設定報表伺服器來進行遠端管理Configure a Report Server for Remote Administration

Reporting ServicesReporting Services中,您可以在本機或遠端設定報表伺服器執行個體。In Reporting ServicesReporting Services, you can configure report server instances locally or remotely. 若要設定遠端報表伺服器執行個體,您可以使用 Reporting Services 組態工具,或是撰寫使用 Reporting ServicesReporting Services Windows Management Instrumentation (WMI) 提供者的自訂程式碼。To configure a remote report server instance, you can use the Reporting Services Configuration tool or write custom code that uses the Reporting ServicesReporting Services Windows Management Instrumentation (WMI) provider. Reporting Services 組態工具提供了 WMI 提供者的圖形介面,好讓您不需要撰寫程式碼就可以設定報表伺服器。The Reporting Services Configuration tool provides a graphical interface to the WMI provider so that you can configure a report server without having to write code. 當您啟動這個工具時,可以指定要連接的遠端伺服器。When you start the tool, you can specify a remote server to connect to.

在您可以使用此工具來設定遠端報表伺服器以前,您必須遵循本主題的指示,在 Windows 防火牆中啟用通訊埠、啟用遠端連接,以及啟用 WMI 要求。Before you can use the tool to configure a remote report server, you must follow the instructions in this topic to enable ports in Windows Firewall, enable remote connections, and enable remote WMI requests.

適當的組態設定可協助您避免下列錯誤:Proper configuration helps you avoid the following error:

The machine could not be found.

"The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)".

先決條件Prerequisites

若要修改防火牆設定,您必須在本機登入,而且必須是本機管理員群組的成員;To modify firewall settings, you must be logged on locally and you must be a member of the local Administrators group. 您不能透過遠端連接修改遠端電腦的 Windows 防火牆設定。You cannot modify the Windows firewall settings of a remote computer over a remote connection.

如果您想要針對非管理員的使用者啟用遠端管理,必須將遠端啟動權限授與給「分散式元件物件模型」(DCOM) 帳戶。If you want to enable remote administration for a non-administrator user, you must grant the account Distributed Component Object Model (DCOM) Remote Activation permissions. 本主題有提供針對非管理員存取權設定伺服器的指示。Instructions for configuring the server for non-administrator access are provided in this topic.

某些組織有一些群組原則,可防止某些作業系統或使用者管理遠端伺服器。Some organizations have group policies that prevent remote server administration for certain operating systems or users. 在您開始修改防火牆設定之前,請先洽詢網路管理員,以確認遠端管理是否有任何限制。Before you begin modifying firewall settings, check with your network administrator to verify whether there are restrictions on remote administration.

如需詳細資訊,請參閱 MSDN 上 Platform SDK 文件集內的 通過 Windows 防火牆進行連接For more information, see Connecting Through Windows Firewall in the Platform SDK documentation on MSDN.

工作Tasks

啟用遠端報表伺服器組態的工作包括以下項目:Tasks that enable remote report server configuration include the following:

  • 在 Windows 防火牆中啟用通訊埠,以允許報表伺服器和 SQL Server Database Engine 執行個體所使用的通訊埠要求。Enable ports in Windows Firewall to allow requests on ports used by the report server and by the SQL Server Database Engine instance.

  • 啟用與主控報表伺服器資料庫之 Database Engine 執行個體之間的遠端連接。Enable remote connections to the instance of the Database Engine instance that hosts the report server database. 如果要設定報表伺服器資料庫連接及管理加密金鑰,必須要有遠端連接;A remote connection is necessary for configuring the report server database connection and managing the encryption keys.

  • 啟用要通過 MicrosoftMicrosoft Windows 防火牆傳遞的遠端 WMI 要求。Enable remote WMI requests to pass through the MicrosoftMicrosoft Windows firewall.

  • 如果您要設定遠端報表伺服器供非管理使用者進行管理,您必須設定 DCOM 權限,好讓遠端 WMI 可存取標準 Windows 使用者帳戶。If you are configuring a remote report server for administration by a non-administrative user, you must set DCOM permissions to enable remote WMI access to a standard Windows user account. 由於 WMI 會使用 DCOM 當做遠端呼叫的傳輸,所以您必須設定 DCOM 權限,好讓不是以本機管理員身分登入的使用者可以設定伺服器。Because WMI uses DCOM as transport for remote calls, you must set the DCOM permissions so that users who are not logged on as the local administrator can configure the server.

  • 如果您要設定遠端報表伺服器供非管理使用者進行管理,您也必須設定報表伺服器 WMI 命名空間的 WMI 權限。If you are configuring a remote report server for administration by a non-administrative user, you must also set WMI permissions on the report server WMI namespace. 依預設,本機管理員群組的所有成員都有權存取報表伺服器 WMI 命名空間;By default, all members of the local Administrator group have access to the report server WMI namespace. 如果您將存取權授與非管理員,則必須設定權限。If you want to grant access to non-administrators, you must set permissions.

本主題將提供如何執行這些工作的相關指示。Instructions on how to perform these tasks are provided in this topic.

在 Windows 防火牆中開啟通訊埠To open ports in Windows Firewall

  1. 設定用於 Database Engine 存取的 Windows 防火牆Configure a Windows Firewall for Database Engine Access.

