Discussion:
Problem viewing reports pane in SCOM
(too old to reply)
Cory Mckee
2007-07-05 19:33:38 UTC
Permalink
I am unable to view the reports pane in SCOM with an account from a trusted
domain that has been set in the Operations Manager Administrators group,
Report Operator group, and the Report Security Administrator group. This
does work when logging on as a domain admin from the domain that SCOM is
installed into.

The error I get is:

Date: 7/5/2007 12:33:08 PM
Application: System Center Operations Manager 2007
Application Version: 6.0.5000.0
Severity: Error
Message: Loading reporting hierarchy failed.

System.Web.Services.Protocols.SoapException: An internal error occurred on
the report server. See the error log for more details. ---> An internal
error occurred on the report server. See the error log for more
details. ---> Access is denied. (Exception from HRESULT: 0x80070005
(E_ACCESSDENIED))
at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage
message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
methodName, Object[] parameters)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ReportingService.ReportingService2005.ListChildren(String
Item, Boolean Recursive)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ManagementGroupReportFolder.GetSubfolders(Boolean
includeHidden)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ManagementGroupReportFolder.GetSubfolders()
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBar.ReportingPage.LoadReportingSubtree(TreeNode
node, ManagementGroupReportFolder folder)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBar.ReportingPage.LoadReportingTreeJob(Object
sender, ConsoleJobEventArgs args)
Neale Brown
2007-07-05 22:13:26 UTC
Permalink
Can you access the SQL reporting services server directly that Ops Mgr is
using (ie. http://reportserver/Reports)? I am wondering if you get some
kind of access issue when rendering any pages from thet installation.
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com
Post by Cory Mckee
I am unable to view the reports pane in SCOM with an account from a trusted
domain that has been set in the Operations Manager Administrators group,
Report Operator group, and the Report Security Administrator group. This
does work when logging on as a domain admin from the domain that SCOM is
installed into.
Date: 7/5/2007 12:33:08 PM
Application: System Center Operations Manager 2007
Application Version: 6.0.5000.0
Severity: Error
Message: Loading reporting hierarchy failed.
System.Web.Services.Protocols.SoapException: An internal error occurred on
the report server. See the error log for more details. ---> An internal
error occurred on the report server. See the error log for more
details. ---> Access is denied. (Exception from HRESULT: 0x80070005
(E_ACCESSDENIED))
at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage
message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
methodName, Object[] parameters)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ReportingService.ReportingService2005.ListChildren(String
Item, Boolean Recursive)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ManagementGroupReportFolder.GetSubfolders(Boolean
includeHidden)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ManagementGroupReportFolder.GetSubfolders()
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBar.ReportingPage.LoadReportingSubtree(TreeNode
node, ManagementGroupReportFolder folder)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBar.ReportingPage.LoadReportingTreeJob(Object
sender, ConsoleJobEventArgs args)
Cory Mckee
2007-07-05 22:23:07 UTC
Permalink
Not with the trusted domain account. Permissions error, same one that I get
from within SCOM. I even tried adding NTFS permissions and reporting server
permissions and it made no difference. Works fine with the domain admin
account from the domain SCOM is installed in.
Post by Neale Brown
Can you access the SQL reporting services server directly that Ops Mgr is
using (ie. http://reportserver/Reports)? I am wondering if you get some
kind of access issue when rendering any pages from thet installation.
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com
Post by Cory Mckee
I am unable to view the reports pane in SCOM with an account from a
trusted domain that has been set in the Operations Manager Administrators
group, Report Operator group, and the Report Security Administrator group.
This does work when logging on as a domain admin from the domain that SCOM
is installed into.
Date: 7/5/2007 12:33:08 PM
Application: System Center Operations Manager 2007
Application Version: 6.0.5000.0
Severity: Error
Message: Loading reporting hierarchy failed.
System.Web.Services.Protocols.SoapException: An internal error occurred
on the report server. See the error log for more details. ---> An
internal error occurred on the report server. See the error log for more
details. ---> Access is denied. (Exception from HRESULT: 0x80070005
(E_ACCESSDENIED))
at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage
message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
methodName, Object[] parameters)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ReportingService.ReportingService2005.ListChildren(String
