Tuesday, March 2, 2010

MSC-ERR-0028 The user starting the process doesn't have the right privileges

When you are attempting to create a package using Framework Manager that looks at Microsoft SQL Server Analysis Services databases as the datasource you are likely to get this error in Cognos 8.4

The reason for this error is that MSAS/SSAS allows authentciation by Microsoft integrated windows authentication only which implies the use of Kerberos. If IBM Cognos 8 is configured to run with any other account than LocalSystem, that is the user starting the application Server hosting the Dispatcher, then this account must be granted the "trusted computing base" (TCB) priviledge. This privilege is required to either facilitate delegated Kerberos authentication or authenticate with the service credentials.

Resolution

On every computer which is running an instance of Application Tier Compnents and where (Batch) Report Service is enabled grant the account running the Cognos Dispatcher to the "Act as part of the operating system" right. To grant the "act as Part of the Operating System" right follow the steps below
1) Log on to the box as a local Administrator and open a command window
2) Open the group Policy Object editor by typing gpedit.msc and press ENTER
3) Navigate to Local Computer Policy -> Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User rights Assignment.
4) Double click on the "Act as part of the operating system" policy in the right pane 5) Add the account running Cognos Dispatcher and press OK once done
6) Close the policy editor
7) On the command prompt type gpupdate /target:computer and press ENTER
8) Restart Cognos

Hope that solves your problem!