microsoft.SqlServer.Smo) For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&ProdVer=9.00.4035.00&EvtSrc=Microsoft.SqlServer.Management.Smo.ExceptionTemplates.FailedOperationExceptionText&EvtID=Add+member+DatabaseRole&LinkId=20476 ------------------------------ ADDITIONAL INFORMATION: An exception occurred while executing a Transact-SQL statement or batch. (Microsoft.SqlServer.ConnectionInfo) ------------------------------ Cannot use the special principal 'dbo'. (Microsoft SQL Server, Error: 15405) For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&ProdVer=09.00.4053&EvtSrc=MSSQLServer&EvtID=15405&LinkId=20476 

    svcFFCS account has db_datareader, db_owner and RSEscRole checked.

    Thanks,

    DOm


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager
  • Thursday, January 27, 2011 10:12 PM
     
     
    ?bump?
    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager
  • Wednesday, February 02, 2011 11:58 PM
     
     Answered
    total reinstallation fixed it
    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager
    • Marked As Answer by Felyjos Wednesday, February 02, 2011 11:58 PM
    •