Item, Boolean Recursive)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ManagementGroupReportFolder.GetSubfolders(Boolean
includeHidden)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ManagementGroupReportFolder.GetSubfolders()
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBar.ReportingPage.LoadReportingSubtree(TreeNode
node, ManagementGroupReportFolder folder)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBar.ReportingPage.LoadReportingTreeJob(Object
sender, ConsoleJobEventArgs args)
Neale Brown
2007-07-07 17:13:26 UTC
Permalink
Is the account added to 'report operator' group?
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com
Post by Cory Mckee
Not with the trusted domain account. Permissions error, same one that I
get from within SCOM. I even tried adding NTFS permissions and reporting
server permissions and it made no difference. Works fine with the domain
admin account from the domain SCOM is installed in.
Post by Neale Brown
Can you access the SQL reporting services server directly that Ops Mgr is
using (ie. http://reportserver/Reports)? I am wondering if you get some
kind of access issue when rendering any pages from thet installation.
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com
Post by Cory Mckee
I am unable to view the reports pane in SCOM with an account from a
trusted domain that has been set in the Operations Manager Administrators
group, Report Operator group, and the Report Security Administrator
group. This does work when logging on as a domain admin from the domain
that SCOM is installed into.
Date: 7/5/2007 12:33:08 PM
Application: System Center Operations Manager 2007
Application Version: 6.0.5000.0
Severity: Error
Message: Loading reporting hierarchy failed.
System.Web.Services.Protocols.SoapException: An internal error occurred
on the report server. See the error log for more details. ---> An
internal error occurred on the report server. See the error log for more
details. ---> Access is denied. (Exception from HRESULT: 0x80070005
(E_ACCESSDENIED))
at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage
message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
methodName, Object[] parameters)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ReportingService.ReportingService2005.ListChildren(String
Item, Boolean Recursive)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ManagementGroupReportFolder.GetSubfolders(Boolean
includeHidden)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ManagementGroupReportFolder.GetSubfolders()
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBar.ReportingPage.LoadReportingSubtree(TreeNode
node, ManagementGroupReportFolder folder)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBar.ReportingPage.LoadReportingTreeJob(Object
sender, ConsoleJobEventArgs args)
Cory Mckee
2007-07-09 17:44:12 UTC
Permalink
Yes. The domain admin group from the trusted domain and also a user account
that is in that group.
Post by Neale Brown
Is the account added to 'report operator' group?
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com
Post by Cory Mckee
Not with the trusted domain account. Permissions error, same one that I
get from within SCOM. I even tried adding NTFS permissions and reporting
server permissions and it made no difference. Works fine with the domain
admin account from the domain SCOM is installed in.
Post by Neale Brown
Can you access the SQL reporting services server directly that Ops Mgr
is using (ie. http://reportserver/Reports)? I am wondering if you get
some kind of access issue when rendering any pages from thet
installation.
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com
Post by Cory Mckee
I am unable to view the reports pane in SCOM with an account from a
trusted domain that has been set in the Operations Manager
Administrators group, Report Operator group, and the Report Security
Administrator group. This does work when logging on as a domain admin
from the domain that SCOM is installed into.
Date: 7/5/2007 12:33:08 PM
Application: System Center Operations Manager 2007
Application Version: 6.0.5000.0
Severity: Error
Message: Loading reporting hierarchy failed.
System.Web.Services.Protocols.SoapException: An internal error occurred
on the report server. See the error log for more details. ---> An
internal error occurred on the report server. See the error log for
0x80070005 (E_ACCESSDENIED))
at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage
message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
methodName, Object[] parameters)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ReportingService.ReportingService2005.ListChildren(String
Item, Boolean Recursive)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ManagementGroupReportFolder.GetSubfolders(Boolean
includeHidden)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ManagementGroupReportFolder.GetSubfolders()
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBar.ReportingPage.LoadReportingSubtree(TreeNode
node, ManagementGroupReportFolder folder)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBar.ReportingPage.LoadReportingTreeJob(Object
sender, ConsoleJobEventArgs args)
Cory Mckee
2007-07-12 01:47:01 UTC
Permalink
Does this error help any?

