Click here to get back home

Setting COM Security at the parent levels

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Setting COM Security at the parent levels Flash08 11-07-2006
Posted by Flash08 on November 7, 2006, 10:01 am
Please log in for more thread options
Hi,

I am working on an install and we use DCOM with our product. I know
how to setup DCOM on the DCOM Config level and setup my individual
components, but is there a way to add a user to the parent level COM
security? We've noticed that if you don't add the user to have Local
Launch, Remote Launch, Local and Remote Activation, and Local and
Remote Access under Launch and Activation Permissions and Access
Permissions that the user does not have the access it needs.

This has lead to change this manually on customer's machines after the
installation. Is there any way to automate this, and add users to
this parent level security? Please let me know any advice you have.
Thanks.


Posted by Flash08 on November 7, 2006, 3:30 pm
Please log in for more thread options
In case anyone wants the answer, I figured it out.

Using the tool dcomperm:

dcomperm -ml set domain\username permit level:l,r
dcomperm -ma set domain\username permit level:l,r
dcomperm -dl set domain\username permit level:l,r
dcomperm -da set domain\username permit level:l,r

This sets the 4 default parent level COM security for the user
domain\username


Flash08 wrote:
> Hi,
>
> I am working on an install and we use DCOM with our product. I know
> how to setup DCOM on the DCOM Config level and setup my individual
> components, but is there a way to add a user to the parent level COM
> security? We've noticed that if you don't add the user to have Local
> Launch, Remote Launch, Local and Remote Activation, and Local and
> Remote Access under Launch and Activation Permissions and Access
> Permissions that the user does not have the access it needs.
>
> This has lead to change this manually on customer's machines after the
> installation. Is there any way to automate this, and add users to
> this parent level security? Please let me know any advice you have.
> Thanks.


Similar ThreadsPosted
Auto-enrollment setting at different OU levels June 19, 2007, 4:59 pm
Please help - RPC problem caused by parent domain's security settings? February 24, 2006, 5:12 am
question on setting security November 9, 2006, 10:20 pm
Publish Certificates in AD - parent\child domain April 4, 2006, 6:13 pm
FileACL Syntax to Replace File ACLs from Parent January 20, 2006, 11:53 pm
Request Cert via certificates MMC snapin with CA in parent domain December 6, 2006, 10:44 am
Cannot manage Entreprise CA that is in parent domain from child domain May 7, 2008, 4:03 am
Setting up IIS 6.0 tutorial February 21, 2006, 4:38 pm
Setting Audit from CLI March 6, 2007, 8:42 pm
Setting up LDAPS July 11, 2007, 2:41 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap