Click here to get back home

DCOM Communication problem on W2003 SP1

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
DCOM Communication problem on W2003 SP1 imuraca 07-29-2005
Posted by imuraca on July 29, 2005, 11:10 am
Please log in for more thread options
Hi,
I have installed W2003 SP1. My application components uses DCOM to
communicate between W2003 server and Windows XP. After installing SP1 on
W2003 all the components do not work correctly while accessing the registry
and don't communicate between them. Only if I use an Administor Group user
is everything ok. Can I use a user with only Power User previlege ? How can
I set W2003 correctly?
Thanks,
Ivan





Posted by Roger Abell on July 31, 2005, 7:35 am
Please log in for more thread options
I suggest that you research the MS website for the docs for W2k3 SP1,
specifically the changes in SP1 docs that cover RCP and COM support.
The security was adjusted similarly as was done with XP SP2 and as
a result things that were previously configured in a potentially unsafe
mannor will break.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
> Hi,
> I have installed W2003 SP1. My application components uses DCOM to
> communicate between W2003 server and Windows XP. After installing SP1 on
> W2003 all the components do not work correctly while accessing the
registry
> and don't communicate between them. Only if I use an Administor Group user
> is everything ok. Can I use a user with only Power User previlege ? How
can
> I set W2003 correctly?
> Thanks,
> Ivan
>
>
>




Posted by imuraca on August 1, 2005, 10:02 am
Please log in for more thread options
Hi,
I have made the same changes in Windows 2003 SP1, made in Windows XP SP2
and the problem persist. I have read all the documentation about Windows
2003 SP1 and I have not found the correct settings. Is there a check list
for resolve DCOM communication problem in Windows 2003 SP1 ?

Thank you,
Ivan


> I suggest that you research the MS website for the docs for W2k3 SP1,
> specifically the changes in SP1 docs that cover RCP and COM support.
> The security was adjusted similarly as was done with XP SP2 and as
> a result things that were previously configured in a potentially unsafe
> mannor will break.
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
> MCSE (W2k3,W2k,Nt4) MCDBA
> > Hi,
> > I have installed W2003 SP1. My application components uses DCOM to
> > communicate between W2003 server and Windows XP. After installing SP1 on
> > W2003 all the components do not work correctly while accessing the
> registry
> > and don't communicate between them. Only if I use an Administor Group
user
> > is everything ok. Can I use a user with only Power User previlege ? How
> can
> > I set W2003 correctly?
> > Thanks,
> > Ivan
> >
> >
> >
>
>




Posted by Insub Chang on August 2, 2005, 8:07 pm
Please log in for more thread options
I think your dcom case is not that doomed, yet. Definately it is
security issue not com interop compatibility issue by SP1.

The goal of troubleshooting should be what account was access denied to
run what from your component. Since the old dcomcnfg.exe is migrated to
component services in Windows 2003, you should check com+ first.

Then turn on audit on your machine from local security policy. Also
turn on file systems audit on c: and the local disk drive your app runs
from.

This will give you a starting point to identify why your app is working
with local admin but not work without local admin.

imuraca wrote:
> Hi,
> I have made the same changes in Windows 2003 SP1, made in Windows XP SP2
> and the problem persist. I have read all the documentation about Windows
> 2003 SP1 and I have not found the correct settings. Is there a check list
> for resolve DCOM communication problem in Windows 2003 SP1 ?
>
> Thank you,
> Ivan
>
>
> > I suggest that you research the MS website for the docs for W2k3 SP1,
> > specifically the changes in SP1 docs that cover RCP and COM support.
> > The security was adjusted similarly as was done with XP SP2 and as
> > a result things that were previously configured in a potentially unsafe
> > mannor will break.
> >
> > --
> > Roger Abell
> > Microsoft MVP (Windows Security)
> > MCSE (W2k3,W2k,Nt4) MCDBA
> > > Hi,
> > > I have installed W2003 SP1. My application components uses DCOM to
> > > communicate between W2003 server and Windows XP. After installing SP1 on
> > > W2003 all the components do not work correctly while accessing the
> > registry
> > > and don't communicate between them. Only if I use an Administor Group
> user
> > > is everything ok. Can I use a user with only Power User previlege ? How
> > can
> > > I set W2003 correctly?
> > > Thanks,
> > > Ivan
> > >
> > >
> > >
> >
> >



Similar ThreadsPosted
KB929123 W2003 June 26, 2007, 10:10 am
Can't run 16 bit app from network drive in W2003 SP1 January 30, 2006, 5:09 pm
Security Diff. W2000, W2003 March 22, 2006, 11:09 am
IIS worker process crashes on w2003 SP1 DC August 6, 2006, 12:58 pm
StartDoc fails on W2003 SP1 on a restricted user May 24, 2006, 8:48 am
confusion about W2003 SP1 security configuration wizard July 28, 2006, 9:07 am
W2003 PKI: Publish certificates onto user objects in active directory December 14, 2005, 1:04 pm
Do We Need DCOM Enabled? February 10, 2007, 10:18 pm
DCOM + IIS + user credential December 16, 2005, 5:00 am
DCOM security hole? December 19, 2005, 6:13 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap