Re: ReportViewer Control Permission

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi AG,

Sorry for the misunderstanding.

The new issue you mentioned is actually about how to make two IIS
server/web application accessing each other.

By default, a web application on IIS 6.0 runs in the default Application
Pool, which by default is running under the NETWORK SERVICE account. This
account is very limited, although it have network access, but you need to
grant it in either your local or remote sql/report server:

http://msdn2.microsoft.com/en-us/library/ms998320.aspx
<quote>
If you are accessing a database on another server in the same domain (or in
a trusted domain), the Network Service account's network credentials are
used to authenticate to the database. The Network Service account's
credentials are of the form DomainName\AspNetServer$, where DomainName is
the domain of the ASP.NET server and AspNetServer is your Web server name.

For example, if your ASP.NET application runs on a server named SVR1 in the
domain CONTOSO, the SQL Server sees a database access request from
CONTOSO\SVR1$.

To access a remote SQL Server using Network Service

To grant access to a remote database server in the same domain or a trusted
domain, follow the steps described earlier for a local database, except in
step 4, use the DomainName\AspNetServer$ account to create the database
login.
</quote>


Also:

http://msdn2.microsoft.com/en-us/library/ms998320.aspx
<quote>
In some scenarios, using a custom domain service account is a better
approach than using the Network Service account. You should use a custom
domain service account if:
You want to isolate multiple applications on a single server from one
another.
You need different access controls for each application on local and remote
resources. For example, other applications cannot access your application's
databases if access is restricted to your application's account.
You want to use Windows auditing to track the activity of each application
separately.
You want to prevent any accidental or deliberate changes to the access
controls or permissions associated with the general purpose Network Service
account from affecting your application.
</quote>

In this case, you will need to create a separate Application Pool in IIS
6.0 and configure it to use a custom domain service account; then configure
your web application to run in this Application Pool.

Pleaset let me know if you have anything unclear. Thanks.


Regards,
Walter Wang (wawang@xxxxxxxxxxxxxxxxxxxx, remove 'online.')
Microsoft Online Community Support

==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • Re: Running Analysis Server 2000 on seperate box
    ... On further investigation regarding the lock up problem. ... the dimension processing running and although the database rows are ... changing the service account sorted things. ... The server has both the database and Analysis Services ...
    (microsoft.public.sqlserver.olap)
  • Need help with Restoring Standby server after sa change
    ... 1- Restore the msdb database on backup server ... 2- After applying the service account, ... >failure on the Standby Server. ... >I have gone to the master database on the Standby server ...
    (microsoft.public.sqlserver.server)
  • Re: Running Analysis Server 2000 on seperate box
    ... changing the service account sorted things. ... with 2GB ram on Windows Server 2003. ... The server has both the database and Analysis Services ... >to use Local System which is fine for local databases, ...
    (microsoft.public.sqlserver.olap)
  • Re: SPN for SSL over common name
    ... you can't register those SPNs under the SQL Server's ... service account is the MSSQL SPN. ... That SPN should be registered under ... Lastly, since the SQL Server is not being used for delegation anywhere, ...
    (microsoft.public.inetserver.iis.security)
  • Re: In SSP Admin page Search Setting link fails with access denied
    ... First I modified the permissions of the SSP service account as you said. ... administratie and service accounts (Office SharePoint Server): ... How to change the passwords for service accounts in SharePoint Server ...
    (microsoft.public.sharepoint.portalserver)