Microsoft KB Archive/840713

= You may not be able to start the ReportServer service after you set the NT Authority\Local Service user account as the service account =

Article ID: 840713

Article Last Modified on 5/26/2004

-

APPLIES TO


 * Microsoft SQL Server 2000 Reporting Services

-



SYMPTOMS
After you set the NT Authority\Local Service built-in user account as the service account for the ReportServer service for an instance of Microsoft SQL Server 2000 Reporting Services, you may not be able to start the ReportServer service. Additionally, when you try to start the ReportServer service, you may receive the following error message:

Could not start the ReportServer service on Local Computer.

Error 5: Access is denied.



CAUSE
This problem occurs because the NT Authority\Local Service built-in user account does not have sufficient permissions to access the Reporting Services installation folders.



RESOLUTION
To run Reporting Services by using the NT Authority\Local Service service account, you must provide sufficient permissions for the NT Authority\Local Service service account to the Reporting Services folders.

If you use the Report Server Windows service, follow these steps before you run Reporting Services by using the NT Authority\Local Service service account:
 * 1) Add the NT Authority\Local Service built-in user account to the Debugger Users Windows user group.
 * 2) Add the following permissions to the Reporting Services folders and files to the NT Authority\Local Service user account:
 * 3) * For the LogFiles folder, add Full control permissions. The default folder location is :\Program Files\Microsoft SQL Server\MSSQL\Reporting Services. Additionally, the child folders inherit the permissions.
 * 4) * For the ReportServer folder, add Read permissions. The default folder location is :\Program Files\Microsoft SQL Server\MSSQL\Reporting Services. Additionally, the child folders inherit the permissions.
 * 5) * For the RSReportServer.config file, add Read permissions, Read and Execute permissions, and Write permissions. The default file location is :\Program Files\Microsoft SQL Server\MSSQL\Reporting Services\ReportServer. The child folders do not inherit the permissions.
 * 6) Set the NT Authority\Local Service built-in user account as the service account of the ReportServer service.
 * 7) Restart the ReportServer service.

If you use the Report Server Web service, follow these steps before you run Reporting Services by using the NT Authority\Local Service service account:
 * 1) Add the NT Authority\Local Service user account to the Debugger Users Windows user group.
 * 2) Add the following permissions to the Reporting Services folders and files to the NT Authority\Local Service user account:
 * 3) * For the LogFiles folder, add Full control permissions. The default folder location is :\Program Files\Microsoft SQL Server\MSSQL\Reporting Services. Additionally, the child folders inherit the permissions.
 * 4) * For the ReportServer folder, add Read permissions. The default folder location is :\Program Files\Microsoft SQL Server\MSSQL\Reporting Services. Additionally, the child folders inherit the permissions.
 * 5) * For the RSReportServer.config file, add Read permissions, Read and Execute permissions, and Write permissions. The default file location is :\Program Files\Microsoft SQL Server\MSSQL\Reporting Services\ReportServer. The child folders do not inherit the permissions.
 * 6) * For the Global.asax file, add Read permissions. The default file location is :\Program Files\Microsoft SQL Server\MSSQL\Reporting Services\ReportServer. Additionally, the child folders do not inherit the permissions.
 * 7) At a command prompt, run the iisreset command to restart Microsoft Internet Information Services (IIS).
 * 8) Add the following permissions to the folders and files to the NT Authority\Local Service user account:
 * 9) * For the ReportManager folder, add Read permissions. The default folder location is :\Program Files\Microsoft SQL Server\MSSQL\Reporting Services. Additionally, the child folders inherit the permissions.
 * 10) * For the Temp folder, add Full Control permissions. The default folder location is C:\Documents and Settings\ \Local Settings. Additionally, the child folders inherit the permissions.
 * 11) * For the Temp folder, add Full Control permissions. The default folder location is C:\WINDOWS. Additionally, the child folders inherit the permissions.
 * 12) Restart IIS.

Keywords: kberrmsg kbuser kbservice kbsecurity kbreport kbprb KB840713

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.