Export report from SSO Web Client not starting

Hello Andrea,

I am assuming you are on Server2008 or 2008R2. The issue is that a temp file is created when the PDF file is generated. If the file cannot be created, the PDF will not be generated. As SSO requires IIS impersonation, the temp file will be generated as the client's user instead of the App Pool's identity. As such, that user needs write access to the temp directory.

While the IIS AppPool is running at High Integrity when it impersonates a user it picks up that user's integrity level. As your users aren't elevated users on the server, UAC blocks them from modifying files in Program Files by default even if they have write permission.

The temp directory will be in one of two places depending on your setup:

C:\Program Files (x86)\Metastorm\BPM\Web\app_data\XtraReports\Filestore

OR

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files\metastorm\c59c8eb7\dc5ad27e\XtraReports\Filestore

***Note that this directory will not exist if a PDF has not been successfully generated. Login as a windows admin user and generate the PDF first if you haven't successfully generated a PDF.

To fix this for all users you will need to do the following:

1)Add Write access for the BUILTIN\Users group to the "FileStore" directory. This will cover all of your users but you could give them individual permissions if you wanted to lock it down further.

2)In a command prompt, move to the FileStore directory and run the following command:

icacls . /setintegritylevel l