RE: Server Usage Report won't work with Power User Privilege

Hi Leo,

It is a follow up to my previous response. Please run the following
commands instead to add sysadmin to the Monitoring instance of WMSDE.

sp_addsrvrolemember 'NT Authority\Network Service', 'sysadmin'

Thanks for your time!

I am happy to be assistance of you and look forward to your update!

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>X-Tomcat-ID: 275961517
>References: <BB0E2A6D-D9CE-42F2-A8F1-259B372FEE50@xxxxxxxxxxxxx>
<NHE29ox7FHA.832@xxxxxxxxxxxxxxxxxxxxx>
<9998E0C6-0D4D-4527-9825-B613692E068F@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain
>Content-Transfer-Encoding: 7bit
>From: v-yanniw@xxxxxxxxxxxxxxxxxxxx ("Jenny wu [MSFT]")
>Organization: Microsoft
>Date: Wed, 23 Nov 2005 13:11:14 GMT
>Subject: RE: Server Usage Report won't work with Power User Privilege
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>Message-ID: <Alcnk9C8FHA.4000@xxxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>Lines: 305
>Path: TK2MSFTNGXA02.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:224945
>NNTP-Posting-Host: TOMCATIMPORT1 10.201.218.122
>
>Hi Leo,
>
>Thanks for your update!
>
>For your information, the issue should be caused by insufficient
>permissions. Please check the following settings:
>
>I. Please check if the Network Service is added to sysadmin of the
>Monitoring instance of WMSDE on the server box.
>
>You can refer to the steps as follows:
>1. At a command prompt, type: OSQL -S <servername> -E.
>2. At the 1> command prompt, type: sp_addsrvrolemember 'Network Service',
>'sysadmin'.
>3. At the 2> command prompt, type: GO.
>
>Add the Network Service to the "Impersonate a client after authentication"
>policy as follows:
>
>1. Click Start, point to Programs, point to Administrative Tools and then
>click Default Domain Controller Policy.
>2. Expand Local Policies and double-click User Rights Assignment.
>3. Double-click the "Impersonate a client after authentication" policy.
>4. Select the checkbox "Define these policy settings" if it is not
already
>selected.
>5. Click Add User or Group and add Network Service.
>6. After adding Network Service, close the Default Domain Controller
>Security Settings console.
>7. Click Start and select Run.
>8. Type "gpupdate" and press Enter".
>
>Then please try to test and let me know the result.
>
>II. Could I know which computer (client computer or the server box) the
>power user logon and try to view usage report? I can not reproduce your
>issue. Can you describe your process more detail?
>
>I appreciate your time! I am glad to help and look forward to your reply!
>
>Have a nice day!
>
>Sincerely,
>
>Jenny Wu
>Microsoft CSS Online Newsgroup Support
>Get Secure! - www.microsoft.com/security
>======================================================
>This newsgroup only focuses on SBS technical issues. If you have issues
>regarding other Microsoft products, you'd better post in the corresponding
>newsgroups so that they can be resolved in an efficient and timely manner.
>You can locate the newsgroup here:
>http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
>When opening a new thread via the web interface, we recommend you check
the
>"Notify me of replies" box to receive e-mail notifications when there are
>any updates in your thread. When responding to posts via your newsreader,
>please "Reply to Group" so that others may learn and benefit from your
>issue.
>
>Microsoft engineers can only focus on one issue per thread. Although we
>provide other information for your reference, we recommend you post
>different incidents in different threads to keep the thread clean. In
doing
>so, it will ensure your issues are resolved in a timely manner.
>
>For urgent issues, you may want to contact Microsoft CSS directly. Please
>check http://support.microsoft.com for regional support phone numbers.
>
>Any input or comments in this thread are highly appreciated.
>======================================================
>This posting is provided "AS IS" with no warranties, and confers no rights.
>
>--------------------
>>Thread-Topic: Server Usage Report won't work with Power User Privilege
>>thread-index: AcXvQZXk1wAkPTmWQq6S8wBYfRtW+A==
>>X-WBNR-Posting-Host: 68.120.228.164
>>From: =?Utf-8?B?TGVv?= <Leo@xxxxxxxxxxxxxxxxxxxxxxxxx>
