Best Practices Question

We have a small inventory database (<1GB). We have a public IIS Server and a
separate box SQL 2005 backend.
I have two ways I can deliver reports to the customer:
1.)create reports on the Reporting Server
2.)create them on the IIS Server locally (.rldc)
In each case I use the ReportViewer component to display them (so I either
connect the ReportViewer to Server Report or to a local .rdlc).
My question is, is it better to create reports on the report server or to do
them in the asp.net project locally -- an rdlc off a dataset?
Note load is very small so server power/capacity for both is not an issue in
this case.
Thank youAs far as executing them not much difference for your situation. However, it
is much easier to create reports for RS rather than local reports if you are
doing anything with subreports, drillthrough etc. You have to write code for
these situations which are handled for you automatically with RS. Also, no
such thing as preview report in development for rdlc. My advice if you go
the rdlc route is to at least develop most of the initial report using the
RS report designer (rather than the designer for rdlc that comes with VS).
Then once it is working (note that you do not need to have a server to
deploy to) rename the report from rdl to rdlc and then add it into your
project at that point.
Note that one thing that is easier with local reports is security, you
handle all that yourself.
--
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"dev648237923" <dev648237923@.noemail.noemail> wrote in message
news:eADLneepGHA.2292@.TK2MSFTNGP05.phx.gbl...
> We have a small inventory database (<1GB). We have a public IIS Server and
> a separate box SQL 2005 backend.
> I have two ways I can deliver reports to the customer:
> 1.)create reports on the Reporting Server
> 2.)create them on the IIS Server locally (.rldc)
> In each case I use the ReportViewer component to display them (so I either
> connect the ReportViewer to Server Report or to a local .rdlc).
> My question is, is it better to create reports on the report server or to
> do them in the asp.net project locally -- an rdlc off a dataset?
> Note load is very small so server power/capacity for both is not an issue
> in this case.
> Thank you
>|||Thanks for Bruce's input,
Hi dev648237923,
I agree with Bruce. As for Local report(rdlc based), it has less
functionality comparing to the server-report(rdl based) supported by the
SQL server reporting service. Actually, local report(rdlc) is a pure .net
framework and Visual Studio 2005 specific solution which is completely
separated from the SQL Server reporting service. In other words, you can
use rdlc report totally without an SQL Server reporting service instance
existing in your environment.(All the rdlc can be created in Visual Studio
and the datasource can be created there, too). While for SSRS report, it
provides many rich support on subreports or drillthrough reports, also the
whole SQL Server reporting services supply us many other features like
custom extensions or some report delivery options. These ones are what we
can not easily do through local report.
For your scenario, I'm wondering whether your report rely heavily on those
SSRS service functionalities. If all of them can be done through client
reports without any difference from server reports. Why not use client
reports, that can make all the work done through Visual Studio without
involving SQL Server reporting service.
Here is a reportviewer Q/A article which mentions many client and server
reports' difference.
#ReportViewer Control in Visual Studio 2005
http://www.gotreportviewer.com/
Please feel free to post here if you have any other concerns or
consideration on this.
Regards,
Steven Cheng
Microsoft MSDN Online Support Lead
==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)|||What you and Bruce said worked great -- thnaks for all the great info!
"Steven Cheng[MSFT]" <stcheng@.online.microsoft.com> wrote in message
news:86HUKzjpGHA.1572@.TK2MSFTNGXA01.phx.gbl...
> Thanks for Bruce's input,
> Hi dev648237923,
> I agree with Bruce. As for Local report(rdlc based), it has less
> functionality comparing to the server-report(rdl based) supported by the
> SQL server reporting service. Actually, local report(rdlc) is a pure .net
> framework and Visual Studio 2005 specific solution which is completely
> separated from the SQL Server reporting service. In other words, you can
> use rdlc report totally without an SQL Server reporting service instance
> existing in your environment.(All the rdlc can be created in Visual Studio
> and the datasource can be created there, too). While for SSRS report, it
> provides many rich support on subreports or drillthrough reports, also the
> whole SQL Server reporting services supply us many other features like
> custom extensions or some report delivery options. These ones are what we
> can not easily do through local report.
> For your scenario, I'm wondering whether your report rely heavily on those
> SSRS service functionalities. If all of them can be done through client
> reports without any difference from server reports. Why not use client
> reports, that can make all the work done through Visual Studio without
> involving SQL Server reporting service.
> Here is a reportviewer Q/A article which mentions many client and server
> reports' difference.
> #ReportViewer Control in Visual Studio 2005
> http://www.gotreportviewer.com/
> Please feel free to post here if you have any other concerns or
> consideration on this.
> Regards,
> Steven Cheng
> Microsoft MSDN Online Support Lead
>
> ==================================================> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==================================================>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> Get Secure! www.microsoft.com/security
> (This posting is provided "AS IS", with no warranties, and confers no
> rights.)
>|||Thanks for the followup,
Glad that those information is of assistance.
Please feel free to post here if there is anything we can help & Have a
nice day!
Regards,
Steven Cheng
Microsoft MSDN Online Support Lead
==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

