title: Implementing Windows authentication with Reporting Services
body: <p>This is an extension of post <a href="https://stackoverflow.com/questions/13347593/reporting-services-authentication-advice-sought">Reporting Services Authentication advice sought</a> as I am unable to submit a lengthy post on that thread (apologies admin).</p>
  
  <p>Basically, I am configuring my local installation of reporting services to use Windows Authentication (with the ultimate aim of implementing this authentication on the network).</p>
  
  <p>My current setup:</p>
  
  <p>IIS (5.1):  I have created an application named "ReportServer" that uses ASP.NET v2.0.50727. The security for this application is set to "Integrated Windows authentication".  I have unchecked the "Anonymous access" check box.  Am I correct to assume this will prevent anonymous access to IIS (i.e. to the ReportServer application in IIS?) only.  Therefore, the user will be prompted for log in details, which in turn will be validated against windows/AD?  </p>
  
  <p>Report: I have created a shared data source where the database resides on a different server and configured the data source to use "Windows Authentication" (not SQL Server authentication) and I can test connection successfully.  I can also successfully create and test a simple report by running the report in BIDS.</p>
  
  <p>When I deploy the report, I do not get prompted to login (which is fine).  I believe this is due to the fact the application directory in IIS is configured to use "Integrated Windows authentication" which is using the logged in PC user account (correct?).</p>
  
  <p>Whenever I load reporting services via a browser, I am correctly being prompted for my windows domain username and password but only when I run the report from my local PC.  Once authenticated, I can see all reports applicable to me.  If a colleague attempts to connect to the report instance on my PC, he allowed in without having to log in!!  Why is this?!</p>
  
  <p>However, when I run the deployed report via a browser, I receive the error "An error has occurred during report processing. Cannot create a connection to data source . Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection."  If I change the data source so it uses SQL Server Authentication and I specify a login that exists in SQL Server, the report can be run successfully in a browser.  </p>
  
  <p>The ideal solution I would like to implement is as follows:</p>
  
  <ol>
  <li>A user loads the report server URL in a browser.</li>
  <li>The user is prompted for their Windows/AD credentials (including domain prefix).</li>
  <li>Behind the scenes the user is allowed into the report server.</li>
  <li>The user will only be able to see the report folders and reports he/she is allowed to see. This will be controlled by adding the allowed AD groups/users to the report folders and reports (I know how to do this bit).  I do not wish to have to maintain separate SQL Server user accounts.</li>
  </ol>
  
  <p>I feel as if I am almost there, i.e. connection to the report server is prompting the user for their Windows credentials before allowing them access to the report server. </p>
  
  <p>Please could someone tell me:</p>
  
  <p>a) Why am I being prompted for my windows log in when I access the reports via a browser locally, but a different windows user is not prompted for a log in when they remotely access my report server via a browser window?</p>
  
  <p>b) If a better overall solution should be implemented, please could you advise or point me to relevant resources.</p>
  
  <p>c) Is there anything to be wary of with my current setup that may cause problems in the future.</p>
  
  <p>Many thanks in advance.</p>
  
  <p>JFB</p>