Event Type: Error
Event Source: OpsMgr SDK Service
Event Category: None
Event ID: 26319
Date: 7/11/2007
Time: 6:40:53 PM
User: N/A
Computer: Server
Description:
An exception was thrown while processing GetUserRolesForOperationAndUser for
session id uuid:UIDGOESHERE;id=68.
Exception Message: Access is denied. (Exception from HRESULT: 0x80070005
(E_ACCESSDENIED))
Full Exception: System.UnauthorizedAccessException: Access is denied.
(Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
at
Microsoft.Interop.Security.AzRoles.IAzApplication2.InitializeClientContextFromStringSid(String
SidString, Int32 lOptions, Object varReserved)
at
Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AzManHelper.GetScopedRoleAssignmentsForUser(IList`1
roleNames, String userName)
at
Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AuthManager.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccess.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessTieringWrapper.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessExceptionTracingWrapper.GetUserRolesForOperationAndUser(Guid
operationId, String userName)

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Post by Cory Mckee
Yes. The domain admin group from the trusted domain and also a user
account that is in that group.
Post by Neale Brown
Is the account added to 'report operator' group?
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com
Post by Cory Mckee
Not with the trusted domain account. Permissions error, same one that I
get from within SCOM. I even tried adding NTFS permissions and reporting
server permissions and it made no difference. Works fine with the domain
admin account from the domain SCOM is installed in.
Post by Neale Brown
Can you access the SQL reporting services server directly that Ops Mgr
is using (ie. http://reportserver/Reports)? I am wondering if you get
some kind of access issue when rendering any pages from thet
installation.
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com
Post by Cory Mckee
I am unable to view the reports pane in SCOM with an account from a
trusted domain that has been set in the Operations Manager
Administrators group, Report Operator group, and the Report Security
Administrator group. This does work when logging on as a domain admin
from the domain that SCOM is installed into.
Date: 7/5/2007 12:33:08 PM
Application: System Center Operations Manager 2007
Application Version: 6.0.5000.0
Severity: Error
Message: Loading reporting hierarchy failed.
System.Web.Services.Protocols.SoapException: An internal error
occurred on the report server. See the error log for more
details. ---> An internal error occurred on the report server. See the
error log for more details. ---> Access is denied. (Exception from
HRESULT: 0x80070005 (E_ACCESSDENIED))
at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage
message, WebResponse response, Stream responseStream, Boolean asyncCall)
at
System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
methodName, Object[] parameters)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ReportingService.ReportingService2005.ListChildren(String
Item, Boolean Recursive)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ManagementGroupReportFolder.GetSubfolders(Boolean
includeHidden)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ManagementGroupReportFolder.GetSubfolders()
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBar.ReportingPage.LoadReportingSubtree(TreeNode
node, ManagementGroupReportFolder folder)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBar.ReportingPage.LoadReportingTreeJob(Object
sender, ConsoleJobEventArgs args)
Pete Zerger (MVP)
2007-07-12 03:46:01 UTC
Permalink
Hello Cory,

You might check the following KB:

