Re: XP SP2 DCOM - permission denied

From: Schmidt (sss_at_online.de)
Date: 08/24/04 

Date: Tue, 24 Aug 2004 23:50:15 +0200

"John" <no@spam> schrieb im Newsbeitrag
news:OvKDkagiEHA.592@TK2MSFTNGP11.phx.gbl...

> Thanks, but the server exe was already in the exceptions list and in any
> case the firewall is turned off. I did try testing what port it uses to
> listen on but the port changes each time it loads up, so I don't think
> the firewall is the issue, unless all DCOM servers are now required to
> open their own port, which would not be possible, how would they know if
> they were stepping on someone else's port.

DCOM uses a whole PortRange (default from 1024:65535)
ou can limit this to at least 20 Ports under:
HKLM\Software\Microsoft\Rpc\Internet\
   Ports = "5000-5020"

Additionally the RPC-port for the SCM must be opened in the FW.

Olaf

Relevant Pages

  • Re: keeping ports open
    ... If a port is open, it means that 1) a software or service is running on your ... and 2) you're not using a firewall or your firewall isn't ... Use firewall software and hardware and antivirus software that is ... Follow the instructions for hardening Windows and IIS at ...
    (microsoft.public.security)
  • Re: How to Maintain an IIS Server?
    ... > server running on a Windows 2000 server. ... before a firewall and antivirus have been installed]. ... open ports; however, this will not identify which program is using the port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: CEICW fails at firewall config
    ... ISA Server prevents connection to a remote desktop when you connect through ... Remote Web Workplace on a Windows Small Business Server 2003-based computer ... Acceleration Server as a firewall. ... connection uses TCP port 4125. ...
    (microsoft.public.windows.server.sbs)
  • Re: How to Maintain an IIS Server?
    ... >> server running on a Windows 2000 server. ... > before a firewall and antivirus have been installed]. ... > program or executable using that port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Is secedit.exe left by a hacker?
    ... > tested on port 445. ... > I have a Linksys router that I use as a firewall to my ... Secedit.exe is the name of a legitimate Windows file, ... investigate the files on your computer - antivirus with the latest updates ...
    (microsoft.public.win2000.security)