all groups > sql server reporting services > october 2006 >
You're in the

sql server reporting services

group:

AD Synch in Sql Reporting Services


AD Synch in Sql Reporting Services Rob Bowers
10/23/2006 11:45:03 AM
sql server reporting services: Is there a way to do an AD Synch in Sql Reporting Services?

In short Groups have been created in AD. Roles were also setup in SQL
Reporting for the folder that we wanted permissions applied to.

When I add a person to a global group in AD, the permissions will not work
in SQL Reporting. The user does not see the reports. If I add the person
individually – ex. User 123 – and give them the same permissions as the
Global Group, the user sees the folder.

We want to set up different departments with unique folders for their
reports. I want to be able to add Global Group roles to each folder. I
restarted the IIS services – still did not work. I also restarted the SQL
reporting services – still did not work.

--
Re: AD Synch in Sql Reporting Services Kaisa M. Lindahl Lervik
10/24/2006 12:00:00 AM
How often does you AD forest synchronize between Domain Controllers?
Check if the new groups are available on all domain controllers, and if all
the members are in the groups. SOmetimes the synchronization / replication
between dcs can be a bit slow, and if your Reporting Services server checks
access rights against a dc that haven't received the changes, it won't allow
access.

Kaisa M. Lindahl Lervik

[quoted text, click to view]

Re: AD Synch in Sql Reporting Services Rob
10/24/2006 11:00:01 AM
How does the synch get "triggered"
If I manually wanted to do an AD synch to SQL Reporting Services...how would
I do this?

[quoted text, click to view]
Re: AD Synch in Sql Reporting Services Kaisa M. Lindahl Lervik
10/24/2006 10:21:24 PM
This article describes how to "Force replication over a connection"
http://technet2.microsoft.com/WindowsServer/en/library/2d89f34a-b6db-4b8d-ab9f-c081c53658d61033.mspx?mfr=true

You probably have to talk to the infrastructure team at your company, they
might be a bit reluctant to allow a developer mess around in their AD tools.
;)

Replication usually occurs at scheduled intervals between the Domain
Controllers. Reporting Services just uses what ever infomation that is
available to it. So you don't synchronize AD and Reporting Services, you
synchronize the different domain controllers in your AD domain, and then
Reporting Services will sort itself out. If some of the domain controllers
can't replicate or synchronize, your infrastructure team probably has a
bigger problem on their hands than just some users not seeing their
reports...

Kaisa M. Lindahl Lervik

[quoted text, click to view]

AddThis Social Bookmark Button