Reporting stopped working

Question

Have SCCM, SQL 2019 on Server 2022. Just installed latest updates (SQL 2019 CU21) and rebooted the system. According the SCCM component status, there ist not any problem (all green. including reporting point).

Reporting worked fine after installation, but was not used for a longer time. But now, when I'm trying to open any report, reporting services crash with the following errror:

System.Web.Services.Protocols.SoapException: An error has occurred during report processing. ---> Microsoft.ReportingServices.ReportProcessing.ProcessingAbortedException: An error has occurred during report processing. ---> Microsoft.ReportingServices.ReportProcessing.ReportProcessingException: Cannot impersonate user for data source 'AutoGen__5C6358F2_4BB6_4a1b_A16E_8D96795D8602_'. ---> Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException: Fehler bei der Anmeldung. Stellen Sie sicher, dass der Benutzername und das Kennwort korrekt sind. ---> System.ComponentModel.Win32Exception: Logon failure: the user has not been granted the requested logon type at this computer

In previous SCCM installations, we have used the SQL Service account as reporting service user. But in newer installation guides for the reporting point (like https://www.prajwaldesai.com/install-sccm-reporting-services-point-ssrs/), there is no configuration of this user mentioned.

Have examined the current configuration, it is configured with the "virtual service account", see picture below:

Have then altered this configuration to the SQL service account, which has for sure the right to logon as a service. But we are getting the same error when trying to open a report.

Can open the home page of reporting services:

But after browsing through the folder structure and trying to open a report, I'm getting the same error than from the SCCM console.

Any advice or hint how to solve this problem? Thank you in advance for any help!

Franz

Answer 1

Hi @Franz Schenk ,

Thanks @Gath very much for your help. We're glad that the issue is gone now. It's appreciated that you could click "Accept Answer" to the helpful reply, this will help other users to search for useful information more quickly. Here's a short summary for the problem.

Problem/Symptom:

When trying to open any report, reporting services crash with the Logon failure: the user has not been granted the requested logon type at this computer.

Solution/Workaround:

Some security people have applied the Microsoft Member Server Security Baseline GPO. In this GPO, only the group "Administrators" has the right to log on locally. Disabling the link to this GPO makes SCCM reporting working.

Thanks again for your time. Have a nice day!

Best regards,

Simon

---

If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

The error is talking about the configmgr reporting account and not the ssrs execution account.

Answer 3

Thank you for your hints, which pointed me to find the problem cause, was now able to solve the problem. Some security people have applied the Microsoft Member Server Security Baseline GPO. In this GPO, only the group "Administrators" has the right to log on locally. Disabling the link to this GPO makes SCCM reporting working.

Answer 4

Hi,

Thank you for posting in Microsoft Q&A forum.

How do you configure the account used in Database page? The reporting services point account you specify must have Log on locally permissions on the computer hosting the SQL Server Reporting Services database.

For more information, please refer to the official document:

Configure reporting in Configuration Manager

Reporting services point account

Thanks for your time. Have a nice day!

Best regards,

Simon

---

If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 5

Hi Simon

Your Printscreen shows exactely the configuration we also have in our installation. I think this is the default configuration.

But "NT Service\SQLServerReportingServices" seems to be a virtual account that we can't find anywhere on the system. And so, we are unable to give any additional permissions to this account. And your two Microsoft Links do not provide any information about this account.

Can you please tell us how to give "NT Service\SQLServerReportingServices" the right to log on locally?

Best regards, Franz