for Windows 2003 with SP1 DCOM configuration

Transcription

1 for Windows 2003 with SP1 DCOM configuration When installing on a Microsoft Windows 2003 Server with Service Pack 1, additional DCOM settings need to be taken under consideration. Therefore, right-click on My Computer and select Manage from the context menu. H&S Heilig und Schubert Software AG Seite 1/11

2 On the Computer Management window expand the Local Users and Groups node and then select the Groups node. Doble-click the Distributed COM Users group to open its Properties window and add the following users to this group: - ASPNET (the local account) - IUSR_ (the local account) - superuser account H&S Heilig und Schubert Software AG Seite 2/11

3 After assigning these 3 accounts as members of the Distibuted COM Users group you need to give this group both Access and Launch permissions on the Component Services. Run Component Services (Start\Settings\Control Panel\Administrative Tools\Component Services). Expand the Component Services tree downto Computers\My Computer and right-click on My Computer to open its Properties window. On the Properties window switch over to the Default COM Security tab. For assigning Access Permissions to the Distibuted COM Users group you need to click Edit Default and on the next dialog just click Add. H&S Heilig und Schubert Software AG Seite 3/11

4 Make sure that the location you will be searching in is targeting to the computer and then click Advanced to find the Distibuted COM Users group. On the next dialog window just click Find Now, select the Distibuted COM Users group from the list under and click OK. H&S Heilig und Schubert Software AG Seite 4/11

5 You need to assign the Distibuted COM Users group both remote and local access permissions write. H&S Heilig und Schubert Software AG Seite 5/11

6 Follow a similar procedure for assigning Launch Permissions to the Distibuted COM Users group. Click Edit Default and on the next dialog just click Add. H&S Heilig und Schubert Software AG Seite 6/11

7 Make sure that the location you will be searching in is targeting to the computer and then click Advanced to find the Distibuted COM Users group. On the next dialog window just click Find Now, select the Distibuted COM Users group from the list under and click OK. H&S Heilig und Schubert Software AG Seite 7/11

8 You need to assign the Distibuted COM Users group both remote and local launch permissions write. H&S Heilig und Schubert Software AG Seite 8/11

9 Conclude by clicking OK. Additionaly to this, there is a need to allow the NETWORK SERVICE local DCOM rights too. To assign local access permisions, on the COM Secutity tab click Edit Default in the appropriate section, search for the local NETWORK SEVICE account and assign it local permissions. H&S Heilig und Schubert Software AG Seite 9/11

10 To assign local lunch and activation permisions, on the COM Secutity tab click Edit Default in the appropriate section, search for the local NETWORK SEVICE account and assign it local permissions. H&S Heilig und Schubert Software AG Seite 10/11

11 H&S Heilig und Schubert Software AG Seite 11/11