Reporting Services – Error – This configuration section cannot be used at this path. This happens when the site administrator has locked access to this section using from an inherited configuration file

Background

Installed Microsoft SQL Server Reporting Services v2014, but getting the error pasted below.

 

Reporting Server – Site Administrator Locked Access

Error Message:


Failed to initialize the AppDomain:ReportServer_V2014_0 Exception: System.Configuration.ConfigurationErrorsException Message: This configuration section cannot be used at this path. This happens when the site administrator has locked access to this section using location allowOverride="false" from an inherited configuration file. (E:\Program Files\Microsoft SQL Server\MSRS12.V2014\Reporting Services\ReportServer\web.config line 9) StackTrace: at System.Web.HttpRuntime.HostingInit(HostingEnvironmentFlags hostingFlags) at System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters) at System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters) at System.Web.Hosting.ApplicationManager.CreateAppDomainWithHostingEnvironment(String appId, IApplicationHost appHost, HostingEnvironmentParameters hostingParameters) at System.Web.Hosting.ApplicationManager.CreateAppDomainWithHostingEnvironmentAndReportErrors(String appId, IApplicationHost appHost, HostingEnvironmentParameters hostingParameters)

 

 

Diagnosis

 

The error message basically states:

This configuration section cannot be used at this path. This happens when the site administrator has locked access to this section using location allowOverride="false" from an inherited configuration file


The offending line number is
  9



Open the web.config that it is listed as
E:\Program Files\Microsoft SQL Server\MSRS12.V2014\Reporting Services\ReportServer\web.config


<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <system.web>
    <pages validateRequest="false">
      <controls>
        <add tagPrefix="asp" namespace="System.Web.UI" assembly="System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
      </controls>
    </pages>
    <authentication mode="Windows" />
    <identity impersonate="true" />
    <compilation
       defaultLanguage="c#"
       debug="false"
       tempDirectory="E:\Program Files\Microsoft SQL Server\MSRS12.V2014\Reporting Services\RSTempFiles\">

 

The offending line reads authentication mode=”Windows”

 

 

Diagnosis

Feature Delegation

Internet Information Server (IIS) has a feature known as “Feature Delegation”.

Feature Delegation is akin to Group Policy.  It allows Architects to enforce corporate wide constraints.

 

Current Feature Delegation

Access Feature Delegation via

  • Launch IIS Management Console
  • Select the Server
  • We chose to go with the “Group By” : Area
  • In the Management Section, select “Feature Delegation”

 

FeatureDelegation

 

Feature Delegation List

Here are the “Feature Delegation” entries.

FeatureDelegationList

We can clearly see that “Authentication Windows” is set “Read Only”; basically our server can read and utilize the setting, but we can set it.

 

 

Original


     <authentication mode="Windows" />

 

Modified


	<!--
		dadeniji 2015-01
		authentication mode="Windows"
	-->

 

 

Error – The Current Identity does not have write access to ‘C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files’.


Failed to initialize the AppDomain:ReportServer_V2014_0 Exception: System.Web.HttpException Message: The current identity (NT Service\ReportServer$V2014) does not have write access to 'C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files'. StackTrace: at System.Web.HttpRuntime.SetUpCodegenDirectory(CompilationSection compilationSection) at System.Web.HttpRuntime.HostingInit(HostingEnvironmentFlags hostingFlags) at System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters) at System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters) at System.Web.Hosting.ApplicationManager.CreateAppDomainWithHostingEnvironment(String appId, IApplicationHost appHost, HostingEnvironmentParameters hostingParameters) at System.Web.Hosting.ApplicationManager.CreateAppDomainWithHostingEnvironmentAndReportErrors(String appId, IApplicationHost appHost, HostingEnvironmentParameters hostingParameters)

 

Review Service Account Identifier

serviceAccount

 

 

List Folder Permissions

Let us get the folder permissions


powershell -Command "Get-Acl 'C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files'"

Output:
NTFSFolderPermissionsGet

 

 

Grant Folder Permissions

Let us grant full permissions to ASP.Net Temp Folder to our Reporting Services Account.

 


icacls "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files" /grant "NT Service\ReportServer$V2014":F

grantNTFSPermissions

 

Report Manager – Site Administrator Locked Access



Failed to initialize the AppDomain:ReportManager_V2014_0 Exception: System.Configuration.ConfigurationErrorsException Message: This configuration section cannot be used at this path. This happens when the site administrator has locked access to this section using  from an inherited configuration file. (E:\Program Files\Microsoft SQL Server\MSRS12.V2014\Reporting Services\ReportManager\web.config line 14) StackTrace: at System.Web.HttpRuntime.HostingInit(HostingEnvironmentFlags hostingFlags) at System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters) at System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters) at System.Web.Hosting.ApplicationManager.CreateAppDomainWithHostingEnvironment(String appId, IApplicationHost appHost, HostingEnvironmentParameters hostingParameters) at System.Web.Hosting.ApplicationManager.CreateAppDomainWithHostingEnvironmentAndReportErrors(String appId, IApplicationHost appHost, HostingEnvironmentParameters hostingParameters)