http://support.microsoft.com/default.aspx/kb/937292/en-us

Regards,

Pete Zerger, MCSE(Messaging) | MCTS(SQL 2005) | MVP - MOM
Founder, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto:pete.zerger AT gmail.com
Post by Cory Mckee
Does this error help any?
Event Type: Error
Event Source: OpsMgr SDK Service
Event Category: None
Event ID: 26319
Date: 7/11/2007
Time: 6:40:53 PM
User: N/A
Computer: Server
An exception was thrown while processing
GetUserRolesForOperationAndUser for
session id uuid:UIDGOESHERE;id=68.
0x80070005
(E_ACCESSDENIED))
Full Exception: System.UnauthorizedAccessException: Access is denied.
(Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
at
Microsoft.Interop.Security.AzRoles.IAzApplication2.InitializeClientCon
textFromStringSid(String
SidString, Int32 lOptions, Object varReserved)
at
Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AzManHelper.GetSc
opedRoleAssignmentsForUser(IList`1
roleNames, String userName)
at
Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AuthManager.GetUs
erRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccess.GetU
serRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessTieri
ngWrapper.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessExcep
tionTracingWrapper.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Post by Cory Mckee
Yes. The domain admin group from the trusted domain and also a user
account that is in that group.
Post by Neale Brown
Is the account added to 'report operator' group?
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com
Post by Cory Mckee
Not with the trusted domain account. Permissions error, same one
that I get from within SCOM. I even tried adding NTFS permissions
and reporting server permissions and it made no difference. Works
fine with the domain admin account from the domain SCOM is
installed in.
Post by Neale Brown
Can you access the SQL reporting services server directly that Ops Mgr
is using (ie. http://reportserver/Reports)? I am wondering if you get
some kind of access issue when rendering any pages from thet
installation.
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com
Post by Cory Mckee
I am unable to view the reports pane in SCOM with an account from
a trusted domain that has been set in the Operations Manager
Administrators group, Report Operator group, and the Report
Security Administrator group. This does work when logging on as a
domain admin from the domain that SCOM is installed into.
Date: 7/5/2007 12:33:08 PM
Application: System Center Operations Manager 2007
Application Version: 6.0.5000.0
Severity: Error
Message: Loading reporting hierarchy failed.
System.Web.Services.Protocols.SoapException: An internal error
occurred on the report server. See the error log for more
details. ---> An internal error occurred on the report server. See the
error log for more details. ---> Access is denied. (Exception from
HRESULT: 0x80070005 (E_ACCESSDENIED))
at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse
(SoapClientMessage
message, WebResponse response, Stream responseStream, Boolean
asyncCall)
at
System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(Strin
g
methodName, Object[] parameters)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.Reportin
gService.ReportingService2005.ListChildren(String
Item, Boolean Recursive)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.Manageme
ntGroupReportFolder.GetSubfolders(Boolean
includeHidden)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.Manageme
ntGroupReportFolder.GetSubfolders()
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBa
r.ReportingPage.LoadReportingSubtree(TreeNode
node, ManagementGroupReportFolder folder)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBa
r.ReportingPage.LoadReportingTreeJob(Object
sender, ConsoleJobEventArgs args)
Cory Mckee
2007-07-12 15:39:00 UTC
Permalink
Pete,

The install is already complete and is running. I can run this if you think
it is necessary, but this discsusses issues during install.

Please advise.

