Jump to content


Sign in to follow this  
Tobie

Setup access to ConfigMgr Reports

Recommended Posts

Setup access to ConfigMgr Reports

 

It can easily be confusion when it comes ConfigMgr Reports and rights (read) and we will sort things out in this thread and remove all doubts, hopefully. The biggest problem is that administrators do not detect theese problems by themselfs because they are usually members in the local Administrators group on the site server which result in that they have full access to almost everything.

 

Here is an instrcution on "How to grant read access to ConfigMgr Reports by adding the user to a Active Directory Security Group".

 

Create a Active Directory Security Group called ConfigMgrReportViewers.

post-2397-1234428764_thumb.jpg

 

Add a user to this group that need read access to ConfigMgr Reports.

post-2397-1234429467_thumb.jpg

 

On your Primary Site, open Computer Management, expand System Tools, Local Users and Groups, Groups. Double click on SMS Reporting Users to open it, press Add, enter our newly created AD group and hit Check Names, press OK.

post-2397-1234429166_thumb.jpg

 

Verify that your group was added and then press OK.

post-2397-1234429277_thumb.jpg

 

Open http://<YOUR_SERVER>/SMSReporting_<YOUR_SITE_CODE>/ to view ConfigMgr Reports and the result will be like this, no reports, just a menu. (http://dsgcm1/SMSReporting_DSG/). That's not what we want, let's continue...

post-2397-1234430198_thumb.jpg

 

Open your ConfigMgr Console and expand Site Databse and Security Rights, right click on Users and press Manage ConfigMgr Users.

post-2397-1234430514_thumb.jpg

 

Press Next on the Welcome screen.

 

Enter our Active Directory Security Group (ConfigMgrReportViewers) that we created erlier, press Next.

post-2397-1234430687_thumb.jpg

 

Select Add another right or modify existing one and press Next.

post-2397-1234430877_thumb.jpg

 

Select

Class: Report

Instance: (All Instances)

 

Check Read and press Next.

post-2397-1234431019_thumb.jpg

 

Verify that you selected right Object Class and press Next.

post-2397-1234431128_thumb.jpg

 

Review summary and press Next.

 

Press Close.

 

Now everything is in order to view our ConfigMgr Reports with that specific acount we added to Active Directory Security Group ConfigMgrReportViewers erlier. Open http://<YOUR_SERVER>/SMSReporting_<YOUR_SITE_CODE>/ to view ConfigMgr Reports and the result will be like this, MANY REPORTS :) (http://dsgcm1/SMSReporting_DSG/).

post-2397-1234431357_thumb.jpg

 

/Tobie

Share this post


Link to post
Share on other sites


Missing DCOM Rights

 

If you get errors like this then you are missing DCOM rights on the reporting server. Fallow the instruction below to verify if you have DCOM rights and resolve the issue if you are missing it.

post-2397-1234431802_thumb.jpg

 

On your Primary Site, press Start, Administative Tools, Component Services.

post-2397-1234435248_thumb.jpg

 

Expand Console Root, Component Services, Computers, My Computer and select DCOM Config.

post-2397-1234435383_thumb.jpg

 

In the right pane, right click on SMS_REPORTING_POINT and choose Properties.

 

Open the Security tab and press Edit on Launch and Activation Permissions. If the Edit button is greyed out, mark Customize end the press Edit.

post-2397-1234435548_thumb.jpg

 

Verify that YOUR_SERVER\SMS Reporting Users has pemissions as the picture below.

post-2397-1234435803_thumb.jpg

 

I'm missing this permission

 

Press Add to grant SMS Reportin Users DCOM rights.

post-2397-1234435990_thumb.jpg

 

Type YOUR_SERVER\SMS Reporting Users and press Check Names, press OK.

post-2397-1234436091_thumb.jpg

 

Check all Allow boxes and hit OK.

post-2397-1234436176_thumb.jpg

 

Press OK.

post-2397-1234436221_thumb.jpg

 

Refresh your browser and you should be able to see all reports.

post-2397-1234436278_thumb.jpg

 

/Tobie

Share this post


Link to post
Share on other sites

keep it up !

 

moved to reports and pinned :)

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
Sign in to follow this  

×
×
  • Create New...