Hello,

When SSRS components are loaded on a server other than the DB server and you are using Windows authentication for the reports, you'll run into the 'Double Hop', 'Kerberos' issue.

Couple of things you'll need to resolve this.

Have your domain admin set the SPN's (Service Principal Name) for the domain users running both the SQL Server and SSRS services.

We make sure we inlcude the SQL Ports in our entries.

Once the SPN's have been set, you'll need to have them update AD to allow these same users delegation.

Under Delegation - Check off 'Trust this user for delegation for any service(Kerberos Only)'

Under Account - Confirm that the following option is not selected: Account is sensitive and cannot be delegated.

Update the RSReportServer.config file as such(Partial copy):

<AuthenticationTypes>

<RSWindowsNegotiate />

<RSWindowsNTLM />

Our notes have a reboot of the servers afterwards.

Lot's of info in SSC and on-line regarding this and SPN's and delegation which should help you out.