Error Deploying Lync 2010 Monitoring Reports

by Jamie Schwinn on March 31, 2011

To view the Lync 2010 QoE Monitoring Reports, you must first deploy the Monitoring Report Pack. This is done from the Lync 2010 Deployment Wizard.

During the deployment process, the wizard asks for credentials to be used by SQL Reporting Services (SSRS) to access the Monitoring Server back-end database. In some circumstances, you may run into an error that indicates the account specified could not be granted the “ReportsReadOnlyRole” with the message “Exception calling “Create” with “0″ arguement(s)”.

In my situation, this was due to an issue with permissions for the user account specified. The Lync documentation for deploying Monitoring Reports includes a note: For details, see “Specifying Credential and Connection Information for Report Data Sources (SSRS)” at

These notes include a caveat where the account being used to access the remote Lync Monitoring back-end database must be granted “Allow log on locally” Permissions on the server hosting SSRS. The instructions below were taken directly from the Technet Article.

How to Grant “Allow log on locally” Permissions to Domain User Accounts

If you use stored credentials to connect to an external data source, the Windows domain user account must have permission to log on locally. This permission allows the report server to impersonate the user on the report server and send the request to the external data source as that impersonated user.

To grant this permission, do the following:

  1. On the report server computer, in Administrative Tools, open Local Security Policy.

  2. Under Security Settings, expand Local Policies, and then click User Rights Assignment.

  3. In the details pane, right-click Allow log on locally and then right-click Properties.

  4. Click Add User or Group.

  5. Click Locations, specify a domain or other location that you want to search, and then click OK.

  6. Enter the Windows account for which you want to allow interactive login, and then click OK.

  7. In the Allow log on locally Properties dialog box, click OK.

  8. Verify that the account you selected does not also have deny permissions:

    1. Right-click Deny log on locally and then right-click Properties.

    2. If the account is listed, select it and then click Remove.

Once the user account had “Allow log on locally” permission on the SSRS server, deploying the Monitoring Server reports completed successfully.

While researching the issue, I also ran across another article regarding the same error message. In this situation, the issue was that the account must be specified in the format domain\username where domain is in the NetBIOS domain name format instead of the FQDN of the domain.

Be Sociable, Share!

Previous post:

Next post: