You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
title: How to Create a Non-Privileged IIS User for Report Server and Service Agent
3
-
description: This tutorial shows how to use a low-privileged user to host Report Server on IIS.
3
+
description: "This tutorial shows how to use a low-privileged user to host the Report Server on IIS."
4
4
type: how-to
5
5
page_title: How to Run Report Server and Service Agent with Limited Permissions
6
6
slug: how-to-change-report-server-iis-user
@@ -13,60 +13,62 @@ res_type: kb
13
13
|||
14
14
|---------|-----------------|
15
15
| Product | Progress® Telerik® Report Server |
16
-
| Version | 10.1.24.514 |
16
+
| Version | 10.1.24.514+|
17
17
18
18
## Description
19
19
20
20
This tutorial will show you how to change the Report Server's IIS application pool and service agent to use an identity with limited permissions.
21
21
22
22
## Solution
23
23
24
-
1. Create a new Windows user with limited permissions, for example `RSUser`.
24
+
1. Create a new Windows user with limited permissions, for example,`RSUser`.
25
25
26
-
26
+
27
27
28
-
For more help, see [Microsoft Docs - Manage User Accounts in Windows](https://support.microsoft.com/en-us/windows/manage-user-accounts-in-windows-104dc19f-6430-4b49-6a2b-e4dbd1dcdf32).
28
+
For more help, see [Microsoft Docs - Manage User Accounts in Windows](https://support.microsoft.com/en-us/windows/manage-user-accounts-in-windows-104dc19f-6430-4b49-6a2b-e4dbd1dcdf32).
29
29
30
30
2. Go to Telerik Report Server's installation directory (`C:\Program Files (x86)\Progress\Telerik Report Server`) and give `RSUser` full access permissions to the `Telerik.ReportServer.Web` and `Services` sub-folders.
33
33
34
-
- Ensure the user does not have read or write permissions to any other folders.
35
-
- You can use any username you prefer, the `RSUser` recommended here applies the semantic naming practices.
36
-
- For more help, see [Microsoft Q&A - How do I set up user account and manage permissions](https://learn.microsoft.com/en-us/answers/questions/1389054/how-do-i-set-up-user-accounts-and-manage-permissio).
34
+
- Ensure the user does not have read or write permissions to any other folders.
35
+
- You can use any username you prefer, the `RSUser` recommended here applies the semantic naming practices.
36
+
- For more help, see [Microsoft Q&A - How do I set up user account and manage permissions](https://learn.microsoft.com/en-us/answers/questions/1389054/how-do-i-set-up-user-accounts-and-manage-permissio).
37
37
38
38
3. Open Internet Information Services (IIS) Manager by selecting `Windows Key` + `R` to open the Run window, and then enter `inetmgr`.
39
-
40
39
4. In the left column, expand the machine's node and select **Application Pools**. Right-click on the `TelerikReportServer` application pool and select **Advanced Settings** from the context menu.
51
50
52
51
7. Right-click the `TelerikReportServer` application pool and select **Recycle...** from the context menu.
53
-
54
52
8. Open the Report Server Manager application in the web browser to confirm it is working with the new user identity.
53
+
9. Open Windows's Services app by selecting `Windows Key` + `R` to open the Run window, and then enter `services.msc`.
54
+
10. Scroll to the `Telerik.ReportServer.ServiceAgent` service instance:
55
55
56
-
9. Open Windows's Services app by selecting `Windows Key` + `R`to open the Run window, and then enter `services.msc`.
56
+
57
57
58
-
10. Scroll to the `Telerik.ReportServer.ServiceAgent` service instance:
58
+
11. Double-click to show the service's **Properties** panel. Select the **Log On** tab.
59
+
12. Click **This account** and enter the new user name (for example, `.\RSUser`) and its password:
59
60
60
-
61
+
61
62
62
-
11. Double-click to show the service's **Properties** panel. Select the **Log On** tab.
63
+
13. Right-click `Telerik.ReportServer.ServiceAgent` and select **Restart** to restart the service with the new user.
64
+
14. Ensure it is working by running a **scheduled task** or a **data alert** from the Report Server Manager web UI, or on the URL `http://{MachineNameHere}:82/ReportServer/ServiceAgent?wsdl`:
63
65
64
-
12. Click **This account** and enter the new user name (for example, `.\RSUser`) and its password:
66
+
If the Report Server Manager cannot connect to the Telerik.ReportServer.ServiceAgent, most probably the WCF service doesn't have a reservation for the corresponding port (the default one is `82`). Ensure reserving the port by running the proper [Netsh command](https://learn.microsoft.com/en-us/windows-server/networking/technologies/netsh/netsh-contexts) as an Administrator in the _command prompt_ or _terminal_. Here is a sample command that reserves port `82` for `ReportServer/ServiceAgent/` running under user `RSUser`:
13. Right-click `Telerik.ReportServer.ServiceAgent`and select **Restart** to restart the service with the new user.
70
+
If the default port `82` is already reserved by another application, you may change the port and reserve the new port as above, or release port `82` with the `delete urlacl` command and then reserve it with the above command. Here is a sample code releasing port `82` from the Telerik.ReportServer.ServiceAgent:
69
71
70
-
14. Ensure it is working by running a **scheduled task** or a **data alert** from Report Server Manager web UI.
> Additional Actions: Consider adding the local user to databases used by Report Server data connections that utilize Windows Credentials login permissions.
74
+
> Additional Actions: Consider adding the local user to databases used by Report Server data connections that utilize Windows Credentials login permissions.
0 commit comments