>>References: <BB0E2A6D-D9CE-42F2-A8F1-259B372FEE50@xxxxxxxxxxxxx>
><NHE29ox7FHA.832@xxxxxxxxxxxxxxxxxxxxx>
>>Subject: RE: Server Usage Report won't work with Power User Privilege
>>Date: Tue, 22 Nov 2005 00:49:01 -0800
>>Lines: 188
>>Message-ID: <9998E0C6-0D4D-4527-9825-B613692E068F@xxxxxxxxxxxxx>
>>MIME-Version: 1.0
>>Content-Type: text/plain;
>> charset="Utf-8"
>>Content-Transfer-Encoding: 8bit
>>X-Newsreader: Microsoft CDO for Windows 2000
>>Content-Class: urn:content-classes:message
>>Importance: normal
>>Priority: normal
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>>Newsgroups: microsoft.public.windows.server.sbs
>>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
>>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:224528
>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>
>>Good Day Jenny,
>>
>>Thank you very much for helping me out with the problem.
>>
>>I created a new Power User account, added it as a member of Usage Report
>>group, but still had the same problem viewing Usage Report page. However,
>>when I logged on the SBS2003 server box with the power user account, the
>>Usage Report page could be read via http://server_name/monitoring. I
>checked
>>Event Viewer, an error was logged as stated below:
>>
>>Event Type: Error
>>Event Source: ServerStatusReports
>>Event Category: None
>>Event ID: 1
>>Date: 11/21/2005
>>Time: 10:53:25 PM
>>User: N/A
>>Computer: ADENNA-SFS-SVR
>>Description:
>>Server Status Report:
> URL:
>http://adenna-sfs-svr/monitoring/usage.aspx?dateFrom=11/7/2005&dateTo=11/20
/
>2005&extended=0
>> Error Message: Cannot open Service Control Manager on computer '.'. This
>>operation might require other privileges.
>> Stack Trace: at
>>System.ServiceProcess.ServiceController.GetDataBaseHandle()
>> at System.ServiceProcess.ServiceController.GenerateNames()
>> at System.ServiceProcess.ServiceController.get_ServiceName()
>> at System.ServiceProcess.ServiceController.GenerateStatus()
>> at System.ServiceProcess.ServiceController.get_Status()
>> at usage.globalFn.isServiceRunning(String strServiceName)
>> at usage.globalFn.connectDataSource(Boolean pingFirst)
>> at usage.frmUsage.renderReportWorker()
>> at usage.frmUsage.renderReport()
>>
>>For more information, see Help and Support Center at
>>http://go.microsoft.com/fwlink/events.asp.
>>
>>I visited the above page, but no answer was given. So, I tried to look
for
>>help in SBS2003 community.
>>
>>I also generated two gpresult text files, which were sent to you as
email.
>>Hope these information can help you find out what is wrong with this
>SBS2003
>>Server box.
>>
>>I am supporting SBS2003 server for my customers. I never run into such
>>problem before. One of our staff passed 70-282 test in August this year,
>and
>>we are the first 200 MS Small Business Specialist national wide. This
>client
>>just turned to us from a MS Gold Partner.
>>
>>Hope to hear from you soon.
>>
>>Best regards,
>>
>>Leo
>>
>>""Jenny wu [MSFT]"" wrote:
>>
>>> Hi Leo,
>>>
>>> Thanks for using the SBS newsgroup!
>>>
>>> For your description, I understand the issue to be: user belongs to
>Usage
>>> Report group can not access server performance and usage report page.
If
>I
>>> am off base, please don't hesitate to let me know.
>>>
>>> If the user is a member of Usage Report users group, it can access the
>>> webpage http://server_name/monitoring. I have tested your issue and can
>>> access the webpage properly.
>>>
>>> Please do follow steps to try to test the issue:
>>> 1. Please try to logon the SBS server box with domain admin user
account
>>> and create a new Power user with Add user wizard (Server management
>console
>>> -> Users -> Add a user).
>>> 2. And then right click the user account to open its Properties page,
>under
>>> Member of tab, click Add¡­ button to add Usage Report users to member
>of
>>> list.
>>> 3. Click OK to finish the process. And then try to logon on the SBS
>server
>>> box using the user account, try to test access monitoring webpage using
>>> http://server_name/monitoring or http://localhost/monitoring, how about
>the
>>> result?
>>>
>>> If the issue persists, please help me collect some information for
>further
>>> analyze the issue:
>>>
>>> 1. Could you find related error event in Event Viewer (Start ->
>>> Administrative Tools -> Event Viewer) in the SBS server box when logon
>the