  2. Configure a Firewall for Report Server AccessConfigure a Firewall for Report Server Access.

設定與報表伺服器資料庫的遠端連接To configure remote connections to the report server database

  1. 按一下 [開始] ,並依序指向 [程式集] 、[ Microsoft SQL Server 2014Microsoft SQL Server 2014] 和 [組態工具] ,然後按一下 [SQL Server 組態管理員]Click Start, point to Programs, point to Microsoft SQL Server 2014Microsoft SQL Server 2014, point to Configuration Tools, and click SQL Server Configuration Manager.

  2. 在左窗格中,展開 [SQL Server 網路設定] ,然後針對 [SQL Server]SQL Server 的執行個體按一下 [通訊協定] 。In the left pane, expand SQL Server Network Configuration, and then click Protocols for the instance of [SQL Server]SQL Server.

  3. 在詳細資料窗格中,啟用 TCP/IP 和具名管道通訊協定,然後重新啟動 [SQL Server]SQL Server 服務。In the details pane, enable the TCP/IP and Named Pipes protocols, and then restart the [SQL Server]SQL Server service.

在 Windows 防火牆中啟用遠端管理To enable remote administration in Windows Firewall

  1. 以本機管理員的身分登入您想要啟用遠端管理的電腦。Log on as a local administrator to the computer for which you want to enable remote administration.

  2. 如果報表伺服器在 Windows Vista 上執行,以滑鼠右鍵按一下命令提示字元,然後選取系統管理員身分執行If the report server is running on Windows Vista, right-click Command Prompt and select Run as administrator. 如果是其他作業系統,請開啟命令提示字元視窗。For other operating systems, open a command prompt window.

  3. 執行下列命令:Run the following command:

    netsh.exe firewall set service type=REMOTEADMIN mode=ENABLE scope=ALL  
    

    您可以對 Scope 指定不同的選項。You can specify different options for Scope. 如需詳細資訊,請參閱 Windows Firewall 產品文件集。For more information, see the Windows Firewall product documentation.

  4. 確認是否啟用遠端管理;Verify that remote administration is enabled. 您可以執行下列命令來顯示狀態:You can run the following command to show the status:

    netsh.exe firewall show state  
    
  5. 重新啟動電腦。Reboot the computer.

設定 DCOM 權限來對非管理員啟用遠端 WMI 存取To set DCOM permissions to enable remote WMI access for non-administrators

  1. 在 [開始] 功能表上,指向 [系統管理工具] ,然後按一下 [元件服務]On the Start menu, point to Administrative Tools, click Component Services.

    適用於 Windows Vista [開始] 功能表中,按一下所有程式,按一下執行,然後輸入mmc comexp.mscFor Windows Vista, on the Start menu, click All Programs, click Run, and then enter mmc comexp.msc.

  2. 開啟 [元件服務] 資料夾。Open the Component Services folder.

  3. 開啟 [電腦] 資料夾。Open the Computers folder.

  4. 選取 [我的電腦]。Select My Computer.

  5. 選取 [執行] 功能表上的 [內容]On the Action menu, and select Properties.

  6. 按一下 [COM 安全設定]Click COM Security.

  7. [啟動和啟用權限] 中,按一下 [編輯限制]In Launch and Activation Permissions, click Edit Limits.

  8. 如果您沒有在 [啟動權限] 中看到您的名稱,請按一下 [新增]If you do not see your name in Launch Permission, click Add.

  9. 輸入您的使用者帳戶名稱,然後按一下 [確定]Type the name of your user account, and then click OK.

  10. 在 [<使用者或群組> 的權限] 的 [允許] 欄中,選取 [遠端啟動] 和 [遠端啟用] ,然後按一下 [確定] 。In Permissions for <User or Group>, in the Allow column, select Remote Launch and Remote Activation, and then click OK.

針對非管理員設定報表伺服器 WMI 命名空間的權限To set permissions on the report server WMI namespace for non-administrators

  1. 在 [開始] 功能表上,指向 [系統管理工具] ,然後按一下 [電腦管理]On the Start menu, point to Administrative Tools, click Computer Management.

  2. 開啟 [服務及應用程式] 資料夾。Open the Services and Applications folder.

  3. 以滑鼠右鍵按一下 [WMI 控制] ,然後選取 [內容] 。Right-click WMI Control, and select Properties.

  4. 按一下 [安全性]Click Security.

  5. 開啟 [Root] 資料夾。Open the Root folder.

  6. 開啟 [Microsoft] 資料夾。Open the Microsoft folder.

  7. 開啟 [SQLServer] 資料夾。Open the SQLServer folder.

  8. 開啟 [ReportServer] 資料夾。Open the ReportServer folder.

  9. 開啟執行個體資料夾。Open instance folder. 如果您已安裝預設執行個體,此資料夾就是 MSSQLSERVER。If you installed the default instance, the folder is MSSQLSERVER.

  10. 開啟 [v10] 資料夾。Open the v10 folder.

  11. 選取 [Admin] 資料夾,然後按一下 [安全性]Select the Admin folder, and then click Security.

  12. 按一下 [新增] ,然後輸入將用來管理伺服器的使用者帳戶。Click Add, and then type the user account you will use to manage the server.

  13. [允許] 一欄中,選取 [啟用帳戶][遠端啟用][讀取安全性] ,然後按一下 [確定]In the Allow column, select Enable Account, Remote Enable, and Read Security, and then click OK.

另請參閱See Also

Reporting Services 組態管理員 (原生模式)Reporting Services Configuration Manager (Native Mode)