Kerb-006 IIS DCOM pre-requisites

IIS DCOM pre-requisites

On web and reporting services services Server add ACC-BI-SSRS@yourdomain.net and ACC-BI-SSASWEB@yourdomain.net to the local IIS_WPG groups of each web server.

Components services configuration

Open Administrative Tools and open Component Services MMC

Expand components services, computers and My Computer. Right click on My Computer and select Properties

 

Click MSDTC Tab

Push Security Configuration button

Select following properties

Network DTC Access

Allow Remote clients and Allow Remote Administration

Allow Inbound

Allow Outbound

No authentication required

Enable Transaction Internet Protocol Transactions

Click ok, yes to restart msdtc and ok two times to close window

Browse Component Services à Computers à My Computer à DCOM Config

Choose a view by details to show application ID

Open properties for IIS WAMREG admin Service

On Security tab select Customize for Launch and Activation Permissions and click Edit button

Enter following permissions for EACH Web service domain account ACC-BI-SSRS@yourdomain.net and ACC-BI-SSASWEB@yourdomain.net

Allow Local Launch

Allow Remote Launch

Allow Local Activation

Allow Remote Activation

To set COM+ delegation, open the Components services console and browse to Computers à My Computers à COM+ Applications

Modify the impersonation level to delegate

Click OK and restart Web servers