SCOM 2007 R2 : Where are my reports?

  • Article

So you have followed the SCOM 2007 R2 installation guides to the letter.  You've installed SQL reporting services and installed the SCOM reporting feature.  However, you just dont have any reports in SCOM. 

Check your event logs for the following error:

Date: date
Source: OpsMgr SDK Service
Time: time
Category: None
Type: Error
Event ID: 26319
User: N/A
Computer: Computername
Description: An exception was thrown while processing GetUserRolesForOperationAndUser for session id uuid:UUID.
Exception Message: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) Full Exception: System.UnauthorizedAccessException: Access is denied. (Exception fro HRESULT: 0x80070005 (E_ACCESSDENIED))
Exception Message: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) Full Exception: System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) at Microsoft.Interop.Security.AzRoles.IAzApplication2.InitializeClientContextFr omStringSid(String SidString, Int32 lOptions, Object varReserved) at Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AzManHelper.GetScopedRoleAssignmentsForUser(IList`1 roleNames, String userName) at Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AuthManager.GetUserRole sForOperationAndUser(Guid operationId, String userName) at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccess.GetUserRol esForOperationAndUser(Guid operationId, String userName) at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessTieringWrap per.GetUserRolesForOperationAndUser(Guid operationId, String userName) at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessExceptionTr acingWrapper.GetUserRolesForOperationAndUser(Guid operationId, String userName)

 

The solution is actually quite simple.  This problem occurs if one of the following conditions is true:

  • You install the Operations Manager 2007 Reporting feature in a Window Server 2003 domain environment, and the Permissions compatible only with Windows 2000 or Windows Server 2003 operating systems option is enabled.
  • You install the Operations Manager 2007 Reporting feature in a Windows 2000 domain environment, and the Permissions compatible only with Windows 2000 servers option is enabled

To resolve this problem, add the SDK service account to the Windows Authorization Access group. To do this, follow these steps:

  1. Click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. In Active Directory Users and Computers, click Builtin, and then double-click Windows Authorization Access Group.
  3. Click the Members tab, and then add the SDK service account to the members list.

Reference : https://support.microsoft.com/kb/938627/en-us

However, even if your domain is running Windows Server 2008 R2, you can still have the problem though.  So add the SDK to the Windows Authorization Access Group and the problem should rectify itself pretty quickly.  Just give the reports some time to pull in data though.

Side note : If you are going to use SQL 2008 R2 for SCOM 2007 R2 then make sure you follow https://support.microsoft.com/kb/2425714.