Cory
Post by Pete Zerger (MVP)
Hello Cory,
http://support.microsoft.com/default.aspx/kb/937292/en-us
Regards,
Pete Zerger, MCSE(Messaging) | MCTS(SQL 2005) | MVP - MOM
Founder, SystemCenterForum.org URL:http://www.systemcenterforum.org
mailto:pete.zerger AT gmail.com
Post by Cory Mckee
Does this error help any?
Event Type: Error
Event Source: OpsMgr SDK Service
Event Category: None
Event ID: 26319
Date: 7/11/2007
Time: 6:40:53 PM
User: N/A
Computer: Server
An exception was thrown while processing
GetUserRolesForOperationAndUser for
session id uuid:UIDGOESHERE;id=68.
0x80070005
(E_ACCESSDENIED))
Full Exception: System.UnauthorizedAccessException: Access is denied.
(Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
at
Microsoft.Interop.Security.AzRoles.IAzApplication2.InitializeClientCon
textFromStringSid(String
SidString, Int32 lOptions, Object varReserved)
at
Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AzManHelper.GetSc
opedRoleAssignmentsForUser(IList`1
roleNames, String userName)
at
Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AuthManager.GetUs
erRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccess.GetU
serRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessTieri
ngWrapper.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessExcep
tionTracingWrapper.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Post by Cory Mckee
Yes. The domain admin group from the trusted domain and also a user
account that is in that group.
Post by Neale Brown
Is the account added to 'report operator' group?
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com
Post by Cory Mckee
Not with the trusted domain account. Permissions error, same one
that I get from within SCOM. I even tried adding NTFS permissions
and reporting server permissions and it made no difference. Works
fine with the domain admin account from the domain SCOM is
installed in.
Post by Neale Brown
Can you access the SQL reporting services server directly that Ops Mgr
is using (ie. http://reportserver/Reports)? I am wondering if you get
some kind of access issue when rendering any pages from thet
installation.
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com
Post by Cory Mckee
I am unable to view the reports pane in SCOM with an account from
a trusted domain that has been set in the Operations Manager
Administrators group, Report Operator group, and the Report
Security Administrator group. This does work when logging on as a
domain admin from the domain that SCOM is installed into.
Date: 7/5/2007 12:33:08 PM
Application: System Center Operations Manager 2007
Application Version: 6.0.5000.0
Severity: Error
Message: Loading reporting hierarchy failed.
System.Web.Services.Protocols.SoapException: An internal error
occurred on the report server. See the error log for more
details. ---> An internal error occurred on the report server. See the
error log for more details. ---> Access is denied. (Exception from
HRESULT: 0x80070005 (E_ACCESSDENIED))
at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse
(SoapClientMessage
message, WebResponse response, Stream responseStream, Boolean
asyncCall)
at
System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(Strin
g
methodName, Object[] parameters)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.Reportin
gService.ReportingService2005.ListChildren(String
Item, Boolean Recursive)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.Manageme
ntGroupReportFolder.GetSubfolders(Boolean
includeHidden)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.Manageme
ntGroupReportFolder.GetSubfolders()
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBa
r.ReportingPage.LoadReportingSubtree(TreeNode
node, ManagementGroupReportFolder folder)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBa
r.ReportingPage.LoadReportingTreeJob(Object
sender, ConsoleJobEventArgs args)
Cory Mckee
2007-07-12 21:51:59 UTC
Permalink
Tried it anyway and it made no difference.
Post by Cory Mckee
Pete,
The install is already complete and is running. I can run this if you
think it is necessary, but this discsusses issues during install.
Please advise.
Cory
Post by Pete Zerger (MVP)
Hello Cory,
http://support.microsoft.com/default.aspx/kb/937292/en-us
Regards,
Pete Zerger, MCSE(Messaging) | MCTS(SQL 2005) | MVP - MOM
Founder, SystemCenterForum.org URL:http://www.systemcenterforum.org
mailto:pete.zerger AT gmail.com
Post by Cory Mckee
Does this error help any?
Event Type: Error
Event Source: OpsMgr SDK Service
Event Category: None
Event ID: 26319
Date: 7/11/2007
Time: 6:40:53 PM
User: N/A
Computer: Server
An exception was thrown while processing
GetUserRolesForOperationAndUser for
session id uuid:UIDGOESHERE;id=68.
Exception Message: Access is denied. (Exception from HRESULT: 0x80070005
(E_ACCESSDENIED))
Full Exception: System.UnauthorizedAccessException: Access is denied.
(Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
at
Microsoft.Interop.Security.AzRoles.IAzApplication2.InitializeClientCon
textFromStringSid(String
SidString, Int32 lOptions, Object varReserved)
at
Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AzManHelper.GetSc
opedRoleAssignmentsForUser(IList`1
roleNames, String userName)
at
Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AuthManager.GetUs
erRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccess.GetU
serRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessTieri
ngWrapper.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessExcep
tionTracingWrapper.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Post by Cory Mckee
Yes. The domain admin group from the trusted domain and also a user
account that is in that group.
Post by Neale Brown
Is the account added to 'report operator' group?
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com
Post by Cory Mckee
Not with the trusted domain account. Permissions error, same one
that I get from within SCOM. I even tried adding NTFS permissions
and reporting server permissions and it made no difference. Works
fine with the domain admin account from the domain SCOM is
installed in.
Post by Neale Brown
Can you access the SQL reporting services server directly that Ops Mgr
is using (ie. http://reportserver/Reports)? I am wondering if you get
