Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-8071: Report Services - Failed to add service account from cross forest one-way selective trust

Authentication Service ,  

17 January,17 at 12:14 AM

Applies to: Report Services Suite 2017 (5.4.0) on all supported platforms.

How to add an account from cross forest one-way selective trust to report services?

To enable selective authentication over a forest trust using the Windows interface:

  1. Open Active Directory Domains and Trusts.
  2. In the console tree, right-click the domain node for the forest root domain, and then click Properties.
  3. On the Trusts tab, under either Domains trusted by this domain (outgoing trusts) or Domains that trust this domain (incoming trusts), click the forest trust that you want to administer, and then click Properties.
  4. On the Authentication tab, click Selective authentication, and then click OK.
  5. Open Active Directory Users and Computers.
  6. Navigate to the Domain Controller the Report Services will use, right-click the computer object, and then click Properties.
  7. On the Security tab add the desired user and grant Allow for the Allowed to authenticate permission.
If the "Allowed to authenticate" is not granted for the specific user the following pop-up will appear:

User-added image

Please refer to the following Microsoft article with more information on selective authentication: