Issue
The following error occurs when trying to share, print or create an email report subscription in PME Web Application-->Reports
"An unexpected error has occurred. Your request cannot be processed at this time. If the problem persists, contact the Webpage administrator".
An error will appear in the System Event log in the Management Console:
| 10/21/2012 5:55:52 PM | Web Reporter | ION Web General | Computer1 | Could not authenticate | ERROR |
If the EventException table in ION_SystemLog is examined, the following stack traces will be seen:
System.ApplicationException: Could not authenticate. at PowerMeasurement.Security.UserImpersonator..ctor(String username, String password, String domain) at PowerMeasurement.Apps.Web.EEM.Modules.Reports.AddRSReportSubscription.InitPrinterControl() at PowerMeasurement.Apps.Web.EEM.Modules.Reports.AddRSReportSubscription.Page_Load(Object sender, EventArgs e) at System.Web.Util.CalliHelper.EventArgFunctionCaller(IntPtr fp, Object o, Object t, EventArgs e) at System.Web.Util.CalliEventHandlerDelegateProxy.Callback(Object sender, EventArgs e) at System.EventHandler.Invoke(Object sender, EventArgs e) at System.Web.UI.Control.OnLoad(EventArgs e) at System.Web.UI.Control.LoadRecursive() at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
Product Line
ION Enterprise 6.0/6.0 SP1
StruxureWare Power Monitoring 7.0.x
Power Monitoring Expert 7.2.x
Power Monitoring Expert 8.x
Environment
Web Applications Report
Cause
The reason for this behavior is that two of the three subscriptions, and the "Add" button, perform operations that require User Impersonation.
The code attempts to "log in" to Windows as IONUser to poll for a list of configured printers ("Add" button), write to a file share (subscription), or send to a printer (subscription).
The aforementioned error can be caused by several things.
Cause 1. This error can also be caused when the Windows IONUser password has been changed.
Cause 2. Web Reporter subscriptions will not work unless the Security Policy settings for "Allow log on locally" is granted to the IONUser (a member of the Users group) on the server.
Resolution
Resolution 2. Make IONUser a member of a group that can log on locally or give IONUser permission to log on locally.
Method 1: Give IONUser permission to log on locally
- Navigate to Control Panel → Administrative Tools → Local Security Policy
- Inside of Local Security Policy navigate to Local Policies → User Rights and Assignment
- Select Allow log on locally. Here you will see the groups that are allowed to log on locally.
- Select Add User or Group.
- Enter IONUser and select Check Names. It will automatically enter the name of your PC in front of IONUser. Make sure the PC name is there then select OK
- Select OK to exit the Allow log on locally Properties window.
Method 2: Add IONUser to a group that can log on locally
- Navigate to Control Panel → Administrative Tools → Computer Management
- In computer, management navigate to Local Users and Groups → Users and select the IONUser
- In the IONUser Properties navigate to Member Of and select Add
- Enter a group from the list that was shown in step three of the previous instructions and select Check Names.It will automatically enter the name of your PC in front of the selected group. Make sure the PC name is there then select OK
- Select OK to exit the IONUser Properties window.