some kind of access issue when rendering any pages from thet
installation.
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com
Post by Cory Mckee
I am unable to view the reports pane in SCOM with an account from
a trusted domain that has been set in the Operations Manager
Administrators group, Report Operator group, and the Report
Security Administrator group. This does work when logging on as a
domain admin from the domain that SCOM is installed into.
Date: 7/5/2007 12:33:08 PM
Application: System Center Operations Manager 2007
Application Version: 6.0.5000.0
Severity: Error
Message: Loading reporting hierarchy failed.
System.Web.Services.Protocols.SoapException: An internal error
occurred on the report server. See the error log for more
details. ---> An internal error occurred on the report server. See the
error log for more details. ---> Access is denied. (Exception from
HRESULT: 0x80070005 (E_ACCESSDENIED))
at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse
(SoapClientMessage
message, WebResponse response, Stream responseStream, Boolean
asyncCall)
at
System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(Strin
g
methodName, Object[] parameters)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.Reportin
gService.ReportingService2005.ListChildren(String
Item, Boolean Recursive)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.Manageme
ntGroupReportFolder.GetSubfolders(Boolean
includeHidden)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.Manageme
ntGroupReportFolder.GetSubfolders()
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBa
r.ReportingPage.LoadReportingSubtree(TreeNode
node, ManagementGroupReportFolder folder)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBa
r.ReportingPage.LoadReportingTreeJob(Object
sender, ConsoleJobEventArgs args)
Cory Mckee
2007-07-12 23:01:28 UTC
Permalink
Repaired the SCOM Reporting install. Reconfigured Reporting Services and we
are in business.
Post by Cory Mckee
Tried it anyway and it made no difference.
Post by Cory Mckee
Pete,
The install is already complete and is running. I can run this if you
think it is necessary, but this discsusses issues during install.
Please advise.
Cory
Post by Pete Zerger (MVP)
Hello Cory,
http://support.microsoft.com/default.aspx/kb/937292/en-us
Regards,
Pete Zerger, MCSE(Messaging) | MCTS(SQL 2005) | MVP - MOM
Founder, SystemCenterForum.org URL:http://www.systemcenterforum.org
mailto:pete.zerger AT gmail.com
Post by Cory Mckee
Does this error help any?
Event Type: Error
Event Source: OpsMgr SDK Service
Event Category: None
Event ID: 26319
Date: 7/11/2007
Time: 6:40:53 PM
User: N/A
Computer: Server
An exception was thrown while processing
GetUserRolesForOperationAndUser for
session id uuid:UIDGOESHERE;id=68.
Exception Message: Access is denied. (Exception from HRESULT: 0x80070005
(E_ACCESSDENIED))
Full Exception: System.UnauthorizedAccessException: Access is denied.
(Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
at
Microsoft.Interop.Security.AzRoles.IAzApplication2.InitializeClientCon
textFromStringSid(String
SidString, Int32 lOptions, Object varReserved)
at
Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AzManHelper.GetSc
opedRoleAssignmentsForUser(IList`1
roleNames, String userName)
at
Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AuthManager.GetUs
erRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccess.GetU
serRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessTieri
ngWrapper.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessExcep
tionTracingWrapper.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Post by Cory Mckee
Yes. The domain admin group from the trusted domain and also a user
account that is in that group.
Post by Neale Brown
Is the account added to 'report operator' group?
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com
Post by Cory Mckee
Not with the trusted domain account. Permissions error, same one
that I get from within SCOM. I even tried adding NTFS permissions
and reporting server permissions and it made no difference. Works
fine with the domain admin account from the domain SCOM is
installed in.
Post by Neale Brown
Can you access the SQL reporting services server directly that Ops Mgr
is using (ie. http://reportserver/Reports)? I am wondering if you get
some kind of access issue when rendering any pages from thet
installation.
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com
Post by Cory Mckee
I am unable to view the reports pane in SCOM with an account from
a trusted domain that has been set in the Operations Manager
Administrators group, Report Operator group, and the Report
Security Administrator group. This does work when logging on as a
domain admin from the domain that SCOM is installed into.
Date: 7/5/2007 12:33:08 PM
Application: System Center Operations Manager 2007
Application Version: 6.0.5000.0
Severity: Error
Message: Loading reporting hierarchy failed.
System.Web.Services.Protocols.SoapException: An internal error
occurred on the report server. See the error log for more
details. ---> An internal error occurred on the report server. See the
error log for more details. ---> Access is denied. (Exception from
HRESULT: 0x80070005 (E_ACCESSDENIED))
at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse
(SoapClientMessage
message, WebResponse response, Stream responseStream, Boolean
asyncCall)
at
System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(Strin
g
methodName, Object[] parameters)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.Reportin
gService.ReportingService2005.ListChildren(String
Item, Boolean Recursive)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.Manageme
ntGroupReportFolder.GetSubfolders(Boolean
includeHidden)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.Manageme
ntGroupReportFolder.GetSubfolders()
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBa
r.ReportingPage.LoadReportingSubtree(TreeNode
node, ManagementGroupReportFolder folder)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBa
r.ReportingPage.LoadReportingTreeJob(Object
sender, ConsoleJobEventArgs args)
unknown
2009-11-12 15:51:45 UTC
Permalink
I came accross this post looking for a very similar issue. My exception stack was:

