Exclude Single User From Single Report

Here is my situation. I have a group set up in Active Directory for a group
of people that will share similar reports. The problem is that there is one
report that one particular user in that group doesn't need to see, but
everybody else in the group does need to see the report. Right now I have
the group added so everyone sees the report.
How can I exclude that one user from the report, but allow everyone else to
still see. This of course is without creating a new group of the same users,
but without this particular user. That would work, but seems as if there
should be another way.
Thanks!
BJbjkaledas,
I don't know how well you will like this answer, but I don't see many
other alternatives...
That report is currently inheriting its permissions from the folder it
is in. You can override that inheritance and specify item-level
permissions for that report (without affecting the other reports in
that folder).
Once you override the inheritance, you will have to delete the AD group
and add all of the group members EXCEPT for the user you want to
exclude. Unfortunately, that also means that you will have to manually
maintain those permissions when new members are added to the AD group.
Not optimal, but all I can think of.
Microsoft could solve this problem by allowing administrators to
explicity grant AND explicitly deny permissions to objects. All
permissions would stack, and in case of a conflict, it could default to
the most conservative (or limited) access level.
For example, if a user was in a group that could view and another group
that could execute, then the user could view and execute. However, if
the user was in a group that could execute and another group that could
"not execute", then it could default to the "not execute".
Maybe they will include that in the next release...
-Josh
bjkaledas wrote:
> Here is my situation. I have a group set up in Active Directory for a group
> of people that will share similar reports. The problem is that there is one
> report that one particular user in that group doesn't need to see, but
> everybody else in the group does need to see the report. Right now I have
> the group added so everyone sees the report.
> How can I exclude that one user from the report, but allow everyone else to
> still see. This of course is without creating a new group of the same users,
> but without this particular user. That would work, but seems as if there
> should be another way.
> Thanks!
> BJ|||Josh,
Thank you for your response. It seems easier to get one here than on the
forums. I had feared that was the only way around this issue. That is ok
though. Hopefully they will have exclusions in the next version. Hopefully
they will have exceptions in the Subscription schedules also!
Thanks again!
BJ
"Josh" wrote:
> bjkaledas,
> I don't know how well you will like this answer, but I don't see many
> other alternatives...
> That report is currently inheriting its permissions from the folder it
> is in. You can override that inheritance and specify item-level
> permissions for that report (without affecting the other reports in
> that folder).
> Once you override the inheritance, you will have to delete the AD group
> and add all of the group members EXCEPT for the user you want to
> exclude. Unfortunately, that also means that you will have to manually
> maintain those permissions when new members are added to the AD group.
> Not optimal, but all I can think of.
> Microsoft could solve this problem by allowing administrators to
> explicity grant AND explicitly deny permissions to objects. All
> permissions would stack, and in case of a conflict, it could default to
> the most conservative (or limited) access level.
> For example, if a user was in a group that could view and another group
> that could execute, then the user could view and execute. However, if
> the user was in a group that could execute and another group that could
> "not execute", then it could default to the "not execute".
> Maybe they will include that in the next release...
> -Josh
>
> bjkaledas wrote:
> > Here is my situation. I have a group set up in Active Directory for a group
> > of people that will share similar reports. The problem is that there is one
> > report that one particular user in that group doesn't need to see, but
> > everybody else in the group does need to see the report. Right now I have
> > the group added so everyone sees the report.
> >
> > How can I exclude that one user from the report, but allow everyone else to
> > still see. This of course is without creating a new group of the same users,
> > but without this particular user. That would work, but seems as if there
> > should be another way.
> >
> > Thanks!
> >
> > BJ
>

Excessive Logon Audit Events

I have a stand alone Windows 2000 server sp4 running SQL 2000 sp3. I need t
o be able to audit successful and failed Logon events and I have the group p
olicy set to do this. The box is in an offsite facility connected by at T1
over a VPN connection. My
SQL developers have the remote server registered in their Enterprise Manager
along with the local SQL servers. When they have Enterprise Manager open,
the following event is logged on the remote SQL server every 10 seconds. It
is filling my log and maki
ng it difficult to read. Why is this happening and can I make it stop?
Event Type: Success Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 6/28/2004
Time: 9:01:29 AM
User: NT AUTHORITY\SYSTEM
Computer: CONDOR
Description:
Account Used for Logon by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Account Name:
SomeUser
Workstation:
UserWorkstationIn Enterprise Manager (the devs need to do this on their PC's) goto
Tools>Options and uncheck the Poll Server checkbox. As you will see the
default interval for this polling is 10 seconds.
HTH
Jasper Smith (SQL Server MVP)
http://www.sqldbatips.com
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"Chris Wilkins" <Chris Wilkins@.discussions.microsoft.com> wrote in message
news:2D79110F-901D-43F2-9DA6-1AD0A97CC90F@.microsoft.com...
> I have a stand alone Windows 2000 server sp4 running SQL 2000 sp3. I need
to be able to audit successful and failed Logon events and I have the group
policy set to do this. The box is in an offsite facility connected by at T1
over a VPN connection. My SQL developers have the remote server registered
in their Enterprise Manager along with the local SQL servers. When they
have Enterprise Manager open, the following event is logged on the remote
SQL server every 10 seconds. It is filling my log and making it difficult
to read. Why is this happening and can I make it stop?
> Event Type: Success Audit
> Event Source: Security
> Event Category: Account Logon
> Event ID: 680
> Date: 6/28/2004
> Time: 9:01:29 AM
> User: NT AUTHORITY\SYSTEM
> Computer: CONDOR
> Description:
> Account Used for Logon by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
> Account Name:
> SomeUser
> Workstation:
> UserWorkstation
>

Excel renderer in RS2005-Sheet names

The Reporting group in our company uses SRS 2005 to generate most reports for
the Company. Many of these reports are distributed automatically to our
clients. An increasing number of these reports are distributed as Excel
spreadsheets. These Excel reports generally contain multiple worksheets.
For customer convenience, these worksheets should be named. The portion of
Report Services that writes the Excel files, is apparently not capable of
naming these worksheets with user specified names when there are multiple
worksheets. However when only one worksheet is present, it is named with the
title of the report. Is there a way to name the worksheets dynamically as the
report is generated? If not, is it possible to write a custom renderer to do
so, or to extend the excel renderer? I appreciate any code examples.
Thanks in advance.You might want to look into Software Artisan's Excel writer for Reporting
Services. It gives you more control over the Excel rendering.
http://officewriter.softartisans.com/officewriter-250.aspx
--
Andy Potter
blog : http://sqlreportingservices.spaces.live.com
info@.(NOSPAM)lakeclaireenterprises.com
"Saritha" <Saritha@.discussions.microsoft.com> wrote in message
news:1BD099C8-6EA3-4D9B-999D-5574F9A151E6@.microsoft.com...
> The Reporting group in our company uses SRS 2005 to generate most reports
> for
> the Company. Many of these reports are distributed automatically to our
> clients. An increasing number of these reports are distributed as Excel
> spreadsheets. These Excel reports generally contain multiple worksheets.
> For customer convenience, these worksheets should be named. The portion of
> Report Services that writes the Excel files, is apparently not capable of
> naming these worksheets with user specified names when there are multiple
> worksheets. However when only one worksheet is present, it is named with
> the
> title of the report. Is there a way to name the worksheets dynamically as
> the
> report is generated? If not, is it possible to write a custom renderer to
> do
> so, or to extend the excel renderer? I appreciate any code examples.
> Thanks in advance.
>