Microsoft KB Archive/940232

= Error message when you use SQL Server Management Studio to connect to SQL Server 2005 Integration Services from a client computer: &quot;Connect to SSIS Service on machine '' failed Access is denied&quot; =

Article ID: 940232

Article Last Modified on 11/27/2007

-

APPLIES TO


 * Microsoft SQL Server 2005 Workgroup Edition
 * Microsoft SQL Server 2005 Standard Edition
 * Microsoft SQL Server 2005 Developer Edition
 * Microsoft SQL Server 2005 Enterprise Edition
 * Microsoft SQL Server 2005 Standard X64 Edition
 * Microsoft SQL Server 2005 Enterprise X64 Edition
 * Microsoft SQL Server 2005 Standard Edition for Itanium-based Systems
 * Microsoft SQL Server 2005 Enterprise Edition for Itanium-based Systems

-



SYMPTOMS
Consider the following scenario. A server is running Microsoft SQL Server 2005 Integration Services (SSIS). From a client computer, you use SQL Server Management Studio to connect to Integration Services on the server. To connect to Integration Services on the server, you use a user account that is not a member of the Administrators group on the server. In this scenario, you receive the following error message:

Cannot connect to

Additional information: Failed to retrieve data for this request (Microsoft.SqlServer.SmoEnum)

Connect to SSIS Service on machine &quot; &quot; failed: Access is denied.

Note In this error message,  is a placeholder for the name of the server or for the IP address of the server.

However, you can successfully connect to Integration Services on the server locally by using the same user account that you used to connect to Integration Services from the client computer.



WORKAROUND
To work around this problem, follow these steps:  On the client computer, enable Windows Management Instrumentation (WMI) for remote administration. To do this, follow these steps:  Click Start, click Run, type gpedit.msc, and then click OK. In the Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, and then expand Network. Expand Network Connections, expand Windows Firewall, and then click Domain Profile. Right-click Windows Firewall: Allow remote administration exception, and then click Properties. In the Windows Firewall: Allow remote administration exception Properties dialog box, click Enabled, and then click OK.</ol> </li> On the server and on the client computer, specify that DCOM is available for all Microsoft COM applications. To do this, follow these steps: <ol style="list-style-type: lower-alpha;"> Click Start, click Run, type dcomcnfg, and then click OK.</li> In the Component Services dialog box, expand Component Services, expand Computers, right-click My Computer, and then click Properties.</li> In the My Computer Properties dialog box, click the Default Properties tab.</li> On the Default Properties tab, click to select the Enable Distributed COM on this computer check box, and then click OK.</li></ol> </li> On the server, add the user account to the Distributed COM Users group. To do this, follow these steps: <ol style="list-style-type: lower-alpha;"> Click Start, click Run, type lusrmgr.msc, and then click OK.</li> In the Local Users and Groups dialog box, click Groups, and then double-click Distributed COM Users.</li> In the Distributed COM Users Properties dialog box, click Add.</li> In the Select Users dialog box, type the user name under Enter the object names to select, and then click OK two times.</li></ol> </li> On the server, grant the appropriate permissions for the MsDtsServer DCOM application. To do this, follow these steps: <ol style="list-style-type: lower-alpha;"> Click Start, click Run, type dcomcnfg, and then click OK.</li> In the Component Services dialog box, expand Component Services, expand Computers, and then expand My Computer.</li> Expand DCOM Config, right-click the MsDtsServer object, and then click Properties.</li> In the MsDtsServer Properties dialog box, click the Security tab.</li> Under Launch and Activation Permissions, click Customize, and then click Edit.</li> <li>In the Launch Permission dialog box, click Add.</li> <li>In the Select Users or Groups dialog box, type the user name under Enter the object names to select, and then click OK.</li> <li>In the Launch Permission dialog box, click the user name under Group or user names.</li> <li>Under Permissions for , click to select the Allow check box for the following permissions: <ul> <li>Local Launch</li> <li>Remote Launch</li> <li>Local Activation</li> <li>Remote Activation</li></ul>

Note  is a placeholder for the user name that you clicked in step h.</li> <li>Click OK.</li> <li>In the MsDtsServer Properties dialog box, click Customize under Access Permissions, and then click Edit.</li> <li>In the Access Permission dialog box, click Add.</li> <li>In the Select Users or Groups dialog box, type the user name under Enter the object names to select, and then click OK.</li> <li>In the Access Permission dialog box, click the user name under Group or user names.</li> <li>Under Permissions for , click to select the Allow check box for the following permissions: <ul> <li>Local Access</li> <li>Remote Access</li></ul> </li> <li>Click OK two times.</li></ol> </li> <li>Restart the SQL Server Integration Services service.</li></ol>

<div class="status_section">

STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.

Additional query words: SSIS Access Denied Yukon 2005 SQL connect DCOM security local admin

Keywords: kbtshoot kbprb kbexpertiseadvanced kbsql2005ssis KB940232

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.