library!ReportServer_0-1!9c0!11/12/2009-10:25:06:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.InternalCatalogException: An internal error occurred on the report server. See the error log for more details., ;
Info: Microsoft.ReportingServices.Diagnostics.Utilities.InternalCatalogException: An internal error occurred on the report server. See the error log for more details. ---> System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is:
System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
at Microsoft.Interop.Security.AzRoles.IAzApplication2.InitializeClientContextFromStringSid(String SidString, Int32 lOptions, Object varReserved)
at Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AzManHelper.GetScopedRoleAssignmentsForUser(IList`1 roleNames, String userName)
at Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AuthManager.GetUserRolesForOperationAndUser(Guid operationId, String userName)
at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccess.GetUserRolesForOperationAndUser(Guid operationId, String userName)
at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessTieringWrapper.GetUserRolesForOperationAndUser(Guid operationId, String userName)
at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessExceptionTracingWrapper.GetUs...).
--- End of inner exception stack trace ---


If you get that, take a look at this article:

http://support.microsoft.com/default.aspx/kb/938627/en-us

HTH



Cory Mckee wrote:

Does this error help any?
11-Jul-07

Does this error help any?

Event Type: Error
Event Source: OpsMgr SDK Service
Event Category: None
Event ID: 26319
Date: 7/11/2007
Time: 6:40:53 PM
User: N/A
Computer: Server
Description:
An exception was thrown while processing GetUserRolesForOperationAndUser for
session id uuid:UIDGOESHERE;id=68.
Exception Message: Access is denied. (Exception from HRESULT: 0x80070005
(E_ACCESSDENIED))
Full Exception: System.UnauthorizedAccessException: Access is denied.
(Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
at
Microsoft.Interop.Security.AzRoles.IAzApplication2.InitializeClientContextFromStringSid(String
SidString, Int32 lOptions, Object varReserved)
at
Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AzManHelper.GetScopedRoleAssignmentsForUser(IList`1
roleNames, String userName)
at
Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AuthManager.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccess.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessTieringWrapper.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessExceptionTracingWrapper.GetUserRolesForOperationAndUser(Guid
operationId, String userName)

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


"Cory Mckee" <***@address.com> wrote in message news:7B90DA02-4E3C-4A2A-877B-***@microsoft.com...

Previous Posts In This Thread:

On Thursday, July 05, 2007 3:33 PM
Cory Mckee wrote:

Problem viewing reports pane in SCOM
I am unable to view the reports pane in SCOM with an account from a trusted
domain that has been set in the Operations Manager Administrators group,
Report Operator group, and the Report Security Administrator group. This
does work when logging on as a domain admin from the domain that SCOM is
installed into.

