Joe the Business Intelligence Guy

A journey through the design and delivery of business intelligence solutions.

Changing Service Account of SQL Server™ Report Server

The following is adapted from Microsoft KB Article 958999

In SQL Server™ 2005 Reporting Services, you can configure the report server to use the Service Credentials type for the database connection. You should not try to change the service account by using the Services.msc management console, as the operation may corrupt the encryption key that is used to protect sensitive information that is stored in the report server database. Microsoft recommends that you change the service account for the report server by using one of the following methods:

Method 1

Use Reporting Services Configuration Manager to change the service account for the report server.

Method 2

Use the Rsconfig.exe utility to change the service account for the report server. To do this, run the following command:

Rsconfig –c –s Server Name -d Database Name -u User Name -p Password -a Authentication Method

Note If the instance of SQL Server that hosts the report server database is a named instance, add the –i switch to specify the instance name.

Method 3

If method 1 and method 2 do not work, use the rskeymgmt utility. When you use this utility, you must back up the encrypted keys before you change the user account that is used to run the Report Server Windows service or the Report Server Web service, and then you must apply the keys that were backed up. To do this, follow these steps on the computer that is running the service:

1.       Start the Report Server Windows service and the Report Server Web service by using the user account that the service was running successfully for.

2.       Use the rskeymgmt command-line utility to back up the encryption keys. To do this, run the following command at the command prompt:

RSKeyMgmt -e -f FileName -p StrongPassword

3.       Use the rskeymgmt command-line utility to remove the reference to the existing keys. To do this, run the following command at the command prompt:

rskeymgmt -r InstallationID

Note Replace the InstallationID placeholder by using the installation ID that is provided in the InstallationID setting of the RSReportServer.config file. By default, the RSReportServer.config file is stored in the InstallationDrive :\Program Files\Microsoft SQL Server\MSSQL\Reporting Services\ReportServer folder.

4.       Stop Internet Information Services (IIS).

5.       Stop the Report Server Windows service.

6.       Change the user account that is used to run the Report Server Windows service or the Report Server Web service to the user account that you want.

7.       Start IIS.

8.       Start the Report Server Windows service.

9.       Use the rskeymgmt command-line utility to apply the encryption keys that were backed up in step 2. To do this, run the following command at the command prompt:

rskeymgmt -a -f FileName -p StrongPassword

Note Replace the FileName placeholder and the StrongPassword placeholder with the file name and the password that you used to back up the symmetric encryption keys in step 1.

Advertisements

Written by Joe Salvatore

August 27, 2009 at 4:53 pm

%d bloggers like this: