- The problem: SSRS Subscription is not sending out emails.
- Where to find a typical error-log: C:\SQLServer\MSRS10_50.MSSQLSERVER\Reporting Services\LogFiles
- What’s the Error say: service account doesn’t have rights to check domain user SIDs
- Explanation: When a domain user sets up a subscription, they become, by default the “owner” of that subscription. Their SID is placed in the OwnerID field in the subscription table of the ReportServer database. When the subscription is executed, and prior to generating the report, the service account (or Execution account) of SSRS has to check account validity in that, it has to read the “token-groups-global-and-universal” (TGGAU) attribute for the subscription owner. When the owner SID is not the SID of the Execution account, the execution account needs a certain level of privilege.
Resolution: This can be resolved by adding the service account (domain\SxSxSxSx) to the Windows Authorization Access (WAA) group in Server 2003 or Server 2008.
Workaround: If you don’t have access to do that immediately, you can also change the owner id of the Subscription to be the same as the SID of the execution account, or the service account. In my case they are the same. I would be interested to hear from someone who has different accounts set… and if therefore, the SID has to be one or the other.
Two sites helpful in resolving this:
MSDN’s site: http://blogs.msdn.com/b/richin/archive/2008/08/27/ssrs-subscription-tggau-rights-authzinitializecontextfromsid-exceptions.aspx
Microsoft’s Official answer: http://support.microsoft.com/kb/842423