After you make changes to your domain, you no longer have permission to access Management Reporter

Symptoms
After making changes to your domain, users are not able to access Management Reporter.
Cause
Windows SID has changed for the user and is no longer valid.
Resolution
Update Windows SID for a user that has the Administrator role in Management Reporter.


1. Log onto the SQL server as one of the users that has the Administrator role in Management Reporter.


2. Click Start | Run and enter CMD
a. At the Dos command type:
   Whoami /user
b. In the DOS window, right-click, select “Select All”, and then press Enter.
c. Paste the information into Notepad.


3. Open SQL Server Management Studio and run the following SQL statement, against the Management Reporter database. 

a. Management Reporter 2012 CU13 and later

SELECT A.UserName, B.Name, CASE A.ROLETYPE WHEN 2 THEN 'VIEWER' WHEN 3 THEN 'GENERATOR' WHEN 4 THEN 'DESIGNER' WHEN 5 THEN 'ADMINISTRATOR' END AS SecurityRole, A.WindowsSecurityIdentifier, A.UserID, CASE A. AccountDisabled When 0 Then 'Enabled' When 1 Then 'Disabled'End AS AccountStatus FROM   Reporting.SecurityUser A JOIN Reporting.SecurityPrincipal B ON A.USERID = B.ID ORDER BY A.UserName


b. Management Reporter CU12 or earlier.


SELECT A.UserName, B.Name, CASE A.ROLETYPE WHEN 2 THEN 'VIEWER' WHEN 3 THEN 'GENERATOR' WHEN 4 THEN 'DESIGNER' WHEN 5 THEN 'ADMINISTRATOR' END AS SecurityRole, A.WindowsSecurityIdentifier, A.UserID, CASE A. AccountDisabled When 0 Then 'Enabled' When 1 Then 'Disabled'End AS AccountStatus FROM   SECURITYUSER A JOIN SECURITYPRINCIPAL B ON A.USERID = B.ID ORDER BY A.UserName



4. Note the UserID.

5. Make a backup of your Management Reporter database and then run the following SQL statement.  You must modify the statement to include the new user’s Windows SID and their existing UserID

a. Management Reporter CU13 or later

UPDATE Reporting.SecurityUser SET WindowsSecurityIdentifier = '<copy/paste new Windows SID>' WHERE UserID = '<paste UserId from step4>'


b. Management Reporter CU12 or earlier

UPDATE SecurityUser SET WindowsSecurityIdentifier = '<copy/paste new Windows SID>' WHERE UserID = '<paste UserId from step4>'


6. Run the following SQL statement, modifying the statement to include the new user’s domain\alias

a. Management Reporter 2012 CU13 or later.

UPDATE Reporting.SecurityPrincipal SET Name = '<enter new domain\alias>' WHERE ID = '<paste UserId from step4>'



b. Management Reporter 2012 CU12 or earlier

UPDATE SecurityPrincipal SET Name = '<enter new domain\alias>' WHERE ID = '<paste UserId from step4>' 


7. The user should now be able to log into Management Reporter. To update the other users, click Security. Click Users and then remove the users that are unable to access Management Reporter.  You can then add the users back with their new domain name.   

 
  


More information
Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.
Properties

Article ID: 3163587 - Last Review: 05/13/2016 20:32:00 - Revision: 1.0

Microsoft Management Reporter 2012

  • kbmbsmigrate kbsurveynew KB3163587
Feedback