Do you use the correct authentication for reports?

Using anonymous authentication is not recommended because of security reasons.

• Anonymous accounts (the IUSER_and IWAM_ accounts) are managed by windows security system. We do not want to use these accounts because we have to manually configure our report server security settings.
• We do not want everyone on the Internet update or overwrite stuffs on the report server. Besides, anonymous authentication is no longer supported in RS 2008.

The best way to expose your report is to use ReportViewer and setup the credentials on it using ReportViewerCredentials.

Dim userName As String = ConfigurationManager.AppSettings("ReportViewer_UserName")
Dim password As String = ConfigurationManager.AppSettings("ReportViewer_Password")
Dim domain As String = ConfigurationManager.AppSettings("ReportViewer_UserDomain")
reportViewer.ServerReport.ReportServerCredentials = New ReportViewerCredential(userName, password, domain)

Dim paramList As List(Of ReportParameter) = New List(Of ReportParameter)
paramList.Add(New ReportParameter("ClientContactID", mintClientContactID, False))
reportViewer.ServerReport.SetParameters(paramList)