Blog Home  Home | The Bookshelf | Articles | Presentations | About Me Feed your aggregator (RSS 2.0)  
James Kovacs' Weblog - Reporting Services on Windows Vista Redux
 
# Saturday, January 20, 2007

You know you're living life on the bleeding edge when you search the web for an answer to your problem and your own blog appears as one of the most promising results!?! (Currently third from the top on this search.) Reporting Services on Windows Vista just doesn't work out-of-the-box, even with SQL Server 2005 SP2 installed. (N.B. SP2 is beta/CTP right now.) So I decided to do a bit of digging. As is noted here, local administrators are no longer SQL Server admins by default. (Local administrators used to get this because they were a member of Administrators group and Administrators was added to the SQL Server sysadmin role by default. Because of UAC - which is an excellent security technology no matter what its detractors might say - local administrators do not have the Administrators SID in their security token. (In order to have the administrators token, you must elevate using "right-click, Run as administrator" and consent via the UAC prompt.) So how do you grant your user (administrator or not - and I still encourage not) access to the report server?

  1. Run IE as an administrator. (Right-click IE, Run as administrator.)
  2. Browse to your Report Manager directory, usually http://localhost/reports.
  3. Click on Site Settings (upper right).
  4. Under the Security heading, click "Configure site-wide security".
  5. "New Role Assignment" and add your user to the System Administrators role.
  6. Click "Home", "Properties", and under security "New Role Assignment", add your user to "Content Manager".

Now the funny part... Try running a non-elevated IE and browse to http://localhost/Reports. This is the result:

Report Manager - IE Protected Mode

Now let's try it with FireFox:

Report Manager - Firefox

That looks a lot better. Turns out that IE Protected Mode is getting in the way and preventing Report Manager from rendering properly. (IE7 runs in Protected Mode by default, which is a good thing.) We can disable protected mode just for this site by adding it to our trusted sites list in IE. (Tools... Internet Options... Security tab... Select "Trusted sites"... Click "Sites"... and add http://localhost to the list.) Also make sure that "Enable Protected Mode" is disabled for Trusted Sites. (It should be enabled for Internet/Local intranet/Restricted sites.)

Report Manager - IE Trusted Sites

Note on the bottom bar "Trusted sites | Protected Mode: Off". That looks a lot better under IE7!  I haven't investigated why Report Manager doesn't like Protected Mode, but it should get many of you up and running with Reporting Services on Vista.

Saturday, January 20, 2007 8:38:41 PM (Mountain Standard Time, UTC-07:00)  #    Comments [18]   Reporting Services  | 
Friday, February 02, 2007 9:31:12 AM (Mountain Standard Time, UTC-07:00)
You talk about viewing reporting services through IE7. What about creating reports, since Reporting Services will not install on Vista by default? How do I get it to install?
Gerald
Friday, February 02, 2007 10:40:51 AM (Mountain Standard Time, UTC-07:00)
Take a look at my previous post on how to install Reporting Services on Windows Vista.
Tuesday, February 06, 2007 4:27:29 PM (Mountain Standard Time, UTC-07:00)
James, I have just spent 2 days reinstalling RS, websites etc etc. I finally got to your blog and using the logonas I solved the problem in 5 minutes. Thanks for some great research
John Cuthbertson
Wednesday, August 22, 2007 6:30:02 AM (Mountain Daylight Time, UTC-06:00)
Even after running IE as an administrator on vista ultimate i still cant see the "site settings" after typing http://localhost/reports.
localhost is also added in my trusted sites
on other side site settings and other reporting options are visible on my windows xp machine.
Faizan
Monday, October 01, 2007 10:47:20 PM (Mountain Daylight Time, UTC-06:00)
@Faizan - Is Protected Mode disabled for Trusted Sites?
Tuesday, February 12, 2008 9:48:16 AM (Mountain Standard Time, UTC-07:00)
Thanks, this post was very helpfull!
Caroline
Sunday, March 09, 2008 5:39:43 PM (Mountain Standard Time, UTC-07:00)
I installed SQL Server 2005 SP2 on 64 bit on WIN2008 64 bit.

I followed your instructions but i still cant see the "site settings" after typing http://localhost/reports.
If I connected to ReportingServices via SSMS I can see all folders and reports.
Thursday, March 13, 2008 2:12:50 PM (Mountain Standard Time, UTC-07:00)
In SSMS, verify that your account has the correct permissions. I've had problems in the past on Vista with incorrect permissions preventing me from seeing the Site Settings menu. I haven't tried installing SSRS on Win2K8 yet. So your mileage may vary.
Thursday, June 12, 2008 8:16:03 AM (Mountain Daylight Time, UTC-06:00)
I am using Vista Home Premium.
I installed SSRS 2008 and trying to create reports database on SQL server 2005 but its saying that

The feature :"Using other editions of SQL Server for report data sources and/or the report server database" is not supported in this edition of Reporting Services.
Vishal
Friday, June 13, 2008 11:02:49 AM (Mountain Daylight Time, UTC-06:00)
@Vishal - I haven't tried out SQL Server 2008 or SSRS 2008. I suspect that SSRS 2008 needs to store its databases in the SQL Server 2008 database engine. I would recommend asking your question in the Reporting Services MSDN Forum:

http://forums.microsoft.com/MSDN/ShowForum.aspx?ForumID=82&SiteID=1
Thursday, July 17, 2008 11:12:16 PM (Mountain Daylight Time, UTC-06:00)
Hi James.

