Select the product you need help with

INF: Connect to Analysis Services By Using "SSPI = Anonymous" on Windows XP

Article ID: 324040 - View products that this article applies to.

This article was previously published under Q324040

SUMMARY

This article describes how to enable an Anonymous Logon group (NT AUTHORITY\ANONYMOUS) to access Microsoft SQL Server 2000 Analysis Services when it is installed on a computer that is running Windows XP.

In Windows XP local security policy, the Anonymous Logon group is no longer a member of the Everyone group. Although the Everyone group has permissions to access the Analysis Services OLAP database, the anonymous users cannot connect to Analysis Services when it is installed on a computer that is running Windows XP.

Back to the top | Give Feedback

MORE INFORMATION

Although the Everyone group has permissions to connect to Analysis Services when it is installed on a computer that is running Windows XP, the client application cannot obtain metadata or query Analysis Services cubes when the SSPI=anonymous parameter is used in the connection string.

To enable an anonymous user to access Analysis Services, use either of the following methods.

Method 1

Explicitly add the NT AUTHORITY\ANONYMOUS LOGON account to an OLAP database role. To do so, follow these steps:

In the Analysis Manager tree pane, right-click the database, and then click Manage Roles.
In the Database Role Manager dialog box, select the <role> that you want to change, and then click Edit.
In the Edit a Database Role dialog box, click Add.
In the Add Users and Groups dialog box, type NT AUTHORITY\ANONYMOUS LOGON in the Add Names box, and then click OK.
In the Edit a Database Role dialog box, click OK.
In the Database Role Manager dialog box, click Close.

Note Use this work around if you want to grant separate sets of permissions to anonymous users and to the local Everyone group.

Method 2

Enable the "Network Access: Let Everyone permissions apply to anonymous users" local security policy. To do so, follow these steps:

Click Start, and then click Control Panel.
In Control Panel, click Performance and Maintenance, click Administrative Tools, and then double-click Local Security Policy.
Under Local Policies\Security Options, and then double-click Network Access: Let Everyone permissions apply to anonymous users.
Click Enabled, and then click OK.