Looking at the options...

Triggers won't work because they won't capture SELECT statements.

Trace will work, but the DBA can easily stop it. Also, how will you get the data back into...

Is the architecture the same? In other words:

client -> reporting services server -> sql server

Where each of these are on separate computers? Or are they combined reporting services & sql...

timothyawiseman (9/2/2010)

---

It is definitely good to have this pointed out since a lot of people do not realize it, and this was well written and clear.

From my standpoint, it tends...

No. As a securityadmin,...

What operating system are you on? SQL Server 2008 can take advantage of service isolation in Windows Vista and later operating systems. This assigns a SID to the service and...

jswong05 (7/27/2010)

---

Harold Buckner (12/11/2008)

---

Bradley Deem (12/11/2008)

I have the EXACT same problem with Kerberos. Resulting in the NT AUTHORITY\ANONYMOUS LOGON. It does work though, because I'm able to connect...

The SQL Server Reporting Services application has its own security model that is separate from any database access. The database access still has to be there, and you'll see how...

Do you have an option of rolling back the patches? If you can and do and everything is fixed, sounds like a call on Microsoft's dime.

With Kerberos in play, you've actually got a two hop situation, even if you're local. Kerberos keys on the name. So...

if you are talking about a cluster, here's how things...

This is a three part process. Let's look at each.

1) Active Directory Group Membership

There are no tools and commands from within SQL Server that do this correctly, especially when nested...

I don't believe that there is way with the securables to only allow viewing of certain database names in the list. Therefore, you'll need to restore the VIEW ANY DEFINITION...

OK, it's not a bug. It's expected behavior. There will be an update to Books Online accordingly to clarify things.

Because securityadmin has the ability to grant any server permission, it...

When you check the Security event log on the physical node where the SQL Server instance is failing, can you correlate a successful Kerberos login in the OS' security event...

This should affect both, unless one has been setup for Kerberos authentication / delegation properly and the other hasn't. One instance isn't failing over to another node on the cluster...

This should be filed as a bug. Checking into it.