AD Synch in Sql Reporting Services

Is there a way to do an AD Synch in Sql Reporting Services?
In short Groups have been created in AD. Roles were also setup in SQL
Reporting for the folder that we wanted permissions applied to.
When I add a person to a global group in AD, the permissions will not work
in SQL Reporting. The user does not see the reports. If I add the person
individually â' ex. User 123 â' and give them the same permissions as the
Global Group, the user sees the folder.
We want to set up different departments with unique folders for their
reports. I want to be able to add Global Group roles to each folder. I
restarted the IIS services â' still did not work. I also restarted the SQL
reporting services â' still did not work.
--
Rob BowersHow often does you AD forest synchronize between Domain Controllers?
Check if the new groups are available on all domain controllers, and if all
the members are in the groups. SOmetimes the synchronization / replication
between dcs can be a bit slow, and if your Reporting Services server checks
access rights against a dc that haven't received the changes, it won't allow
access.
Kaisa M. Lindahl Lervik
"Rob Bowers" <RobBowers@.discussions.microsoft.com> wrote in message
news:12DE78CF-BE2C-4FC5-8111-DD3D9EF826DF@.microsoft.com...
> Is there a way to do an AD Synch in Sql Reporting Services?
> In short Groups have been created in AD. Roles were also setup in SQL
> Reporting for the folder that we wanted permissions applied to.
> When I add a person to a global group in AD, the permissions will not work
> in SQL Reporting. The user does not see the reports. If I add the person
> individually - ex. User 123 - and give them the same permissions as the
> Global Group, the user sees the folder.
> We want to set up different departments with unique folders for their
> reports. I want to be able to add Global Group roles to each folder. I
> restarted the IIS services - still did not work. I also restarted the SQL
> reporting services - still did not work.
> --
> Rob Bowers|||How does the synch get "triggered"
If I manually wanted to do an AD synch to SQL Reporting Services...how would
I do this?
"Kaisa M. Lindahl Lervik" wrote:
> How often does you AD forest synchronize between Domain Controllers?
> Check if the new groups are available on all domain controllers, and if all
> the members are in the groups. SOmetimes the synchronization / replication
> between dcs can be a bit slow, and if your Reporting Services server checks
> access rights against a dc that haven't received the changes, it won't allow
> access.
> Kaisa M. Lindahl Lervik
> "Rob Bowers" <RobBowers@.discussions.microsoft.com> wrote in message
> news:12DE78CF-BE2C-4FC5-8111-DD3D9EF826DF@.microsoft.com...
> > Is there a way to do an AD Synch in Sql Reporting Services?
> >
> > In short Groups have been created in AD. Roles were also setup in SQL
> > Reporting for the folder that we wanted permissions applied to.
> >
> > When I add a person to a global group in AD, the permissions will not work
> > in SQL Reporting. The user does not see the reports. If I add the person
> > individually - ex. User 123 - and give them the same permissions as the
> > Global Group, the user sees the folder.
> >
> > We want to set up different departments with unique folders for their
> > reports. I want to be able to add Global Group roles to each folder. I
> > restarted the IIS services - still did not work. I also restarted the SQL
> > reporting services - still did not work.
> >
> > --
> > Rob Bowers
>
>|||This article describes how to "Force replication over a connection"
http://technet2.microsoft.com/WindowsServer/en/library/2d89f34a-b6db-4b8d-ab9f-c081c53658d61033.mspx?mfr=true
You probably have to talk to the infrastructure team at your company, they
might be a bit reluctant to allow a developer mess around in their AD tools.
;)
Replication usually occurs at scheduled intervals between the Domain
Controllers. Reporting Services just uses what ever infomation that is
available to it. So you don't synchronize AD and Reporting Services, you
synchronize the different domain controllers in your AD domain, and then
Reporting Services will sort itself out. If some of the domain controllers
can't replicate or synchronize, your infrastructure team probably has a
bigger problem on their hands than just some users not seeing their
reports...
Kaisa M. Lindahl Lervik
"Rob" <Rob@.discussions.microsoft.com> wrote in message
news:0AD8DFD7-3E7D-4135-B8D8-7B1C0AD2F686@.microsoft.com...
> How does the synch get "triggered"
> If I manually wanted to do an AD synch to SQL Reporting Services...how
> would
> I do this?
> "Kaisa M. Lindahl Lervik" wrote:
>> How often does you AD forest synchronize between Domain Controllers?
>> Check if the new groups are available on all domain controllers, and if
>> all
>> the members are in the groups. SOmetimes the synchronization /
>> replication
>> between dcs can be a bit slow, and if your Reporting Services server
>> checks
>> access rights against a dc that haven't received the changes, it won't
>> allow
>> access.
>> Kaisa M. Lindahl Lervik
>> "Rob Bowers" <RobBowers@.discussions.microsoft.com> wrote in message
>> news:12DE78CF-BE2C-4FC5-8111-DD3D9EF826DF@.microsoft.com...
>> > Is there a way to do an AD Synch in Sql Reporting Services?
>> >
>> > In short Groups have been created in AD. Roles were also setup in SQL
>> > Reporting for the folder that we wanted permissions applied to.
>> >
>> > When I add a person to a global group in AD, the permissions will not
>> > work
>> > in SQL Reporting. The user does not see the reports. If I add the
>> > person
>> > individually - ex. User 123 - and give them the same permissions as the
>> > Global Group, the user sees the folder.
>> >
>> > We want to set up different departments with unique folders for their
>> > reports. I want to be able to add Global Group roles to each folder.
>> > I
>> > restarted the IIS services - still did not work. I also restarted the
>> > SQL
>> > reporting services - still did not work.
>> >
>> > --
>> > Rob Bowers
>>