SMS Reporting Issue

[drewdown]

I use to be able to view reports remotely. I applied SP2 and now I cannot. Locally when logged onto the SMS Server I can view them without fail, but to get it to work I had to add the local system account to the SMS Reporting Users group.

When I try to view them from my machine I get prompted for a login information, and no matter what I enter (my admin account, sms admin account) I get access denied.

Any insight as to what it may be? DCOM is configured

 

[drewdown]

Ugh. Another admin can view the reports without fail via the web. However me, who setup SMS cannot.

I get this error message when I firt try to view the reports:

The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/<SMS Server>. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (MODS.ARMY.MIL), and the client realm. Please contact your system administrator.

 

[drewdown]

Figured it out with a little help from some friends in India. Turned out to be an IIS issue, NTLM authentication was not set on the SMS server, once we set it to negotiate we were golden.

I advise you only to run this if you are experiencing the problems that I was.

To check to see what NTLM is set to run this from a cmd prompt:

c:\inetpub\AdminScripts\cscript adsutil.vbs get w3svc/1/ntauthenticationproviders

If it returns The parameter :ntauthenticationproviders" is not set at this node, then run this command to set it:


c:\inetpub\AdminScripts\cscript adsutil.vbs set w3svc/1/ntauthenticationproviders "ntlm,negotiate

 

[mib147]

Thank you for coming back to the posting after you resolved the issue on your own.