Elevating IE works for me but adding localhost/reports to trusted sites doesn't, even though the browser specifically reports that protected mode is off (as per your illustration). Turning off UAC works, but that's highly undesirable for obvious reasons.

A question on UAC: do I correctly understand that UAC means I run the user account I specified at logon (a domain account) but my token lacks the local admin privilege? I'm uncertain as to what I should specify when making a role assignment: username, domain\username or machinename\username
Any thoughts?
Tuesday, August 05, 2008 10:33:09 AM (Mountain Daylight Time, UTC-06:00)
@Peter - Your understanding of UAC is correct. UAC strips your user token of the local Administrators group SID as well as a few admin-related privileges. When making role assignments, you should specify the account name, which is likely a domain account, in domain\username form. Did you add your user to the correct SQL Server management groups? By default with SQL Server 2005 SP2, local admins are not by default SQL Server admins.
Thursday, April 09, 2009 10:57:03 PM (Mountain Daylight Time, UTC-06:00)
Huh?! "Enable Protected Mode" is disabled for Trusted Sites. (It should be enabled for Internet/Local intranet/Restricted sites.)"

Protected mode should be enabled for INTERnet, but not "intranet" - right? I mean, am I protecting ME from mySELF?
"INTRAnet" means 'inside,' means "Even a Caveman can browse safely without protected mode."
Or... am I misunderstanding. My understandning (and in the environments in which I've worked) is that "intranet" typically is equivalent to "all trusted servers on my local network and/or subnet;" i.e., no need for protected mode.

Again, I may be misunderstanding, or you may have been on drugs ;-) when you made that statement about "intranet" also needing to have 'protected mode' enabled.

Please let me know if I misundestood/stand. Thx.
Barry
Thursday, April 09, 2009 11:06:30 PM (Mountain Daylight Time, UTC-06:00)
@Barry - I believe what Microsoft is trying to protect against is the spread of malware once it gets into your intranet. You can always disable protected mode for intranet sites by going into IE... Internet Security and changing the option for Local intranet. (I would guess you can do this through group policy too, though I haven't checked.) Microsoft is opting for secure by default and only disabling protected mode for sites that you explicitly trust.
Thursday, April 16, 2009 10:02:24 PM (Mountain Daylight Time, UTC-06:00)
Hi James, I installed SSRS 2008 with Vist hme premium. No luck. Even with elevated security IE does not display the seting and properties in the report manager. Could you post screenshots of the ssrs conf (which accounts used for which services and SQL connection to the db? Also, should I define a new Login in SQL db?
Eyal Shacham
Friday, May 01, 2009 2:58:03 AM (Mountain Daylight Time, UTC-06:00)
Hi James,

I've had the same problems with the blank screen on SSRS 2008 on Vista Home Premium with multiple users. The elevated security in IE didn't do the trick.

In the end I had to disable UAC to gain access the manager. The BUILTIN\Administrators only had the Content Manager role, so I added all the others. I also added my own user (DOMAIN\Username) with all roles. I then enabled UAC once more. This corrected the problem.

I wonder if Windows 7 will be affected like this. I love Vista, but sometimes I feel I have to work as hard as a Linux guy to get things to work properly! *smirk*

Carl
Carl Scarlett
Friday, June 26, 2009 2:56:27 AM (Mountain Daylight Time, UTC-06:00)
Hi, James,
I am still seeing a blank page when I go to http://localhost/reports I installed SQL Reporting service on Windows 2008 server. Can you help please?
Minglin Zhou
Saturday, July 11, 2009 10:03:33 PM (Mountain Daylight Time, UTC-06:00)
@Minglin - I honestly haven't touched Reporting Services in quite awhile. I haven't tried it at all on Windows Server 2008. I would recommend asking on the SQL Server Reporting Services Forum:

http://social.msdn.microsoft.com/Forums/en-US/sqlreportingservices/threads
OpenID
Please login with either your OpenID above, or your details below.
Name
E-mail
(will show your gravatar icon)
Home page

Comment (Some html is allowed: a@href@title, b, blockquote@cite, em, i, strike, strong, sub, super, u) where the @ means "attribute." For example, you can use <a href="" title=""> or <blockquote cite="Scott">.  

Enter the code shown (prevents robots):

Live Comment Preview
Copyright © 2010 James Kovacs. All rights reserved.
DasBlog 'Portal' theme by Johnny Hughes.