Here is the first of what I hope to be a regular part of The Code Attic experience,
a how-to article on something nice and geeky. As I continue to work on building
out my new machine I will document each of the steps I take in creating demos and
development environments.
Before you can develop or start showing demoes data a place to store and keep data
is needed. So after getting the OS up and running (Windows Server 2008 R2 of course)
you need a database. The following are the most straightforward 45 steps I used
to installing SQL Server 2008 R2 Developer addition with Reporting Services and
Analysis Services.
I won’t fully guarantee the steps will work for your setup but it does in mine,
at the very least is should provide some direction for you in your installation.
As always leave thoughts, questions, and tips in the comments.
Fun and luck I send your way.
Machine:
- Windows Server 2008 R2 Standard x64 Windows
Server 2008 R2 x64
-
Roles:
- Active Directory Domain Services
- IIS
- Application Server
- Running as virtual machine within VMWarePlayer 3.1.0 build-261024
Steps:
- Run the System Configuration Checker, resolve any issues that it detects
-
Click Installation
-
Click New Installation or add feature to an existing installation
- Enter Product key
- Accept license agreement
-
Setup Support Rule
-
Windows Firewall Warning to resolve
-
The link which you are redirected to is : Configuring the Windows Firewall to All
SQL Server Access (
http://msdn.microsoft.com/en-us/library/cc646023(SQL.100).aspx )- Assuming that if you are installing SQL Server you have an understanding of the
purpose of a firewall I will not summarize the opening paragraphs. - In case you were not aware, a default installation of Windows Server 2008 has the
firewall on by default. - You finally make it to useable information regarding the above error window about
a third of the way down the article. The section is called “Ports Use By SQL Server.”
They are kind enough to provide a table that explains each of the ports and there
use. -
Default instances of SQL Server need TCP Port 1433 opened up. If you will have multiple
named instances running on the machine additional port planning will need to take
place, and is beyond the scope of this tutorial.-
TCP port 1434
- will need to be allowed if you plan to use Dedicated Admin Connections.
- This feature is not enabled by default and so will not be covered in this tutorial
as we are looking to build a basic machine with SQL Server 2008.
-
UDP port 1434
- listens for any SQL Server Browser requests and provides the needed redirect to
the appropriate TCP port for the named instance.
- listens for any SQL Server Browser requests and provides the needed redirect to
-
TCP port 443
- is the default HTTPS port for SQL Server.
-
-
Since we will also be installing Analysis Services the are additional ports to consider
opening in the firewall will be-
TCP port 2383
- Standard port for a default Analysis Services installation
-
TCP Port 2382
- Used only if a named instances of Analysis Services is being used.
-
TCP Port 80
- If going to use Analysis Services via IIS (i.e. a connection is allowed to be established
via a URL) - PivotTable requires HTTP or HTTPS
- If going to use Analysis Services via IIS (i.e. a connection is allowed to be established
-
TCP Port 443
- If planning to connect via HTTPS
-
-
The final SQL piece our base image will have is Reporting Services
-
TCP Port 80
- Allows for a HTTP (url) connection to be established
- It is not recommended to use the default World Wide Web Services rule.
-
TCP Port 443
- Allows for a HTTPS (secure url) connection to be established.
- Again it is recommended not to use the default Secure World Wide Web Services rule.
-
-
Open up the Windows Firewall and enable the abovementioned ports that relate to
what you plan to install.-
For my system this will be
- TCP Port 443, 80, 2383
- Windows Firewall
-
- Assuming that if you are installing SQL Server you have an understanding of the
- You will be asked to enter your product key code, once entered click Next
- The Next step is to accept the Microsoft EULA. Feel free to take time to read it,
I am sure there is many important things listed. Once you have read to your hearts
content check the ‘I Accept..’ box, and if you wish to help out with the next version
check the ‘Send feature usage…’ box. - Click Next
-
For this base image install SQL Server Feature Installation
- Click Next
-
Feature Selection
-
Select the following
- This feature set will require approximately 5752 MB
- Click Next
-
The Installation Rules will run. There is a total of 24 rules it checks for. My
system passed 6 of the rules while the remaining 18 were skipped (given a status
of ‘Not Applicable’)- You will need to resolve any Fails before continuing. It is recommended that you
correct warnings also.
