Kevin Donovan Program Manager, Office BI Microsoft Corporation 4/13/2017 10:14 PM DBI401 Deep Dive: Excel Services and PerformancePoint Services Administration and Troubleshooting Kevin Donovan Program Manager, Office BI Microsoft Corporation © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

http://commons.wikimedia.org/ =OR(B2, NOT(B2))

Session Objectives and Takeaways Overview Common Setup and Configuration Errors for accessing data (and how to fix them) Demos

Where are we going today? Common Concepts 1 Excel Services config and data errors 2 PerformancePoint Services 3

External Data: Leveraging the Secure Store Overview External Data: Leveraging the Secure Store

The Secure Store PPS Excel Services Others Visio Services Access Services Others Why not the app pool identity? Storing the credentials securely using the secure store

Troubleshooting and Configuring Excel Services Troubleshooting and Configuring

Let’s get some context here Create and configure an Excel Services Service Application Show Trusted Location Configuration

Trusted File Locations Ocurrs on workbook open. “This workbook cannot be opened because it is not stored in an Excel Services Application trusted location.”

Allow External Data “The trusted location where the workbook is stored does not allow external data connections.” “The data connection path in the workbook points to a file on the local drive or is an invalid URI. Verify that the path to the data connection file in the workbook points to a data connection file in a Data Connection Library.” ???

Allow External Data Remember PowerPivot cases! Provider=MSOLAP.5;Persist Security Info=True;Initial Catalog=Microsoft_SQLServer_AnalysisServices;Data Source=$Embedded$;MDX Compatibility=1;Safety Options=2;ConnectTo=11.0;MDX Missing Member Mode=Error;Optimize Response=3;Cell Error Mode=TextValue “The data connection path in the workbook points to a file on the local drive or is an invalid URI.”

Show an Untrusted Document

The Office Data Connection (ODC) File “The following data connection file does not exist or you do not have permission to it: http://<server>/<site>/file.odc” OR ??? No access to this location or the .odc file is gone. The field is just plain empty.

Trusted Data Connection Libraries and Providers “The Data Connection File http://<server>/<site>/file.odc used in the workbook is not in a trusted location.” “Unable to refresh data for a data connection in the workbook. Try again or contact your system administrator.”

Authentication Issues Now what? Data connectivity and refresh often comes down to how you have your authentication set up . . . My workbook is in a trusted location It allows for data connections My data source locations are trusted Authentication is the likely culprit . . .

Creating Workbook Connections Excel Services authentication settings: Windows Authentication (default) SSS None

Client and Server Authentication Options

The Windows Authentication” Workbook Connection Default connection to data sources Uses the credentials of the Windows user executing the query. Works great for Excel client, but not so well for Excel Services. Needs Claims To Windows Token Service Windows request Windows response

Claims to Windows Token Service “The data connection uses Windows Authentication and user credentials could not be delegated.” STS C2WTS WFE App Server Data Store ID from browser claims kerberos

Access to the Data Source “Unable to refresh data for a data connection in the workbook. Try again or contact your system administrator.” “Access was denied by the external data source.” BISM (and EffectiveUsername) to the rescue! The dreaded Kerberos errors . . . “Unable to get a connection” “CalculationServer.Credentials” “CalculationServer.Interop.ConnectionInfoException”

Target Application Credentials “An error occurred during an attempt to establish a connection to the external data source.” Wrong password… OR “An error occurred while accessing application id <TargetApplication> from Secure Store Service.”

The “SSS” Workbook Connection Must know the name of a Target ID in the Secure Store Uses the credentials stored as part of the Tartget ID Used for published Excel Services workbooks on SharePoint. Add PowerPivot SSS Data Refresh account to SharePoint workbook library. Refers to the same thing

Configure the Secure Store Create a Target App ID Connect Using the SSS Option

The “SSS” Workbook Connection Using SQL credentials in the secure store. Server stuff Client stuff

The “None” Authentication Setting Uses the connection string to retrieve the data. Uses the unattended service account to log into the data source.

The “None” Authentication Setting Did you forget to add a TargetApp ID in Excel Services? “The data connection uses None as the external data authentication method and the Unattended Service Account has not been configured.” And Is the app pool account a member of the target app?

Excel Services Works! My workbook is in a trusted location It allows for data connections My data source locations are trusted My authentication types . . . authenticate

Almost there . . . 1 Common Concepts 2 PerformancePoint Services 3 Excel Services config and data errors 3 PerformancePoint Services

PerformancePoint Services Enabling Site Collection Features Creating a BI Center Site Creating a PPS Chart with Custom Lists and Document Libraries (adding your content types manually)

Common PerformancePoint Errors and Fixes Unattended Service Acct Permissions Per-User Auth Item-Level Permissions have been added/removed Designer vs. Contributor in Dashboard Designer

Common PerformancePoint Errors and Fixes Feature Activation Access to content database for new app pools PS> $w = Get-SPWebApplication(“web application name”) PS> $w.GrantAccessToProcessIdentity("<domain\user>") Disabled “show details” and “decomposition tree” (Demo) B/R, import/export – breaking references across site collections. Only on perfectly mirrored sites.

Common PerformancePoint Errors and Fixes

Troubleshooting Recap Error Locations (Windows Logs  Applications) Process Accounts Web application app pool account PerformancePoint app pool account Permissions SharePoint accounts and permission levels Contributor = ability to save Designer = ability to publish Dashboard Designer accounts (Windows account) Starting the Service

Configure end-to-end dashboard with Excel Services and PeformancePoint Services

Related Content Building Self-Service BI Applications Using PowerPivot (DBI301) Configuring Kerberos for Microsoft SharePoint 2010 BI in 7 Steps (SQL Server 2012) (DBI304) Find me anytime at kdonovan@microsoft.com

Program Manager, Microsoft Business Intelligence Kevin Donovan kdonovan@microsoft.com PerformancePoint Blog @kp_donovan

Track Resources http://technet.microsoft.com/en-us/library/ff829837.aspx (Kerberos Whitepaper) http://blogs.msdn.com/b/performancepoint/ (PerformancePoint Svcs Blog) http://blogs.office.com/b/microsoft-excel/archive/category/11361.aspx (Excel Blog)

mva Track Resources SQL Server 2012 Eval Copy Hands-On Labs @sqlserver @TechEd_NA #msTechEd mva Microsoft Virtual Academy Get Certified!

Resources Learning TechNet http://northamerica.msteched.com Connect. Share. Discuss. http://northamerica.msteched.com Microsoft Certification & Training Resources www.microsoft.com/learning TechNet Resources for IT Professionals http://microsoft.com/technet Resources for Developers http://microsoft.com/msdn

Complete an evaluation on CommNet and enter to win! Required Slide Complete an evaluation on CommNet and enter to win!

MS Tag Scan the Tag to evaluate this session now on myTechEd Mobile

4/13/2017 10:14 PM © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. © 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4/13/2017 10:14 PM © 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.