 

 

<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <configSections>
    <section name="MicrosoftWebControls" type="System.Configuration.NameValueSectionHandler,  System, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=MSIL" />
    <section name="UIConfig" type="Microsoft.ReportingServices.UI.UIConfigSectionHandler,ReportingServicesWebUserInterface" />
  </configSections>
  <system.net>
    <defaultProxy enabled="false" />
  </system.net>
  <system.web>
    <pages validateRequest="false" />
    <compilation defaultLanguage="c#" debug="false" tempDirectory="E:\Program Files\Microsoft SQL Server\MSRS12.V2014\Reporting Services\RSTempFiles\" />
    <customErrors mode="RemoteOnly" />
    <authentication mode="Windows" />
    <identity impersonate="true" />

 

Original

 

<authentication mode="Windows" />

 

Modified

 

<!-- authentication mode="Windows" -->

 

Summary

So the problem is that IIS was locked down; and part of the lockdown involved not being able to change “Windows Authentication”.

We removed the entries in Report Server and Report Manager (web.config) files that tried to set the aforementioned item.

We also granted permissions to Reporting Services “Service Account“.

 

References

Reporting Services – HTTP Error / 500

 

NTFS Permissions

 

Reporting Services – Migration

IIS Configuration

 

XML – Editing

Commenting

 

 

3 thoughts on “Reporting Services – Error – This configuration section cannot be used at this path. This happens when the site administrator has locked access to this section using from an inherited configuration file

  1. Reporting Services – Error – This configuration section cannot be used at this path. This happens when the site administrator has locked access to this section using from an inherited configuration file.

    Failed to initialize the AppDomain:ReportServer_MSSQLSERVER_0

    Exception: System.Configuration.ConfigurationErrorsException

    Message: This configuration section cannot be used at this path. This happens when the site administrator has locked access to this section using from an inherited configuration file. (C:\Program Files\Microsoft SQL Server\MSRS12.MSSQLSERVER\Reporting Services\ReportServer\web.config line 44)

    StackTrace: at System.Web.HttpRuntime.HostingInit(HostingEnvironmentFlags hostingFlags)
    at System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters)
    at System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters)
    at System.Web.Hosting.ApplicationManager.CreateAppDomainWithHostingEnvironment(String appId, IApplicationHost appHost, HostingEnvironmentParameters hostingParameters)
    at System.Web.Hosting.ApplicationManager.CreateAppDomainWithHostingEnvironmentAndReportErrors(String appId, IApplicationHost appHost, HostingEnvironmentParameters hostingParameters)Failed to initialize the AppDomain:ReportServer_MSSQLSERVER_0

    Exception: System.Configuration.ConfigurationErrorsException

    Message: This configuration section cannot be used at this path. This happens when the site administrator has locked access to this section using from an inherited configuration file. (C:\Program Files\Microsoft SQL Server\MSRS12.MSSQLSERVER\Reporting Services\ReportServer\web.config line 44)

    StackTrace: at System.Web.HttpRuntime.HostingInit(HostingEnvironmentFlags hostingFlags)
    at System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters)
    at System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters)
    at System.Web.Hosting.ApplicationManager.CreateAppDomainWithHostingEnvironment(String appId, IApplicationHost appHost, HostingEnvironmentParameters hostingParameters)
    at System.Web.Hosting.ApplicationManager.CreateAppDomainWithHostingEnvironmentAndReportErrors(String appId, IApplicationHost appHost, HostingEnvironmentParameters hostingParameters)

    After SSRS installation unable to open the webpage.

    Could you please help me here.

    Thanks
    Suresh

    • Arjun:

      Please review your Reporting Services (RS) web.config file.

      In general the file’s full name is [Drive]:\Program Files\Microsoft SQL Server\MSRS.MSSQLSERVER\Reporting Services\ReportServer\web.config.

      For you, your filename is C:\Program Files\Microsoft SQL Server\MSRS12.MSSQLSERVER\Reporting Services\ReportServer\web.config

      Look for the identified line 44 and comment out the block:

      Original:

      <securityPolicy>
      <trustLevel name="RosettaSrv" policyFile="rssrvpolicy.config" />
      </securityPolicy>
      <trust level="RosettaSrv" originUrl="" />

      Revised

      <!–
      dadeniji 2016-11-30 7:13 AM
      <securityPolicy>
      <trustLevel name="RosettaSrv" policyFile="rssrvpolicy.config" />
      </securityPolicy>
      <trust level="RosettaSrv" originUrl="" />

      –>

      Please let me know,

      Daniel

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s