Re: DCOMCNFG nightmare with service

Hi markiemooster,

I've written an ATL service and added an ATL simple object using
VS2008. ... my test app CoCreateInstance fails with
CO_E_SERVER_EXEC_FAILURE (0x80080005) after 30 seconds or so.
....
Launch and Activation Permissions: Administrators have all permissions
Access Permissions: Administrators have all permissions
Configuration Permissions: Administrators have all permissions

I've checked and DCOM is enabled on my computer.
I've added the Administrator account I use to the "Distributed COM Users"
group
....
In case it makes any difference, I'm running Vista Ulitmate with SP1.

Try adding a manifest with requireAdministrator. Goto Project Properties,
Linker->Manifest File->UAC Exec Level = requireAdministrator.

My guess is that your apps are not elevated hence they are not "really"
running with the full admin token and get an access denied. With the
correct manifest you should get them running elevated, but at a security
risk!

You might want to think about using another explicit account and not
the Administrators group to get the securtity tight again by giving only
the minimal rights and privileges to your executables.

--
SvenC
.

Relevant Pages

  • Re: Shared permissions vs. security
    ... Did you have to make the users power users or administrators only after you ... write/modify permissions to a folder if that is what they need to do their ... -- Verify that membership in the administrators group on all computers is ... updates at Windows Updates. ...
    (microsoft.public.win2000.security)
  • RE: Access Denied when running RSoP
    ... The launch and activation security descriptor for the COM Server application ... It contains Access Control Entries with permissions that are ... which is a part of the McAfee Common ... > Administrators - Full Control - This namespace and subnamespaces ...
    (microsoft.public.windows.server.sbs)
  • Re: Open With.. functionality doesnt fully work
    ... key's permissions are getting munged, ... > Small correction: ... > Ramesh, Microsoft MVP ... >> Administrators ...
    (microsoft.public.windowsxp.customize)
  • Re: Open With.. functionality doesnt fully work
    ... key's permissions are getting munged, ... > Small correction: ... > Ramesh, Microsoft MVP ... >> Administrators ...
    (microsoft.public.windowsxp.customize)
  • Re: Windows Server 2003 Auto connect printers;
    ... Users who are Administrators are able to see ... > software applications functioning properly with limited ... > You do this by granting only those permissions that are ... > directory and registry keys at a minimum. ...
    (microsoft.public.win2000.termserv.apps)