Best practices for accessing a sql 2005 db on the SAME box as IIS 6.0 serving asp.net 2.0

I am re-posting this from the security Forum where it remains un-answered.OK, Here's the set up.I have a Windows 2003 box, soon to have SSL installedOn it is IIS 6.0, SQL 2005 Standard Edition (5Cal user lic) SOON I'll have a prod enviornemnt where a web app being served by IIS is accessing SQL. I can go into SQL and set up a user account, call it MyAppSQLAcess, and code that into the connectionn string and lock it down to the tables/db it has access to. Or I can do it w/windows authentication, or I can do it a number of other ways, the question is this:What is the best way for an asp.net app being server by IIS 6.0 to access data from SQL 2005 server when they are all on the same BOX? WRT Speed and security? Thanks Dan

You really should take some time to read the information in the link below which is also in SQL 2005 Books Online. It'll help you in making informed decisions.

http://msdn2.microsoft.com/en-us/library/bb283235.aspx

Best of Luck!

|||

Thanks!
Nice link. Here is also another short concise article I found helpful

http://vyaskn.tripod.com/sql_server_security_best_practices.htm

Best Practices Analyzer

Why do I keep getting a login error box when I try to login to the BPA? I am
logging in with the same ID as I used to create the repository.
Hi Jim
BPA just tunnels through the connection information.
Can you connect from query analyzer?
Can you please provide more info on the error that you are getting?
Thanks,
- Christian
___________________________
Christian Kleinerman
Program Manager, SQL Engine
This posting is provided "AS IS" with no warranties, and confers no rights.
"JimW" <anonymous@.discussions.microsoft.com> wrote in message
news:E9D0888C-B01E-426A-9A74-E27E3C4113FE@.microsoft.com...
> Why do I keep getting a login error box when I try to login to the BPA? I
am
> logging in with the same ID as I used to create the repository.
|||Yes I can get in with Query Analyzer. All I get is a pop up window that says Login Error with a red x and a button to click ok.
-- Christian Kleinerman [MS] wrote: --
Hi Jim
BPA just tunnels through the connection information.
Can you connect from query analyzer?
Can you please provide more info on the error that you are getting?
Thanks,
- Christian
___________________________
Christian Kleinerman
Program Manager, SQL Engine
This posting is provided "AS IS" with no warranties, and confers no rights.
"JimW" <anonymous@.discussions.microsoft.com> wrote in message
news:E9D0888C-B01E-426A-9A74-E27E3C4113FE@.microsoft.com...
> Why do I keep getting a login error box when I try to login to the BPA? I
am
> logging in with the same ID as I used to create the repository.
|||From your post seems that repository database was created successfully
during setup. This would tell me that your managed stack is working well.
(i.e. SqlClient)
Can you try to login with profiler attached capturing logon and error
events, and verify 1) whether a connection is being established and 2)
whether any error is being reported?
Thanks,
- Christian
___________________________
Christian Kleinerman
Program Manager, SQL Engine
This posting is provided "AS IS" with no warranties, and confers no rights.
"JimW" <anonymous@.discussions.microsoft.com> wrote in message
news:DB5F277F-6FFC-4C3B-902B-E1885A884A4C@.microsoft.com...
> Yes I can get in with Query Analyzer. All I get is a pop up window that
says Login Error with a red x and a button to click ok.
> -- Christian Kleinerman [MS] wrote: --
> Hi Jim