- You will need to resolve any Fails before continuing. It is recommended that you
- Click Next
-
Instance Configuration screen
- You will now be asked to either accept the default name instance or define a specific
name for the SQL instance. - Since we are building out a fairly default machine for development purposes, select
‘Default Instance’
- You will now be asked to either accept the default name instance or define a specific
-
Upon clicking Next you will be asked to review the disk space requirements
for all the features you selected. If the listed drive does not provide enough space,
then click Back and change the root directory under Instance Configuration. -
You will now be on the Server Configuration screen, where you will be required to
enter the account which will run each service.- Create SQL Service Accounts
- See Setting up Windows Service Accounts (http://msdn.microsoft.com/en-us/library/ms143504.aspx)
- Enter the account credentials as you defined them.
- Click Next
-
The next step is the Database Engine Configuration. This step involves setting up
the authentication mode and the SA account of the instance of SQL Server.- Authentication mode select Windows
- Click Add Current User if you are currently logged in as an account you want to
have SA privileges
- Click Next
-
Analysis Services Configuration is the next step. This step is used to setup the
administrators for Analysis Services.- Add all the users you wish to define with such a role.
- Click Add Current User if the currently logged in user should be granted such permissions.
- Click Next
-
Report Services Configuration is the last of the service configuration steps.
- Select the top option “Install the native mode default configuration”
- Click Next
- If you would like to supply error reports to Microsoft check the box.
- Click Next
-
Installation Configuration Rules will run. There is a total of 8 rules which will
be checked.-
My system resulted in 6 passed rules and 2 listed as Not Applicable
- The NA rules are: Instance Name and SQL Server 2000 Analysis Services (64-bit) install
action
- The NA rules are: Instance Name and SQL Server 2000 Analysis Services (64-bit) install
-
-
Upon clicking Next you will be given a summary of all the options
and configurations settings chosen in the earlier steps. -
- Click Install
-
- Everything has installed now it is time to perform some testing.
- The quick an dirty is to open up SQL Management Studio and create a database, if
it creates you are in luck, it works. - For Reporting Services, there are some additional steps.
-
Try going to the report services link: http://<your
server name>/Reports.- It will normally ask for credentials, at which time enter some credentials.
-
Most likely you will receive the following error message:
- “SQL Server Reporting Services Error User <domain>\<name> does not have
required permissions. Verify that sufficient permissions have been granted and Windows
User Account Control (UAC) restrictions have been addressed.”
- “SQL Server Reporting Services Error User <domain>\<name> does not have
- As you can guess, the user account must be given some permissions to get in.
- So you may be wondering how do I get around this issue and what caused it. My understanding
is how Reporting Services handles the user accounts that are added during installation,
see step 22. -
Even though you may already be logged in as the administrator for the system and
SQL, you must run Internet Explorer as Administrator -
Re-enter the url for Report Server Manager (http://localhost/Reports)
and you will be see the following - Click Site Settings in the upper right hand corner. You are now
in the site settings section of Report Server (if you are familiar with Windows
SharePoint Server 3.0 you will notice some similarities in the setup of the screen.
(Always nice of them to reuse good ideas.) -
On the left hand side click Security
-
Click New Role Assignment this will take you to the page were new
users can be added with different level of security (admin or user)-
Here is a summary of the roles available, paraphrased from ‘User Predefined Role’
at http://msdn.microsoft.com/en-us/library/ms157363.aspx. -
Role Description System Administrator A user has the ability to enable features and set defaults throughout the system.
In addition, has the ability to set site-wide security, and define role definitions,
along with manage all jobs.System User Only basic server information is viewable to this role group.
- You need to add at least one user as a System Administrator so that you no longer
have to run as administrator. For my set-up I will be adding both a system user
and a system administrator user. This will allow me to have separation of control
during demoes. I would recommend creating two new user groups on the machine which
are assigned the appropriate role levels, and then adding the accounts to the groups.
