I'm trying to give access to our developers to SQL 2012 Integration Services without granting server admin, following the procedure below.
But it doesn't work. Our developer gets and Access is denied error:
Connecting to the Integration Services service on the computer "XXX" failed with the following error: "Access is denied."
By default, only administrators have access to the Integration Services service. On Windows Vista and later, the process must be running with administrative privileges in order to connect to the Integration Services service. See the help topic for information on how to configure access to the service.
Article is for 2017 but I've seen another for 2008 so I assume it's the same for 2012.
Any help would be greatly appreciated!
Eliminating the "Access Is Denied" Error
When a user without sufficient rights attempts to connect to an instance of Integration Services on a remote server, the server responds with an "Access is denied" error message. You can avoid this error message by ensuring that users have the required DCOM permissions.
To configure rights for remote users on Windows Server 2003 or Windows XP
- If the user is not a member of the local Administrators group, add the user to the Distributed COM Users group. You can do this in the Computer Management MMC snap-in accessed from the Administrative Tools menu.
- Open Control Panel, double-click Administrative Tools, and then double-click Component Services to start the Component Services MMC snap-in.
- Expand the Component Services node in the left pane of the console. Expand the Computers node, expand My Computer, and then click the DCOM Config node.
- Select the DCOM Config node, and then select SQL Server Integration Services 11.0 in the list of applications that can be configured.
- Right-click on SQL Server Integration Services 11.0 and select Properties.
- In the SQL Server Integration Services 11.0 Properties dialog box, select the Security tab.
- Under Launch and Activation Permissions, select Customize, then click Edit to open the Launch Permission dialog box.
- In the Launch Permission dialog box, add or delete users, and assign the appropriate permissions to the appropriate users and groups. The available permissions are Local Launch, Remote Launch, Local Activation, and Remote Activation. The Launch rights grant or deny permission to start and stop the service; the Activation rights grant or deny permission to connect to the service.
- Click OK to close the dialog box.
- Under Access Permissions, repeat steps 7 and 8 to assign the appropriate permissions to the appropriate users and groups.
- Close the MMC snap-in.
- Restart the Integration Services service.