> BPA just tunnels through the connection information.
> Can you connect from query analyzer?
> Can you please provide more info on the error that you are getting?
> Thanks,
> - Christian
>
> --
> ___________________________
> Christian Kleinerman
> Program Manager, SQL Engine
> This posting is provided "AS IS" with no warranties, and confers no
rights.[vbcol=seagreen]
> "JimW" <anonymous@.discussions.microsoft.com> wrote in message
> news:E9D0888C-B01E-426A-9A74-E27E3C4113FE@.microsoft.com...
BPA? I
> am
>
>
|||This is what I get from profiler with all error possibilities and other things.
10NULLNULLNULLNULLNULLNULLNULL2004-05-19 08:53:32.880NULLNULLNULL
211exec sp_reset_connectionjweber0SQL Best Practices AnalyzerWPSR\jweber51NULL2004-05-19 08:53:36.940NULLNULLNULL
310exec sp_reset_connectionjweber0SQL Best Practices AnalyzerWPSR\jweber5102004-05-19 08:53:36.940000
440select * from sysobjects where name = N'bpa_active_connections' or name =N'bpa_bestpractices' or name =N'bpa_files' or name =N'bpa_instance_results' or name =N'bpa_managed_types' or name =N'bpa_properties' or name =N'bpa_bestpractice_sqlservers' or
name jweber0SQL Best Practices AnalyzerWPSR\jweber51NULL2004-05-19 08:53:36.940NULLNULLNULL
5114select * from sysobjects where name = N'bpa_active_connections' or name =N'bpa_bestpractices' or name =N'bpa_files' or name =N'bpa_instance_results' or name =N'bpa_managed_types' or name =N'bpa_properties' or name =N'bpa_bestpractice_sqlservers' o
r name jweber0SQL Best Practices AnalyzerWPSR\jweber51NULL2004-05-19 08:53:36.957NULLNULLNULL
612select * from sysobjects where name = N'bpa_active_connections' or name =N'bpa_bestpractices' or name =N'bpa_files' or name =N'bpa_instance_results' or name =N'bpa_managed_types' or name =N'bpa_properties' or name =N'bpa_bestpractice_sqlservers' or
name jweber0SQL Best Practices AnalyzerWPSR\jweber51162004-05-19 08:53:36.940374016
715NULLjweber0SQL Best Practices AnalyzerWPSR\jweber511929232004-05-19 08:50:24.033413016
814-- network protocol: TCP/IP set quoted_identifier on set implicit_transactions off set cursor_close_on_commit off set ansi_warnings on set ansi_padding on set ansi_nulls on set concat_null_yields_null on set language us_english set dateformat mdy set
datefjweber0SQL Best Practices AnalyzerWPSR\jweber51NULL2004-05-19 08:53:37.003NULLNULLNULL
95NULLNULLNULLNULLNULLNULLNULLNULLNULLNULLNULL
-- Christian Kleinerman [MS] wrote: --
From your post seems that repository database was created successfully
during setup. This would tell me that your managed stack is working well.
(i.e. SqlClient)
Can you try to login with profiler attached capturing logon and error
events, and verify 1) whether a connection is being established and 2)
whether any error is being reported?
Thanks,
- Christian
___________________________
Christian Kleinerman
Program Manager, SQL Engine
This posting is provided "AS IS" with no warranties, and confers no rights.
"JimW" <anonymous@.discussions.microsoft.com> wrote in message
news:DB5F277F-6FFC-4C3B-902B-E1885A884A4C@.microsoft.com...
> Yes I can get in with Query Analyzer. All I get is a pop up window that
says Login Error with a red x and a button to click ok.[vbcol=seagreen]
> BPA just tunnels through the connection information.
> Can you connect from query analyzer?
> Can you please provide more info on the error that you are getting?
> ___________________________
> Christian Kleinerman
> Program Manager, SQL Engine
rights.[vbcol=seagreen]
> news:E9D0888C-B01E-426A-9A74-E27E3C4113FE@.microsoft.com...
BPA? I[vbcol=seagreen]
> am