1. Kevin Donovan Program Manager, Office BI Microsoft Corporation
4/13/ :14 PM
DBI401
Deep Dive: Excel Services and PerformancePoint Services Administration and Troubleshooting
Kevin Donovan
Program Manager, Office BI
Microsoft Corporation
© 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2.
=OR(B2, NOT(B2))

3. Session Objectives and Takeaways
Overview
Common Setup and Configuration Errors for accessing data (and how to fix them)
Demos

4. Where are we going today?
Common Concepts 1
Excel Services config and data errors 2
PerformancePoint Services 3

5. External Data: Leveraging the Secure Store
Overview
External Data: Leveraging the Secure Store

6. The Secure Store PPS Excel Services Others
Visio Services
Access Services
Others
Why not the app pool identity?
Storing the credentials securely using the secure store

7. Troubleshooting and Configuring
Excel Services
Troubleshooting and Configuring

8. Let’s get some context here
Create and configure an Excel Services Service Application
Show Trusted Location Configuration

9. Trusted File Locations
Ocurrs on workbook open.
“This workbook cannot be opened because it is not stored in an Excel Services Application trusted location.”

10. Allow External Data
“The trusted location where the workbook is stored does not allow external data connections.”
“The data connection path in the workbook points to a file on the local drive or is an invalid URI.
Verify that the path to the data connection file in the workbook points to a data connection file in a Data Connection Library.”
???

11. Allow External Data
Remember PowerPivot cases!
Provider=MSOLAP.5;Persist Security Info=True;Initial Catalog=Microsoft_SQLServer_AnalysisServices;Data Source=$Embedded$;MDX Compatibility=1;Safety Options=2;ConnectTo=11.0;MDX Missing Member Mode=Error;Optimize Response=3;Cell Error Mode=TextValue
“The data connection path in the workbook points to a file on the local drive or is an invalid URI.”

12. Show an Untrusted Document

13. The Office Data Connection (ODC) File
“The following data connection file does not exist or you do not have permission to it: OR
???
No access to this location or the .odc file is gone.
The field is just plain empty.

14. Trusted Data Connection Libraries and Providers
“The Data Connection File used in the workbook is not in a trusted location.”
“Unable to refresh data for a data connection in the workbook. Try again or contact your system administrator.”

15. Authentication Issues
Now what?
Data connectivity and refresh often comes down to how you have your authentication set up . . .
My workbook is in a trusted location
It allows for data connections
My data source locations are trusted
Authentication is the likely culprit . . .

16. Creating Workbook Connections
Excel Services authentication settings:
Windows Authentication (default)
SSS
None

17. Client and Server Authentication Options

18. The Windows Authentication” Workbook Connection
Default connection to data sources
Uses the credentials of the Windows user executing the query.
Works great for Excel client, but not so well for Excel Services.
Needs Claims To Windows Token Service
Windows request
Windows response

19. Claims to Windows Token Service
“The data connection uses Windows Authentication and user credentials could not be delegated.”
STS
C2WTS
WFE
App Server
Data Store
ID from browser
claims
kerberos

20. Access to the Data Source
“Unable to refresh data for a data connection in the workbook. Try again or contact your system administrator.”
“Access was denied by the external data source.”
BISM (and EffectiveUsername) to the rescue!
The dreaded Kerberos errors . . .
“Unable to get a connection”
“CalculationServer.Credentials”
“CalculationServer.Interop.ConnectionInfoException”

21. Target Application Credentials
“An error occurred during an attempt to establish a connection to the external data source.”
Wrong password… OR
“An error occurred while accessing application id <TargetApplication> from Secure Store Service.”

22. The “SSS” Workbook Connection
Must know the name of a Target ID in the Secure Store
Uses the credentials stored as part of the Tartget ID
Used for published Excel Services workbooks on SharePoint.
Add PowerPivot SSS Data Refresh account to SharePoint workbook library.
Refers to the same thing

23. Configure the Secure Store Create a Target App ID Connect Using the SSS Option

24. The “SSS” Workbook Connection
Using SQL credentials in the secure store.
Server stuff
Client stuff

25. The “None” Authentication Setting
Uses the connection string to retrieve the data.
Uses the unattended service account to log into the data source.

26. The “None” Authentication Setting
Did you forget to add a TargetApp ID in Excel Services?
“The data connection uses None as the external data authentication method and the Unattended Service Account has not been configured.”
And
Is the app pool account a member of the target app?

27. Excel Services Works! My workbook is in a trusted location
It allows for data connections
My data source locations are trusted
My authentication types authenticate

28. Almost there . . . 1 Common Concepts 2 PerformancePoint Services 3
Excel Services config and data errors 3
PerformancePoint Services

29. PerformancePoint Services
Enabling Site Collection Features
Creating a BI Center Site
Creating a PPS Chart with Custom Lists and Document Libraries (adding your content types manually)

30. Common PerformancePoint Errors and Fixes
Unattended Service Acct Permissions
Per-User Auth
Item-Level Permissions have been added/removed
Designer vs. Contributor in Dashboard Designer

31. Common PerformancePoint Errors and Fixes
Feature Activation
Access to content database for new app pools
PS> $w = Get-SPWebApplication(“web application name”)
PS> $w.GrantAccessToProcessIdentity("<domain\user>")
Disabled “show details” and “decomposition tree” (Demo)
B/R, import/export – breaking references across site collections. Only on perfectly mirrored sites.

32. Common PerformancePoint Errors and Fixes

33. Troubleshooting Recap
Error Locations (Windows Logs  Applications)
Process Accounts
Web application app pool account
PerformancePoint app pool account
Permissions
SharePoint accounts and permission levels
Contributor = ability to save
Designer = ability to publish
Dashboard Designer accounts (Windows account)
Starting the Service

34. Configure end-to-end dashboard with Excel Services and PeformancePoint Services

35. Related Content
Building Self-Service BI Applications Using PowerPivot (DBI301)
Configuring Kerberos for Microsoft SharePoint 2010 BI in 7 Steps (SQL Server 2012) (DBI304)
Find me anytime at

36. Program Manager, Microsoft Business Intelligence
Kevin
Donovan
PerformancePoint Blog
@kp_donovan

37. Track Resources
(Kerberos Whitepaper)
(PerformancePoint Svcs Blog)
(Excel Blog)

38. mva Track Resources SQL Server 2012 Eval Copy Hands-On Labs @sqlserver
@TechEd_NA
#msTechEd
mva
Microsoft Virtual Academy
Get Certified!

39. Resources Learning TechNet http://northamerica.msteched.com
Connect. Share. Discuss.
Microsoft Certification & Training Resources
TechNet
Resources for IT Professionals
Resources for Developers

40. Complete an evaluation on CommNet and enter to win!
Required Slide
Complete an evaluation on CommNet and enter to win!

41. MS Tag
Scan the Tag
to evaluate this
session now on
myTechEd Mobile

42. 4/13/ :14 PM
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
© 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

43. 4/13/ :14 PM
© 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.