Members of the SMS Reporting Users group cannot view SMS reports in Systems Management Server 2003 (887015)


The information in this article applies to:

  • Microsoft Systems Management Server 2003

SYMPTOMS

In Microsoft Systems Management Server (SMS) 2003, you add a user to the SMS Reporting Users group. When the user tries to access SMS reports, the user receives an error message that is similar to the following:
Report ReportID is unavailable. Either you do not have permissions to view the report or the report does not exist.

CAUSE

The SMS Reporting Users domain local group has not been assigned class security rights to the Report object.

RESOLUTION

To resolve this issue, assign read security rights to the Report object for the SMS Reporting Users group. To do this, follow these steps:
  1. Click Start, point to All Programs, point to Systems Management Server, and then click SMS Administrator Console.
  2. Expand Site Database (SiteCode - SiteName), right-click Security Rights, point to New, and then click Class Security Right.
  3. In the User Name box, type domain\SMS Reporting Users.
  4. In the Class box, click Report.
  5. In Permissions, click to select Read, and then click OK.

MORE INFORMATION

The Systems Management Server 2003 Concepts, Planning, and Deployment Guide, and Scenarios and Procedures for Microsoft Systems Management Server 2003: Security state that SMS reports do not use SMS object security unless the administrator views the report from the SMS Administrator console. However, this statement is incorrect. SMS reports always use SMS object security.

Note The steps that are described in the "Resolution" section will let members of the SMS Reporting Users group read all SMS reports. You can restrict the reports that a user or a group can read by assigning additional security rights for instances of the class object.

For additional information about how to assign class rights and instance rights, click the following article number to view the article in the Microsoft Knowledge Base:

199869 Assigning class and instance security rights with the SMS User Wizard

REFERENCES

For additional information about how to obtain the Systems Management Server 2003 Concepts, Planning, and Deployment Guide and about how to obtain other technical resources for Systems Management Server 2003, click the following article number to view the article in the Microsoft Knowledge Base:

828368 List of technical resources for Systems Management Server 2003

To obtain Scenarios and Procedures for Microsoft Systems Management Server 2003: Security, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=3d81b520-a203-4376-a72d-fd34a6c4a44c&DisplayLang=en

Modification Type:MinorLast Reviewed:6/13/2005
Keywords:kbtshoot kbwinservperf kbMgmtServices kbprb KB887015 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.