We are having a problem where we can't seem to restrict access to our SSRS Report Manager - at https://ourserver.com/reports
. Any user that we create inside our Active Directory can access and make changes in Report Manager. We can correctly set permissions for the Web Service URL - https://ourserver.com/reportserver
. For instance, right now there are only two users with any access for site settings or folder settings. There are no security groups granted permissions.
We have tried creating a new security group with no rights and then creating a new user which is only a member of this new security group. Still, it can login and get full access to Report Manager.
We are using SSRS 2008 on Windows 2008 Server - with a Windows 2008 Active Directory.