~ Mike Jacquet
Hello, Mike Jacquet here, and today I’d like to discuss a problem you may encounter after installing System Center 2012 R2 Data Protection Manager from scratch or after performing an upgrade from DPM 2012 SP1.
When you attempt to schedule a report to be mailed, you receive the following popup error.
Reporting Services Server cannot connect to the DPM database. To repair the configuration, follow steps for repairing DPM from DPM Setup Help. ID: 3001 More Information
Figure 1 below shows this error.
Following the repair steps suggested in the More Information link does not resolve the problem.
To resolve this error, please use the steps below to make proper configuration changes which will then allow DPM reports to be e-mailed.
NOTE: Some steps may not be necessary if you encounter the problem after an upgrade from DPM 2012 SP1. Review and perform the steps as applicable.
1. On the DPM 2012 R2 server, create a new local group called "DPMDBReaders$<DPMServerName>" In my example the DPMServername is WINB-DPM.
2. Create a new local user called "DPMR$<DPMServerName> and provide a strong password that never expires. See figure 3 below.
3. Add the newly created user to the DPMDBReaders$DPMservername group that was created in step 1 above. See figure 4.
4. Start SQL Management Studio using administrative privileges and connect to the SQL instance used by DPM. Under Security, right-click on the Logins and select New login… then browse to add the local group DPMDBReaders$<DPMServerName >. Once the group is added it will be listed as seen in figure 5.
5. Right-click the group and select Properties. Under the General section, change the default database to the DPMDB name. See figure 6.
6. Under the User Mapping section, select the checkbox for the DPMDB name and the checkbox for the db_datareader role. See figure 7.
7. In SQL Management Studio, navigate to the Databases > DPMDB > Security > Users > and select the DPMDBReaders$<DPMServerName>" group. See figure 8.
8. Right-click the DPMDBReaders$<DPMServerName>" group and select Properties. Under the Securables section, click on Search. On the add objects dialog, click OK. On the Select Objects dialog, click the Objects type, then check the stored procedure checkbox. Browse and add the following two stored procedures:
Grant the Execute permission for both of the stored procedures added. See figure 9.
9. Exit SQL Management Studio.
11. Click on the URLs: link. This will open the http://localhost/Reports/Pages/Folder.aspx) portal as seen in Figure 11.
12. Click on the DPMReports_GUID link to open the DPM reports page as seen in Figure 12.
13. Click on the DPMReporterDataSource to open its properties as seen in figure 13.
14. On the DPMReporterDataSource configuration page, perform the following steps:
i. Enable the option: "Credentials stored securely in the report server" ii. Add the “DPMR$<DPMServerName>” user Account and Password created in step 2. iii. Check the checkbox to "Use as Windows credentials when connecting to the data source." iv. Click ‘Test connection’ on to verify whether it can connect successfully. v. Click the Apply.
i. Enable the option: "Credentials stored securely in the report server"
ii. Add the “DPMR$<DPMServerName>” user Account and Password created in step 2.
iii. Check the checkbox to "Use as Windows credentials when connecting to the data source."
iv. Click ‘Test connection’ on to verify whether it can connect successfully.
v. Click the Apply.
15. Close the DPMReporterDataSource configuration page to return to the Reporting Services Configuration Manager screen. Click on the Service Account. On this page change Report Server Service Account service to use Network Service. If you are prompted for the Backup Encryption Key, fill on the parameters and continue. See Figure 14 below.
16. Reboot the DPM Server to ensure all configuration changes take effect.
17. You should now be able to schedule e-mail reports without experiencing the original error.
Sorry for any inconvenience this has caused. This issue is being investigated by the Data Protection Manager product group and more information will be published as it becomes available..
Mike Jacquet | Senior Support Escalation Engineer | Microsoft GBS Management and Security Division
Get the latest System Center news on Facebook and Twitter:
System Center All Up: http://blogs.technet.com/b/systemcenter/ System Center – Configuration Manager Support Team blog: http://blogs.technet.com/configurationmgr/ System Center – Data Protection Manager Team blog: http://blogs.technet.com/dpm/ System Center – Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/ System Center – Operations Manager Team blog: http://blogs.technet.com/momteam/ System Center – Service Manager Team blog: http://blogs.technet.com/b/servicemanager System Center – Virtual Machine Manager Team blog: http://blogs.technet.com/scvmm
Windows Intune: http://blogs.technet.com/b/windowsintune/ WSUS Support Team blog: http://blogs.technet.com/sus/ The AD RMS blog: http://blogs.technet.com/b/rmssupp/
The Forefront Endpoint Protection blog : http://blogs.technet.com/b/clientsecurity/ The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/ The Forefront TMG blog: http://blogs.technet.com/b/isablog/ The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/
Hi Mike, before I attempt this, is the group named DPMDBReader$<server> or DPMDBReaders$<server>. The text and screenshots differ.
Also about to follow this and noticed the disparity in the group name in the text and screenshots (DPMDBReader$ or DPMDBReaders$) and would like clarification. Thanks
Good catch - it should be DPMDBReaders (plural) - I will have the content updated.
I want to know a good way to warm up IP addresses for SMTP services, I am willing to pay for a proven methord? Akshat asked 16 hrs ago - 3 days left to answer I want to know a good way to warm up IP addresses for SMTP services, I am willing to pay for a proven methord we Need experts on SMTPs anyone who can warm IP addresses we are willing to pay or someone who can provide to us some warmed up IP addresses. we have tried some services but they were not very good PLEASE CONTACT ASAP
when I tried this steps I couldn't find the below mentioned stored procedures,
Not sure if I'm missing anything. I have a fresh setup of DPM 2012 R2 with SQL located in the same virtual machine.
Ok found the procedures of Prc_MOM_Heartbeat_Get prc_MOM_ProductionServer_Get and configured the SQL. Only one report received via e-mail after that back to same problem. Now I've wondering revert back to previous setting swill make sense or where do I've
to head. This is DPM 2012 R2 with SQL 2012 SP1 fresh install setup.
Hi Mike, the error on defining a scheduled email went away by following your Workaround. Unfortunately no emails are being sent, but test-emails work? Could this be an issue with scheduled tasks? Any hint is welcome! Cheers, Hans
It seems that the user DPMR$ needs the permission "Allow Logon Locally". Because of a domain policy I could not change this local setting. So I have to add the user to the local Administrators group.
Great article, just what I was looking for!
thank you ,great post.
Hi Mike, the error on defining a scheduled email went away by following your Workaround. Unfortunately no emails are being sent, but test-emails work? Can't find any documentation on this anywhere... Help!
When will release a fix for this problem?
Thank you so much for putting this together. Great info for a noob
Having the same issue with a fresh DPM 2012R2 install with rollup 5. SQL2012 is installed on the same DPM server.
I have followed the instructions and I can schedule a report but it will not send by mail and does not even seem to run. Test mail messages do work.
Why is this still in issue after more than 1 year?
Hi Mike, an addition to this, if you are using the Tape Management report and DPM 2012 R2 also add the securable Scalar Function: ufn_MM_GetPgLabels.