Reporting Services: Error creating HTTP endpoint - Access is Denied

I’ve seen this issue a few times.  We had a case come in where they were seeing a blank page when they went to Report Manager for Reporting Services.  You may also see an HTTP 503 error.  This just means that the service had a problem and there was probably an exception that occurred under the hoods.

In this case, the issue was with SQL 2008 R2.  When looking at the Reporting Services Logs, we can see the following exception when the service starts.

rshost!rshost!1380!03/13/2015-14:52:11:: e ERROR: Failed to register url=https://+:80/ReportServer_RS2008R2/ for endpoint 2, error=5. <—5 = Access Denied
rshost!rshost!1380!03/13/2015-14:52:11:: w WARN: Endpoint 2 is enabled but no url is registered for vdir=/ReportServer_RS2008R2, pdir=C:\Program Files\Microsoft SQL Server\MSRS10_50.RS2008R2\Reporting Services\ReportServer.
servicecontroller!DefaultDomain!1a20!03/13/2015-14:52:11:: e ERROR: Error creating HTTP endpoint. System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
at Microsoft.ReportingServices.HostingInterfaces.IRsUnmanagedCallback.CreateHttpEndpoint(RsAppDomainType application, String[] urlPrefixes, Int32 cPrefixes, String[] hosts, Int32 cHosts, Boolean wildCardPresent, String virtualDirectory, String filePath, Int32 authType, Int32 logonMethod, String authDomain, String authRealm, Boolean authPersist, Int32 extendedProtectionLevel, Int32 extendedProtectionScenario, Boolean enabled)
at Microsoft.ReportingServices.Library.ServiceAppDomainController.SetWebConfiguration(RunningApplication rsApplication, Boolean enabled, String folder)

This comes down to understanding URL Reservations and Reporting Services starting with RS 2008 and later.

About URL Reservations and Registration
https://msdn.microsoft.com/en-us/library/bb677364.aspx

What is happening here is that the Service Account was changed outside of Reporting Services Configuration Manager.  On my system, if we look, we see that the service is currently set to my RSService account.

However, if we look at the URL Reservations that are currently registered we will see that they are configured for the Network Service account.  You can see this by running the following command from an Admin Command Prompt.

netsh http show urlacl

The problem here is that the service account was changed within the Services area and not from within Reporting Services Configuration Manager.  As a result the URL Reservation permissions were not updated to the new service account.  So, when we try to use the reservation, we get an Access Denied because the RSService account doesn’t have permissions.  The Network Service Account does.

You could also encounter other issues by doing this.  For example, you would probably not have had the Encryption Key, so if you had Data Sources and what not present, you wouldn’t be able to use the encrypted content.

How do we get back to working?

We can go back to the services area, and change the account back to what it was before.  If Network Services doesn’t work, you can use the netsh command above to see what account is actually listed and change it back to that account.

Once the account is back, you can then go into Reporting Services Configuration Manager and change the account on the Service Account Tab to the one you want.  This will also prompt you to make a backup of the Encryption key.

You will also see, when you do it this way, that it will remove the reservations and re-add them.

Running the netsh command, we can also see the correct service account is applied.

NOTE: Changing the service account from Network Service to a domain user account will add the RSWindowsNegotiate tab into the authentication types within the rsreportserver.config. So, if you don’t have Kerberos configured, you may get prompted 3 times followed by a 401 error when you go to Report Manager.

 

Adam W. Saxton | Microsoft Business Intelligence Support - Escalation Services
@GuyInACube | YouTube | Facebook.com\guyinacube

Comments

• Anonymous
  February 09, 2017
  Hi,Thanks for this. I am getting below in my log files. Could you help to resolve this?ERROR: Error creating HTTP endpoint. System.IO.FileLoadException: The process cannot access the file because it is being used by another process. (Exception from HRESULT: 0x80070020) at Microsoft.ReportingServices.HostingInterfaces.IRsUnmanagedCallback.CreateHttpEndpoint(RsAppDomainType application, String[] urlPrefixes, Int32 cPrefixes, String[] hosts, Int32 cHosts, Boolean wildCardPresent, String virtualDirectory, String filePath, Int32 authType, Int32 logonMethod, String authDomain, String authRealm, Boolean authPersist, Int32 extendedProtectionLevel, Int32 extendedProtectionScenario, Boolean enabled) at Microsoft.ReportingServices.Library.ServiceAppDomainController.SetWebConfiguration(RunningApplication rsApplication, Boolean enabled, String folder)rshost!rshost!1b6c!02/09/2017-21:43:54:: e ERROR: Failed to register url=http://+:80/Reports_APP9/ for endpoint 3, error=20.Thanks
  • Anonymous
    August 03, 2017
    Hi @Damith,Did you manage to solve your problem?Thanks.Rafael