This will allow you to quickly make changes as new test accounts are created and
used, along with getting you in the practice of thinking about security in terms
of groups and not individuals. -
In addition to setting the system roles you must setup roles for the actual folder/viewing
level also. To do this return to Home, and click Folder Settings.- You will see a similar security setting page as before. Click New Role Assignment
- As with before either groups or users can be assigned the different roles. Depending
on you planned strategy it may make since to assign individual users at this level,
but remember the more individuals you begin assigning, the more difficult administration
tasks can become. -
Here is a summary of the roles available, paraphrased from ‘User Predefined Role’
at http://msdn.microsoft.com/en-us/library/ms157363.aspx.-
Role Description Content Manager All item level roles are wrapped into this single role. This means users or groups
assigned the role are able to grant permissions, define folder structure, and all
other management abilities of report server content.Publisher Grants the ability to add new items to the report server, including new reports
and foldersBrowser Can run, subscribe, and browse reports. Can be considered a read only permission
level.Report Builder Has the ability to author and edit reports which exist in the Report Builder My Reports Allows user to create a personal report workspace (think a SharePoint MySite like
experience) were they can store and manager reports for personal use. - My recommendation is the user assigned the System Administration role at the site
level should also be granted Content Manager role at this level. While your system
user level group/user should be given at minimum Browser role, if not more. This
is your call as to how you plan on using the system.
-
THANK YOU, you are the 1st person who explained that I needed to start IE as an ADMIN. i’ve been going in circles with BOL and MSDN
Dean
Glad that the article was helpful to you. Hopefully as I post additional tutorials and thoughts you will find them just as helpful. Let me know if there are some other issues you have stumbled into that aren’t very well documented and I’ll see what I can write up.
~Scott
Pingback: Görkem Özdoğan | Reporting Services Giriş
I have installed Windows 2008 r2 Standard and SQL Server 2008 r2 Standard both 64bit. How do I setup the security for the developers so that they can develop/create cubes without giving the control of the server. I couldn’t find anywhere on security setup for SSAS. Can you please help on this? Thanks in advance!
Regards
Sat Pal
I have installed Windows 2008 r2 Standard and SQL Server 2008 r2 Standard both 64bit. How do I setup the security for the developers so that they can develop/create cubes without giving the control of the server. I couldn’t find anywhere on security setup for SSAS. Can you please help on this? Thanks in advance!
Regards
Sat Pal
Sat Pal,
Just wanted to let you know I have seen your message, and am working up a how-to for you. I was wondering if you are using Active Directory or are the developers setup as simple local user accounts on the machine?
~Scott , the code attic.
Sat Pat,
I am not an expert in SSAS cubes. But I believe I have some lnks which should help you out. These are links to different MSDN articles about SSAS.
Securing the Analysis Services Instance
User Access Security Architecture
Identity and Access Control( Analysis Services)
I believe the short of it is the following. I would place the users into a security group. The security group can then be granted proper roles within the SSAS database.
You will need to provide roles at the dimension level, cube level, and database level.
I hope this helps give you some direction.
~Scott, the code attic.
This had several missing pieces – thanks *very* much for posting it!
So less comments for a such huge blog work ? I know that sometimes tech bloggers create such detailed articles not for the fame but more for having an auxiliary memory 😉 Your article is great with all the necessary details (especially the run IE as admin and I wanted to thank you for that ! You rock !
First of all I want to say superb blog! I had a quick question in which I’d like to ask if you don’t
mind. I was interested to find out how you center yourself and
clear your head prior to writing. I have had difficulty clearing my mind in getting my thoughts out there.
I do take pleasure in writing however it just seems like
the first 10 to 15 minutes tend to be lost just trying to figure out how to begin.
Any ideas or tips? Appreciate it!
This is really interesting, You are an excessively professional blogger.
I have joined your rss feed and look forward to in quest
of extra of your great post. Additionally, I’ve shared your website in my social networks
Thanks a bunch for sharing this with all folks you actually realize what you’re speaking about!
Bookmarked. Kindly additionally talk over with my website =).
We could have a link trade contract among us
Fine way of telling, and pleasant article to obtain facts about my presentation focus, which i am
going to deliver in institution of higher education.
It’s a shame you don’t have a donate button! I’d without a
doubt donate to this superb blog! I guess for now i’ll settle for bookmarking and adding your RSS feed to my Google account.
I look forward to new updates and will talk about this blog with my Facebook
group. Chat soon!