English

Error: Unable to connect to SQL Server

Error Message

When configuring security in ArcGIS Server Manager on Windows 2008 R2 (IIS 7.5), navigating to either the Users or Roles pages displays the following error message:

"Unable to connect to SQL Server. Possible reasons include SQL Server
not running, network problems, and permission denied for the account
used to access SQL Server. See ArcGIS Server Help for more information."

This issue applies to ArcGIS Server for the Microsoft .NET Framework.

Cause

The default identity of Internet Information Services (IIS) application pools has changed to 'ApplicationPoolIdentity' in IIS 7.5. In earlier IIS versions, the default identity was 'NetworkService'.

Solution or Workaround

Create a new application pool that runs as the NetworkService identity and assign the ArcGIS Server applications to use this application pool.

  1. Open the Internet Information Services (IIS) Manager.
  2. Right-click the Application Pools node and select 'Add Application Pool...'.
    [O-Image] Add Application Pool
  3. Specify the new name as 'ArcGISApplicationsAppPool' (or a name of your choice).
    [O-Image] Add Application Pool Dialog
  4. In the list of Application Pools, right-click 'ArcGISApplicationsAppPool' and select Advanced Settings...
    [O-Image] Advanced Settings
  5. In the Advanced Settings dialog box, set the following properties:

    Enabled 32-bit Application = TRUE
    Identity = NetworkService

    [O-Image] Advanced Settings Dialog
  6. While still in IIS Manager, navigate to the ArcGIS Server instance.
  7. Right-click the Manager Web application and select Manage Application > Advanced Settings....
    [O-Image] Web Application Advanced Settings
  8. In the Advanced Settings dialog box, change the Application Pool setting to 'ArcGISApplicationsAppPool'.
    [O-Image] Web Applications Advanced Settings Dialog
  9. Repeat Step 8 for each Web application in the instance:

    KML
    Manager
    Mobile
    REST
    Security
    Services
    Tokens
    WMS
  10. Close the IIS Manager.
  11. Log in to SQL Server Management Studio.
  12. Add 'NT AUTHORITY\NETWORK SERVICE' as a login under Security > Logins > New Login...
    [O-Image] SQL Server New Login
  13. Under the 'User Mapping for the Network Service' account, add the following database role membership for the SQL Database that will be used to store ArcGIS Server users and roles. In this example, the database is called ArcGISServer.

    aspnet_Membership_BasicAccess
    aspnet_Membership_FullAccess
    aspnet_Membership_ReportingAccess
    aspnet_Roles_BasicAccess
    aspnet_Roles_FullAccess
    aspnet_Roles_ReportingAccess

    [O-Image] User Mapping
  14. Close SQL Server Management Studio.
  15. In ArcGIS Server Manager, Users and Roles can now be accessed and configured when using a SQL Server security store.