Configuring a SQL Server report services deployment

Follow these instructions if you're creating a new report services deployment using SQL Server or reconfiguring an existing SQL Server report services deployment.

To configure report services with a SQL Server database:

  1. If you need to start the Centrify Report Services configuration wizard, go to the Start menu > All Programs > Centrify Infrastructure Services 2020 > Report Services, and choose Configuration Wizard.

    If you’re continuing from the Centrify Management Services installer, the installer started the configuration wizard for you.

  2. On the Welcome screen, click Next to continue.

  3. If you have already set up report services, the Reconfiguring Report Services screen displays. Select Reconfigure and click Next to continue.
  4. On the Database Type screen, select SQL Server and click Next to continue.
  5. Configure the SQL Server database connection:

    1. Specify the SQL Server instance name.

      Either specify a new SQL Server instance name, or select an existing SQL Server instance name. (The default instance name is CENTRIFYSUITE.)

      The SQL Server instance name must be 16 characters or less, the name cannot begin with an underscore (_) or dollar sign ($), and the instance name cannot contain any of the following special characters: a blank space, backslash (\), comma (,), colon (:), semi-colon (;), single quotation mark ('), ampersand (&), hyphen (-), number sign (#), or at sign (@).

      If you select an existing SQL Server instance, be aware that the SQL Server browser service must be running if SQL Server is a named instance or using dynamic ports. If for some reason the SQL Server service can’t be started, you need to provide the SQL Server instance name and port number in order to connect to the database successfully. For additional details, see https://technet.microsoft.com/en-us/library/ms181087(v=sql.105).aspx.

      Centrify recommends that you use a new SQL Server instance, if possible. For more information, see Impact of using a new or existing SQL Server instance.

    2. The default database name is Report. You can change this, if desired.

      The SQL Server database name must be 16 characters or less, the name cannot contain any of the following special characters: backslash (\), forward slash (/), colon (:), asterisk (*), question mark (?), double quotes (“), less-than sign (<), greater-than sign (>), pipe (|), comma (,) or single quotation mark (').

    3. Click Next to continue.
    4. If you selected to install a new SQL Server instance, click Browse to navigate to and specify the location of the SQL server installation executable (*.exe file).

      The installer program installs SQL Server 2008 R2 Express with Advanced Services.

      You can download the SQL Server Express with Advanced Services package directly from Centrify, for your convenience. Or, download the package from Microsoft.



      Please ensure to download the file name SQLEXPRADV_x64_ENU.exe (1,008.6 MB in size) as this is the one containing the 64-bit edition of SQL 2008 R2 with the necessary additional components to support Centrify Reporting Services.

    5. Click Next to continue.

  6. Deploy the reports:

    1. In the SQL Server Reporting Services screen, specify whether to deploy the authentication, privilege elevation, and audit and monitoring services reports (or not).

      If you plan to use a reporting solution other than Microsoft SQL Server Reporting Services, do not deploy the reports.

      This screen also lists the URLs for the Reporting Web Service and Report Manager. You’ll use these URLs later to access to the reports.

      If you’re using a production server of SQL Server and SSRS, you can configure them to use HTTPS. For details, see Microsoft SQL Server and SSRS documentation, such as https://msdn.microsoft.com/en-us/library/ms345223.aspx.

      The configuration wizard populates the report URLs automatically. If you had specified to use an existing SQL Server instance, the configuration wizard retrieves the existing web service URL and report manager URL for your SQL Server instance.

      For an existing SQL Server instance, you can open the Microsoft Reporting Services Configuration Manager to view the Web Service and Report Manager URLs.

    2. Click Next to continue.

  7. Choose domain or zone reporting:

    Specify whether you want to choose data for reporting based on domains or zones. The default is domain-based reporting.

    Click Next to continue. If you selected domain-based reporting, proceed to the next step. For zone-based reporting, go to Step 8.

  8. If you selected domain-based reporting:
    1. In the Monitored Domain(s) screen, you can review and edit the list of domains that will be included for reporting. Add or remove domains as desired.

      For each domain, the configuration wizard lists the domain name and the domain controller name.

    2. Click Next to continue.

  9. If you selected zone-based reporting and you use hierarchical zones:

    1. If you want data from all zones, select Monitor all hierarchical zones from forest(s). You can add or edit forests by clicking Edit and then adding or removing forests.
    2. Or, if you want to report data from specific zones, select Monitor only specific hierarchical zones.
    3. Click Edit.

      The Specify Forest for zone selection dialog box opens.

    4. Enter the forest name where the desired zones are and click OK.

      The Edit Monitored Hierarchical Zones dialog box opens.

    5. Enter the hierarchical zones by name, or expand the list of zones to locate the desired zones manually.
    6. If desired, specify to select the parent or child zones automatically.
    7. Select the zone by putting a checkmark in the box next to the zone name.
    8. When you’re done specifying which hierarchical zones to monitor, click OK to close the dialog box and return to the Configuration wizard.

      Each zone that you’ve selected is listed in the Hierarchical Zones screen.

    9. Click Next to continue.

  10. If you selected zone-based reporting and you use classic zones:

    1. If you want data from all zones, select Monitor all classic zones from forest(s). You can add or edit forests by clicking Edit and then adding or removing forests.
    2. Or, if you want to report data from specific zones, select Monitor only specific classic zones.
    3. Click Edit.

      The Specify Forest for zone selection dialog box opens.

    4. Enter the forest name where the desired zones are and click OK.

      The Edit Monitored Classic Zones dialog box opens.

    5. Select the classic zones to include in your reports. Select the zone by putting a checkmark in the box next to the zone name.

      You can filter the list of zones by entering a portion of the name and clicking Filter.

    6. When you’re done specifying which classic zones to monitor, click OK to close the dialog box and return to the wizard. Click Next to continue.

  11. For zone-based reporting, you can also specify which domain controller(s) that the report service connects to.

    If you don’t specify which domain controller(s) to use, report services will use the default domain controller.

    1. Click Add.

      The Add Domain Controller dialog box opens.

    2. Enter the domain name and then select the domain controller from the list.
    3. Click OK to return to the Configuration wizard.

      The domain controllers that you selected are listed in the wizard screen.

    4. Click Next to continue.

  12. In the Synchronization schedule screen, specify how often you want the reporting service to pull data from Active Directory.

    You can specify that the service synchronizes weekly, daily, every certain number of days, or every certain number of hours. The limit is 32,767 days or weeks.

    Click Next to continue.

  13. Configure the user account that runs the service:

    1. In the Report Services options screen, specify the user account that will be used to run the service that synchronizes data from Active Directory and the reporting database.

      You can select a network service account, a managed service account, or another user account in Active Directory.

      You must specify a user account that has the required permissions. The configuration wizard verifies that the user has the correct level of access.

    2. Click Next to continue.
    3. The configuration wizard verifies that the specified user account has the required permission. An error displays if the permissions are inadequate.
    4. If the permission verification is successful, click Close to close the Verify permission window.

  14. Review and complete the installation:

    1. In the Summary screen, review the installation details. If the installation settings are correct, click Next to continue.

      If you’re installing a new database, it may take a few minutes.

    2. (Optional) In the completion screen, if the installation is successful, you can select the option to synchronize Active Directory data with the report database immediately. Depending on the Active Directory configuration and domain size, this operation can take awhile to complete.

      Or, alternatively, you can run the synchronization at a more convenient time, using the Report Services Control Panel.

    3. Click Finish to close the configuration wizard.

      If the configuration was not successful, the configuration wizard provides some notes as to why the configuration failed. The notes may or may not include knowledge base articles that are available at the Centrify Technical Support web site.