Re: How to configure DCOM settings in a network?



tango wrote:
To allow a non administrator user to query WMI some changes must be done to
Access permissions and Launch and Activation permissions in DCOM
configuration.

We know it can be done using dcomcnfg.exe but we need to monitor a large
network and we would like to configure all system settings at once. Does
anybody know if there is a way to perform this settings from the domain
controler? If there is not, which is the best way to automatically change
this values? Setting Windows registry? Is there any API that permits to
perform a safe change of this values?


You can reset the DCOM access permissions by deleting the following registry key:
HKLM\SOFTWARE\Microsoft\Ole\DefaultAccessPermission


So you might have a nosy round in there.

However there's a lot more than just DCOM that you'll have to verify if you want non-admins to be able to access WMI.

If you send me an email I can get you a PDF that describes everything you'll need to look at.

--

Best Regards,

James Crosswell
Software Engineer
Microforge.net Limited
http://www.microforge.net
.



Relevant Pages

  • DCOM access permission / authentication level with .NET client
    ... We have a .NET application acting as a client to a DCOM server. ... default access permissions: SYSTEM, SELF, user that is configured to ...
    (microsoft.public.win32.programmer.ole)
  • Re: Server cannot access client
    ... I have tried using DCOM error logging but after I run my client and ... for COM Server applications to the user NT AUTHORITY\NETWORK SERVICE ... I managed to get my OPC client and server working in a domain, ... I've set the same user accts, given access permissions to the admin, ...
    (microsoft.public.win32.programmer.ole)
  • How to configure DCOM settings in a network?
    ... Access permissions and Launch and Activation permissions in DCOM ... configuration. ... network and we would like to configure all system settings at once. ...
    (microsoft.public.win32.programmer.wmi)
  • Re: SMS 2003 Admin Console XP SP2
    ... >1 issue on there that is not quite complete is the dcom ... instructions. ... >Make sure you reboot after the last step: ... > In the Access Permissions dialog box, ...
    (microsoft.public.sms.admin)
  • Re: Lexmark Z35 in an XPSP2 home network using WinME clients
    ... (as well as other suggestiones including cleanly removing Lexmark drivers). ... > It's an issue with the DCOM communication interface. ... We did some investigation with DCOMCNFG and noticed that we ... the allow and deny settings for Remote Access were ...
    (microsoft.public.windowsxp.print_fax)