This topic has not yet been rated Rate this topic

The data connection uses Windows Authentication and user credentials could not be delegated. The following connections failed to refresh: PowerPivot Data

For Excel workbooks that contain PowerPivot data, Excel Services returns this error if it cannot connect to a PowerPivot server instance in SharePoint.

Product Name

Excel Services

Product Version

Microsoft SharePoint 2010

Cause

Connection failure when attempting to use a PowerPivot data provider.

Message Text

The data connection uses Windows Authentication and user credentials could not be delegated. The following connections failed to refresh: PowerPivot Data

There are multiple causes for this error message. The common factor behind all of them is that Excel Services cannot get a valid Windows user identity from a claims token in SharePoint. In the case of Excel workbooks that contain PowerPivot data, this error occurs when any of the following conditions exist:

  • The Claims to Windows Token Service is not running. You can confirm the cause of this error by viewing the SharePoint log file. If the SharePoint logs include the message "The pipe endpoint 'net.pipe://localhost/s4u/022694f3-9fbd-422b-b4b2-312e25dae2a2' could not be found on your local machine", the Claims to Windows Token Service is not running. To start it, use Central Administration and then verify the service is running in the Services console application.

  • A domain controller is not available to validate the user identity. The Claims to Windows Token Service does not use cached credentials. It validates the user identity for each connection. You can confirm the cause of this error by viewing the SharePoint log file. If the SharePoint logs include the message "Failed to get WindowsIdentity from IClaimsIdentity", the user identity could not be authenticated.

  • The computers must be members of the same domain or in domains that have a two-way trust relationship.

  • You must use Windows domain user accounts. The accounts must have a Universal Principal Name (UPN).

  • The Excel Services service account must have Active Directory permissions to query the object.

Use the following instructions to check the status of the Claims to Windows Token Service.

For all other scenarios, check with your network administrator.

Enable Claims to Windows Token Service

  1. In Central Administration, in System Settings, click Manage services on server.

  2. Select Claims to Windows Token Service, and then click Start.

  3. Verify the service is also running in the Services console:

    1. In Administrative Tools, click Services.

    2. Start the Claims to Windows Token Service if it is not running.

Did you find this helpful?
(1500 characters remaining)
Community Content Add
Annotations FAQ
Setting the super user account on SharePoint 2010 and getting Access Denied errors afterwards

The answer is here: http://blogs.msdn.com/b/andrasg/archive/2010/09/30/setting-the-super-user-account-on-sharepoint-2010-and-getting-access-denied-errors-afterwards.aspx

The super user is automatically set to a system account and needs to be changed.

"Claim to Windows Token Service" to "Act as part of the Operating System"

I did everything in this article but it didn't not solve my issue

But I tried the above suggestion

by adding "Claim to Windows Token Service" service account to Local Security Policy Under Local Policies--> User Rights Assignment

    Act as part of the operating system

it worked perfectly.



If the Service is started and running under a Domain Account
To get c2wts working under a domain account instead of LocalSystem, give the account the following permissions on the box running the service. Don’t forget to restart the service after granting the rights!
Make the account a part of the local administrators group.
Then in Local Security Policy Under Local Policies--> User Rights Assignment
    Act as part of the operating system