>>> server use the power user account permissions? If yes, please paste the
>>> detail error information in the newsgroup or mail to me.
>>>
>>> 2. Please give me the group policy report respectively using
>Administrator
>>> account and Power user account logon to server box, please use the
>>> following command:
>>>
>>> "gpresult /v -> c:/gpresultadmin.txt" (no quotation marks)
>>> "gpresult /v -> c:/gpresultpower.txt" (no quotation marks)
>>>
>>> Please mail me the files to v-yanniw@xxxxxxxxxxxxx
>>>
>>> I appreciate your time! I am happy to be assistance of you and look
>forward
>>> to your reply!
>>>
>>> Have a nice day!
>>>
>>> Sincerely,
>>>
>>> Jenny Wu
>>> Microsoft CSS Online Newsgroup Support
>>> Get Secure! - www.microsoft.com/security
>>> ======================================================
>>> This newsgroup only focuses on SBS technical issues. If you have issues
>>> regarding other Microsoft products, you'd better post in the
>corresponding
>>> newsgroups so that they can be resolved in an efficient and timely
>manner.
>>> You can locate the newsgroup here:
>>> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>>>
>>> When opening a new thread via the web interface, we recommend you check
>the
>>> "Notify me of replies" box to receive e-mail notifications when there
>are
>>> any updates in your thread. When responding to posts via your
>newsreader,
>>> please "Reply to Group" so that others may learn and benefit from your
>>> issue.
>>>
>>> Microsoft engineers can only focus on one issue per thread. Although we
>>> provide other information for your reference, we recommend you post
>>> different incidents in different threads to keep the thread clean. In
>doing
>>> so, it will ensure your issues are resolved in a timely manner.
>>>
>>> For urgent issues, you may want to contact Microsoft CSS directly.
>Please
>>> check http://support.microsoft.com for regional support phone numbers.
>>>
>>> Any input or comments in this thread are highly appreciated.
>>> ======================================================
>>> This posting is provided "AS IS" with no warranties, and confers no
>rights.
>>>
>>> --------------------
>>> >Thread-Topic: Server Usage Report won't work with Power User Privilege
>>> >thread-index: AcXuTR3g3IGoWq13TOClmQOY0RIrPw==
>>> >X-WBNR-Posting-Host: 68.120.80.61
>>> >From: =?Utf-8?B?TGVv?= <Leo@xxxxxxxxxxxxxxxxxxxxxxxxx>
>>> >Subject: Server Usage Report won't work with Power User Privilege
>>> >Date: Sun, 20 Nov 2005 19:39:03 -0800
>>> >Lines: 26
>>> >Message-ID: <BB0E2A6D-D9CE-42F2-A8F1-259B372FEE50@xxxxxxxxxxxxx>
>>> >MIME-Version: 1.0
>>> >Content-Type: text/plain;
>>> > charset="Utf-8"
>>> >Content-Transfer-Encoding: 7bit
>>> >X-Newsreader: Microsoft CDO for Windows 2000
>>> >Content-Class: urn:content-classes:message
>>> >Importance: normal
>>> >Priority: normal
>>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>>> >Newsgroups: microsoft.public.windows.server.sbs
>>> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>>> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
>>> >Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:224079
>>> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>>> >
>>> >Hi there,
>>> >
>>> >I configured Server Performance and Usage Reports, when I accessed
>>> >http://server_name/monitoring with admin privilege, it could generate
>the
>>> >reports, but when logged on with Power User privilege, which was a
>member
>>> of
>>> >Usage Report Viewer group, it gave the following errors:
>>> >
>>> >The page cannot be displayed
>>> >An error occurred on the page you are trying to view.
>>> >
>>>
>---------------------------------------------------------------------------
-
>>> ----
>>> >
>>> >To work around this problem, perform the following steps. After each
>step,
>>> >try again to access the page.
>>> >
>>> >1. Ensure that the MSSQL$SBSMONITORING service is started.
>>> >2. Ensure that the server is not low on memory or disk space.
>>> >3. Restart the server.
>>> >4. Verify that the server is functional and that there are no
>system-wide
>>> >problems.
>>> >5. Run the Set Up Monitoring Reports and Alerts task in the Server
>>> >Management Monitoring and Reporting taskpad.
>>> >
>>> >I did all the steps, but the problem still exists. Can anyone tell me
>the
>>> >fix?
>>> >
>>> >
>>>
>>>
>>
>
>

.

Loading