Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. After you make changes to your domain, you no longer have permission to access Management Reporter

After you make changes to your domain, you no longer have permission to access Management Reporter

View products that this article applies to.

Symptoms

After making changes to your domain, users are not able to access Management Reporter.

↑ Back to the top

Cause

Windows SID has changed for the user and is no longer valid.

↑ Back to the top

Resolution

Update Windows SID for a user that has the Administrator role in Management Reporter.


1. Log onto the SQL server as one of the users that has the Administrator role in Management Reporter.


2. Click Start | Run and enter CMD
a. At the Dos command type:
   Whoami /user
b. In the DOS window, right-click, select “Select All”, and then press Enter.
c. Paste the information into Notepad.


3. Open SQL Server Management Studio and run the following SQL statement, against the Management Reporter database. 

a. Management Reporter 2012 CU13 and later

SELECT A.UserName, 
B.Name, 
CASE A.ROLETYPE 
WHEN 2 THEN 'VIEWER' 
WHEN 3 THEN 'GENERATOR' 
WHEN 4 THEN 'DESIGNER' 
WHEN 5 THEN 'ADMINISTRATOR' 
END AS SecurityRole, 
A.WindowsSecurityIdentifier, 
A.UserID, 
CASE A. AccountDisabled 
When 0 Then 'Enabled' 
When 1 Then 'Disabled'
End AS AccountStatus 
FROM   Reporting.SecurityUser A 
JOIN Reporting.SecurityPrincipal B 
ON A.USERID = B.ID 
ORDER BY A.UserName


b. Management Reporter CU12 or earlier.


SELECT A.UserName, 
B.Name, 
CASE A.ROLETYPE 
WHEN 2 THEN 'VIEWER' 
WHEN 3 THEN 'GENERATOR' 
WHEN 4 THEN 'DESIGNER' 
WHEN 5 THEN 'ADMINISTRATOR' 
END AS SecurityRole, 
A.WindowsSecurityIdentifier, 
A.UserID, 
CASE A. AccountDisabled 
When 0 Then 'Enabled' 
When 1 Then 'Disabled'
End AS AccountStatus 
FROM   SECURITYUSER A 
JOIN SECURITYPRINCIPAL B 
ON A.USERID = B.ID 
ORDER BY A.UserName



4. Note the UserID.

5. Make a backup of your Management Reporter database and then run the following SQL statement.  You must modify the statement to include the new user’s Windows SID and their existing UserID

a. Management Reporter CU13 or later

UPDATE Reporting.SecurityUser 
SET WindowsSecurityIdentifier = '<copy/paste new Windows SID>' 
WHERE UserID = '<paste UserId from step4>'


b. Management Reporter CU12 or earlier

UPDATE SecurityUser 
SET WindowsSecurityIdentifier = '<copy/paste new Windows SID>' 
WHERE UserID = '<paste UserId from step4>'


6. Run the following SQL statement, modifying the statement to include the new user’s domain\alias

a. Management Reporter 2012 CU13 or later. 

UPDATE Reporting.SecurityPrincipal 
SET Name = '<enter new domain\alias>' 
WHERE ID = '<paste UserId from step4>'



b. Management Reporter 2012 CU12 or earlier

UPDATE SecurityPrincipal 
SET Name = '<enter new domain\alias>' 
WHERE ID = '<paste UserId from step4>'


7. The user should now be able to log into Management Reporter. To update the other users, click Security. Click Users and then remove the users that are unable to access Management Reporter.  You can then add the users back with their new domain name.   

 
  


↑ Back to the top

Keywords: kbmbsmigrate, kbmbspartner, kbsurveynew, kb

↑ Back to the top

Article Info
Article ID : 3163587
Revision : 1
Created on : 1/7/2017
Published on : 5/13/2016
Exists online : False
Views : 365