Management reporter user in active directory?

(0) Share

Report

Posted on by george.harmon

520

I can add a new user and grant the user access to the company, but then I get the error " the following could not be completed due to a failure on the server". after the user has been created. The intial user has administrative rights and is a top level domain user.

The user I created can read the active directory.

What else could be the cause for this error?

*This post is locked for comments

All responses (5)

Answers (0)

Ryan Sandness on at

Like (0)

Report

Re: Management reporter user in active directory?

George,

That could be the issue. Can you try adding the user with and without the alias? Instead try typing in the username in security as

MERGONGROUP\username

and

internal.companyabc.com\username

My last suggestion would be to go back and set the username in the IIS Application Pool to the other form of the username to see if it is having problems interpreting the alias.

If that doesn't work you may have to open a support case where someone can remote in and review the settings in more detail.

Thanks

Ryan
george.harmon 520 on at

Like (0)

Report

Re: Management reporter user in active directory?

I know 1 and 2 are ok,

I believe the issue might be #3. They have an alias called internal.companyabc.com so the user listed is actually listed as internal.companyabc.com\username
Ryan Sandness on at

Like (0)

Report

Re: Management reporter user in active directory?

George,

Thanks for the update. If you are getting the error on all users, then I think there is an issue reading active directory for some reason or adding users to the MR database. I am going to ask a few questions here, but I don't know that I would list out specific accounts on a forum. It may be best to submit a support incident. Here are a few things I suggest checking:

1. Open the Services Control Panel where SQL Server is. See if the user running SQL Server is a

* domain user

* local user

* network service

If this is a local user, that could potentially pose a problem.

2. Check the user running the Management Reporter Application Pool in IIS. Is this a domain user, local user, or network service account?

3. Do you have multiple domains at all? Are all users MERGONGROUP\ accounts ,or are there multiple domains at play?

4, Do you have an alias for your domain?

For example, you may login as MERGONGROUP\administrator but your domain under computer properties may be MGROUP.local.

Thanks

Ryan
george.harmon 520 on at

Like (0)

Report

Re: Management reporter user in active directory?

1. It is the same error for all users

2. I belive so, I am double checking with IT

3. I can and it gives the following error which makes no sense

Microsoft.Dynamics.Performance.Common.ReportingServerFailedException: The operation could not be completed due to a failure on the server.

at Microsoft.Dynamics.Performance.Common.Service.ClientBase.Execute[TExec](Func`1 executor, Action`1 handler)

at Microsoft.Dynamics.Performance.Reporting.Security.Client.SecurityProxy.GetPrincipal(Guid id, Boolean includeInactivePrincipal)

at Microsoft.Dynamics.Performance.Reporting.ReportDesigner.UserManagementDialog.UserManagementDialog_Load(Object sender, EventArgs e)

Message: System.Runtime.InteropServices.COMException (0x80072020): An operations error occurred.

at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)

at System.DirectoryServices.DirectoryEntry.Bind()

at System.DirectoryServices.DirectoryEntry.get_AdsObject()

at System.DirectoryServices.PropertyValueCollection.PopulateList()

at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)

at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)

at Microsoft.Dynamics.Performance.Reporting.Security.Service.SecurityService.<>c__DisplayClassf.<GetPrincipal>b__e()

at Microsoft.Dynamics.Performance.Reporting.Security.Service.SecurityService.<>c__DisplayClass1`1.<Execute>b__0()

at Microsoft.Dynamics.Performance.Common.Service.ServiceBase.BaseExecute[T](Func`1 executor)

Component: Microsoft.Dynamics.Performance.Reporting.Security.Service.SecurityService

User: MERGONGROUP\acumen

For more information, see Help and Support Center at
Ryan Sandness on at

Like (0)

Report

Re: Management reporter user in active directory?

Hi George,

A few questions:

1. Does just adding this specific user give the error, or do other users give the same errors as well?

2. Does the user you are adding have all of the name attributes filled out in active directory? i.e. first name, last name, fullname?

3. Can you check the Windows Event Viewer Application log (probably on desktop, but could be server) for Management Reporter events. See if you can get a specific error from there.

Thanks

Ryan