DCOM and anonymous access on XP/Vista
- From: "nicolasr" <nicolasrREMOVETHISSPAMBLOCKER@xxxxxxx>
- Date: Fri, 8 Feb 2008 04:16:18 +0100
Hi all,
I have a question regarding DCOM security settings on XP/Vista.
Say I have a DCOM server and want to configure it for anonymous
access. (Btw the server is already started and the problem is just about
access rights, not start/activation rights)
On Win2K it was enough to add the Everyone identity to the access
rights list via dcomcnfg and allow remote access.
Now I try to make this work with Vista on the client computer and
XP on the server computer. The order doesn't seem to matter, though.
The first thing I read was that Anonymous was no longer a member of
Everyone. Ok, I added Anonymous explicitly to the servers access rights
list but the client still gets and error "Interface XY not found". (This error
message is not very helpful and is generated by a third party client I use
for the tests).
Then I found a comment on the net that tells me to use dcomcnfg and
edit the system wide access "limits" to allow anonymous access and
boom! it works.
My problem is probably a misunderstanding of this "Edit limits" feature
introduced in WinXP. I thought that it was introduced to allow an
administrator to prevent certain users or groups from accessing DCOM
servers system wide. F.e. an administrator may want to disallow anonymous
access completely and independently of the servers individual settings.
So when talking about "limits" what does it mean when I use the "Edit limits"
button in dcomcnfg, add Anonymous to the list and allow it remote access?
Does this mean that now all DCOM servers on the system are forced to
allow anonymous access? Certainly something I didn't intend to do.
Moreover, after allowing anonymous access in the "limits" I can even disallow
anonymous access in the servers own DCOM settings but it is ignored!
Any ideas are very appreciated!
(Btw: firewalls, UAC were switched off in this test)
thanks,
Nicolas
.
- Follow-Ups:
- Re: DCOM and anonymous access on XP/Vista
- From: Brian Muth
- Re: DCOM and anonymous access on XP/Vista
- Prev by Date: Re: How to get User Interface [out] using IDispatch::Invoke
- Next by Date: Re: DCOM and anonymous access on XP/Vista
- Previous by thread: Re: How to get User Interface [out] using IDispatch::Invoke
- Next by thread: Re: DCOM and anonymous access on XP/Vista
- Index(es):
Relevant Pages
|
