18 DCOM Settings with the dcomcnfg System Program
Table
Default Permissions | Meaning | |
|
| |
Access permissions | The default access permissions for all COM objects specify which | |
| accounts are allowed to access the object; in other words, call the | |
| methods and which accounts are explicitly denied access. | |
|
| |
Launch permissions | The default launch permissions for all COM objects specify which | |
| accounts have the right to create the object and which accounts are | |
| explicitly denied this permission. | |
|
| |
Configuration permissions | The default configuration permissions specify which accounts can | |
(Windows 2000 only) | modify the information in the registry about COM objects; in other | |
words can also install new objects on the computer. | ||
| ||
|
|
These permissions can be set individually for each object and the default properties are then ignored.
Settings for Simple Commissioning
If you make the following settings for the user accounts “EVERYONE”, “INTERACTIVE”, “NETWORK” and “SYSTEM” both at the client and server end, you will find it simple to commission DCOM:
SAccess permissions: (Allow access)
SLaunch permissions: (Allow launch)
SConfiguration permissions: (Full control)
When working in a domain, it is adequate to enter only the user accounts “SYSTEM” and the accounts of the authorized users in the lists for access, launch, and configuration rights on the client and server.
Notice
These settings make commissioning straightforward but allow every user in the network access to the computer. If you have security problems with these settings, the permissions must be restricted to individual user accounts.
258 | Commissioning PC Stations - Manual and Quick Start |
Release 5/2005 |
