HOW TO: Configure Kerberos authentication for Microsoft CRM 3.0 and Microsoft SQL Server Reporting Services

If you are running Microsoft SQL Server Reporting Services on a computer that does not have either Microsoft CRM 3.0 Server or Microsoft SQL Server also installed, you need to use double-hop Kerberos authentication to list reports and to view a report.

In order for double-hop Kerberos authentication to occur, trust for delegation must be set up to pass the user’s credentials between computers. In some configurations, Microsoft CRM Server Setup can configure trust for delegation for you. In other configurations, this must be done manually.

If you are using one of the following configurations, no additional authentication tasks are required:

• Microsoft SQL Server and Microsoft CRM Server are on the same server.
• Microsoft SQL Server and Microsoft CRM Server are on different servers, and all the following conditions are true:
  • Microsoft CRM is installed with a Domain Administrator account instead of an account that has just Local Administrator privileges.
  • When Microsoft CRM and Reporting Services are set up, the service account is set to Network Service or Local System.
  • Host headers are not used to identify the Microsoft CRM Web site or the default Web site where Reporting Services is installed.

If your configuration does not match either of the above descriptions, you should download and read the article: http://www.microsoft.com/downloads/details.aspx?FamilyID=51bf9f20-bd00-4759-8378-b38eefda7b99&displaylang=en (http://www.microsoft.com/downloads/details.aspx?FamilyID=51bf9f20-bd00-4759-8378-b38eefda7b99&displaylang=en)