SSRS File Share provider in a Workgroup

Today I was a lurker in a “news to me” conversation about the SSRS file share delivery provider – thought I’d pass this interesting (to me) tidbit along.

When using the file share extension on a box which was NOT part of a domain, the user kept on getting the following error when trying to process a subscription:

Failure writing file: A logon error occurred when attempting to access the file share. The user account or password is not valid.

The user did standard testing and found that the file share was accessible from the console using the same username/password, etc.

Turns out that file share delivery provider doesn’t currently support challenge-response authentication. Instead, It impersonates the user before making the connection to the underlying machine. Because of this, in a workgroup environment, the file share deliveries will not work.

Thanks to Neeraja Divakaruni!

Comments (4)

  1. Randy Fitzgerald says:

    We recently moved SSRS to a more powerful box. On the old box subscriptions worked correctly for users using the file share delivery. On the new box file share delivery fails with this error message "An impersonation error occurred using the security context of the current user." The event log logs the error as Failure Audit and says the user is NT Authority/System. The logon failure reason is "The user has nt been granted the requested logon type at this machine."

    Any ideas as to deciphering which machine and which user??

  2. Randy Fitzgerald says:

    Issue resolved! Security group "Users" did not have permission to log on to the target box. The service account SSRS is running as is in the "Users". So when attempting to save a file impersonation of the authenticated user to the SSRS box would not be impersonated to the target box.

  3. Scott Goode says:

    If the SSRS server and the server with the share are in different domains you can use pass-through authentication.  Create a local account on both servers with the same user name and password.  Enter the username on the subscription with out the domain name or back slash and the common password.