Changing Credentials for Subscriptions ?

Trying to get e-mail subscriptions working. Suspect problem due to User
being "Network Service" and not having sufficient rights. Not sure how to
change. Both the ReportServer -service-, and the Application Pool I have
setup in IIS (6.0) are running under "Network Service". If I change
credentials on the service to an AD account, nothing bad apparently happens,
but subscriptions still not working. Changing the Identity on the App Pool
causes the site to crash with error "The report server cannot decrypt the
symmetric key used to access sensitive or encrypted data in a report server
database." ... etc. Restoring the original Network Service credentials
restores functionality.
So how do I make changes such that subscriptions will run under a new
account? And is there -any- way to -display- whatever current credentials RS
has in use in various areas? (UserID would suffice - not looking for
password or a security hole here).
Going bananas in Kansas,
JNWhen you change the windows service user you are most likely getting the
same error you see when you change the iis users, only the error only shows
in the service log file. To get around this issue, first use rskeymgmt to
export the symmetric key. Change the user of the windows service and then
user rskeymgmt to import the symmetric key. This will get you running as
the new user. Monitor the ReportServerService<timestamp>.log file to see if
there are any errors reported by the service.
--
-Daniel
This posting is provided "AS IS" with no warranties, and confers no rights.
"J Noble" <JNoble@.discussions.microsoft.com> wrote in message
news:D46A1BED-9E9A-4F61-80C6-828C6623E27F@.microsoft.com...
> Trying to get e-mail subscriptions working. Suspect problem due to User
> being "Network Service" and not having sufficient rights. Not sure how to
> change. Both the ReportServer -service-, and the Application Pool I have
> setup in IIS (6.0) are running under "Network Service". If I change
> credentials on the service to an AD account, nothing bad apparently
> happens,
> but subscriptions still not working. Changing the Identity on the App
> Pool
> causes the site to crash with error "The report server cannot decrypt the
> symmetric key used to access sensitive or encrypted data in a report
> server
> database." ... etc. Restoring the original Network Service credentials
> restores functionality.
> So how do I make changes such that subscriptions will run under a new
> account? And is there -any- way to -display- whatever current credentials
> RS
> has in use in various areas? (UserID would suffice - not looking for
> password or a security hole here).
> Going bananas in Kansas,
> JN
>|||Thanks very much, Daniel. That did the trick.
"Daniel Reib [MSFT]" wrote:
> When you change the windows service user you are most likely getting the
> same error you see when you change the iis users, only the error only shows
> in the service log file. To get around this issue, first use rskeymgmt to
> export the symmetric key. Change the user of the windows service and then
> user rskeymgmt to import the symmetric key. This will get you running as
> the new user. Monitor the ReportServerService<timestamp>.log file to see if
> there are any errors reported by the service.
> --
> -Daniel
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "J Noble" <JNoble@.discussions.microsoft.com> wrote in message
> news:D46A1BED-9E9A-4F61-80C6-828C6623E27F@.microsoft.com...
> > Trying to get e-mail subscriptions working. Suspect problem due to User
> > being "Network Service" and not having sufficient rights. Not sure how to
> > change. Both the ReportServer -service-, and the Application Pool I have
> > setup in IIS (6.0) are running under "Network Service". If I change
> > credentials on the service to an AD account, nothing bad apparently
> > happens,
> > but subscriptions still not working. Changing the Identity on the App
> > Pool
> > causes the site to crash with error "The report server cannot decrypt the
> > symmetric key used to access sensitive or encrypted data in a report
> > server
> > database." ... etc. Restoring the original Network Service credentials
> > restores functionality.
> >
> > So how do I make changes such that subscriptions will run under a new
> > account? And is there -any- way to -display- whatever current credentials
> > RS
> > has in use in various areas? (UserID would suffice - not looking for
> > password or a security hole here).
> >
> > Going bananas in Kansas,
> > JN
> >
>
>