• Article

How to: Configure a Report Server for Local Administration on Windows Vista and Windows Server 2008

Deploying Reporting Services on Windows Vista and Windows Server 2008 requires additional configuration steps if you want to administer a report server instance locally. Both Windows Vista and Windows Server 2008 limit the overuse of elevated permissions by removing administrator permissions when accessing applications. Because the operating system removes permissions, members of the local Administrators group run most applications as if they using the Standard User account. 

While this practice improves the overall security of your system, it prevents you from using the predefined, built-in role assignments that Reporting Services creates for local administrators. However, with additional configuration on your part, you can effectively manage report server content and operations using standard user permissions if you do the following:

  • Add Reporting Services URLs to trusted sites. By default, Internet Explorer 7.0 on Windows Vista and Windows Server 2008 runs in Protected Mode, a feature that blocks browser requests from reaching high-level processes that run on the same computer. You can disable protected mode for the report server applications by adding them as Trusted Sites. 

  • Create role assignments that grant you, the report server administrator, permission to manage content and operations without having to use the Run as administrator feature on Internet Explorer. By creating role assignments for your Windows user account, you gain access to a report server with Content Manager and System Administrator permissions through explicit role assignments that replace the predefined, built-in role assignments that Reporting Services creates for local administrators.

This topic explains how to configure the report server for local administration after setup is finished and the report server components are configured. If you have not yet installed or configured the report server, see How to: Install SQL Server 2008 (Setup) and Reporting Services Configuration How-to Topics. For more information about User Account Control (UAC) features and how to connect to the Database Engine with administrator permissions, see How to: Connect to SQL Server from Windows Vista.

Note

If you are deploying Reporting Services on Windows Vista or Windows Server 2008, be sure to open port 80 in Windows Firewall to allow access to the report server computer. For instructions, see How to: Configure a Firewall for Report Server Access.

To configure local report server administration on Windows Vista and Windows Server 2008

  1. Open a browser window with Run as administrator permissions. From the Start menu, click All Programs, right-click Internet Explorer, and select Run as administrator.

  2. Click Allow to continue.

  3. In the URL address, enter the Report Manager URL. For instructions, see How to: Start Report Manager.

  4. Click Tools.

  5. Click Internet Options.

  6. Click Security.

  7. Click Trusted Sites.

  8. Click Sites.

  9. Add http://<your-server-name>.

  10. Clear the check box Require server certification (https:) for all sites in this zone if you are not using HTTPS for the default site.

  11. Click Add.

  12. Click OK.

  13. In Report Manager, on the Home page, click Properties.

  14. Click New Role Assignment.

  15. Type your Windows user account in this format: <domain>\<user>.

  16. Select Content Manager.

  17. Click OK.

  18. Click Site Settings in the upper corner of the Home page.

  19. Click Configure Site-wide security.

  20. Click New Role Assignment.

  21. Type your Windows user account in this format: <domain>\<user>.

  22. Select System Administrator.

  23. Click OK.

  24. Close Report Manager.

  25. Re-open Report Manager in Internet Explorer, without using Run as administrator.

Using Business Intelligence Development Studio on Windows Vista and Windows Server 2008

If you installed Business Intelligence Development Studio on Windows Vista or Windows Server 2008, you will encounter compatibility issues with the Visual Studio environment when you use the design tools. If you want to open an existing project or solution, or publish items from Report Designer or Model Designer to a report server, you must open Business Intelligence Development Studio with elevated permissions:

  1. From the Start menu, click All Programs, click SQL Server 2008, right-click Business Intelligence Development Studio, and then click Run as administrator.

  2. Click Continue.

  3. Click Run Program.

You should now be able to deploy reports and other items to a report server. If you do not have sufficient permissions, you will encounter issues such as the following:

  • Access Denied errors when you try to open an existing project.

  • Login failure errors when you configure a data source connection to a shared data source.

  • When using the Report Server Wizard to create a report, you will get a login failure error when the Wizard attempts to connect to the external data source that provides data to the report.

SQL Server Management Studio users must use Run as administrator permissions to create logins for users who administer databases on the server. For more information about elevated permission requirements for Management Studio, see How to: Connect to SQL Server from Windows Vista.