The error I get is:

Date: 7/5/2007 12:33:08 PM
Application: System Center Operations Manager 2007
Application Version: 6.0.5000.0
Severity: Error
Message: Loading reporting hierarchy failed.

System.Web.Services.Protocols.SoapException: An internal error occurred on
the report server. See the error log for more details. ---> An internal
error occurred on the report server. See the error log for more
details. ---> Access is denied. (Exception from HRESULT: 0x80070005
(E_ACCESSDENIED))
at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage
message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
methodName, Object[] parameters)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ReportingService.ReportingService2005.ListChildren(String
Item, Boolean Recursive)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ManagementGroupReportFolder.GetSubfolders(Boolean
includeHidden)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ManagementGroupReportFolder.GetSubfolders()
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBar.ReportingPage.LoadReportingSubtree(TreeNode
node, ManagementGroupReportFolder folder)
at
Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBar.ReportingPage.LoadReportingTreeJob(Object
sender, ConsoleJobEventArgs args)

On Thursday, July 05, 2007 6:13 PM
Neale Brown wrote:

Can you access the SQL reporting services server directly that Ops Mgr is
Can you access the SQL reporting services server directly that Ops Mgr is
using (ie. http://reportserver/Reports)? I am wondering if you get some
kind of access issue when rendering any pages from thet installation.
--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com


"Cory Mckee" <***@address.com> wrote in message news:50FCA3EA-D0B0-492A-B5E4-***@microsoft.com...

On Thursday, July 05, 2007 6:23 PM
Cory Mckee wrote:

Not with the trusted domain account.
Not with the trusted domain account. Permissions error, same one that I get
from within SCOM. I even tried adding NTFS permissions and reporting server
permissions and it made no difference. Works fine with the domain admin
account from the domain SCOM is installed in.


"Neale Brown" <nealeb+***@gmail.com> wrote in message news:BBEC3A5C-9DC6-44C9-A670-***@microsoft.com...

On Saturday, July 07, 2007 1:13 PM
Neale Brown wrote:

Is the account added to 'report operator' group?
Is the account added to 'report operator' group?

--
Neale Brown, MCSA(Messaging)
Contributor, SystemCenterForum.org
URL:http://www.systemcenterforum.org
mailto : nealeb AT gmail.com

On Monday, July 09, 2007 1:44 PM
Cory Mckee wrote:

Yes.
Yes. The domain admin group from the trusted domain and also a user account
that is in that group.

On Wednesday, July 11, 2007 9:47 PM
Cory Mckee wrote:

Does this error help any?
Does this error help any?

Event Type: Error
Event Source: OpsMgr SDK Service
Event Category: None
Event ID: 26319
Date: 7/11/2007
Time: 6:40:53 PM
User: N/A
Computer: Server
Description:
An exception was thrown while processing GetUserRolesForOperationAndUser for
session id uuid:UIDGOESHERE;id=68.
Exception Message: Access is denied. (Exception from HRESULT: 0x80070005
(E_ACCESSDENIED))
Full Exception: System.UnauthorizedAccessException: Access is denied.
(Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
at
Microsoft.Interop.Security.AzRoles.IAzApplication2.InitializeClientContextFromStringSid(String
SidString, Int32 lOptions, Object varReserved)
at
Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AzManHelper.GetScopedRoleAssignmentsForUser(IList`1
roleNames, String userName)
at
Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AuthManager.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccess.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessTieringWrapper.GetUserRolesForOperationAndUser(Guid
operationId, String userName)
at
Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessExceptionTracingWrapper.GetUserRolesForOperationAndUser(Guid
operationId, String userName)

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


"Cory Mckee" <***@address.com> wrote in message news:7B90DA02-4E3C-4A2A-877B-***@microsoft.com...

EggHeadCafe - Software Developer Portal of Choice
Build a Versatile .NET Code Timer / Logger
http://www.eggheadcafe.com/tutorials/aspnet/13905b68-32ad-449a-9352-f3523e665fee/build-a-versatile-net-co.aspx
Loading...