Re: How to get permission to launch application to remote machine with DCOM ?

From: Tarek Kamel [MS] (tarekk@online.microsoft.com)
Date: 09/10/02


From: "Tarek Kamel [MS]" <tarekk@online.microsoft.com>
Date: Tue, 10 Sep 2002 11:17:24 -0700


There are two aspects for this.
First, what does the security permissions on the DCOM object allow access
to. this you can adjust from:
    - run mmc
    - add the "component service"
    - expand to Computers->My Computer->DCOM config
    - Select the DCOM object, right click and select "properties"
    - select the "Security" tab and adjust to whom you wish to grant access.

Second need to be able to authenticate to the remote machine. this can be:
    - the user on the client machine can authenticate (like if this is a
domain environment and this user is a domain user) and the DCOM object
allows access to that user (use above)
    - same local user exists on both machines with the same password and the
DCOM object allows access to that user (use above)
    - Guest account is enabled on the remote machine, in which case your
client account will be authenticated as guest on the remote machine and the
DCOM object allows access to Guest (use above)
        the last option though allows who have access to the machine to
logon as guest and allows any one to access that DCOM object and thus this
last approach is weakest and should only be used in a closed environment.

Thanks,
-Tarek

--
This posting is provided "AS IS" with no warranties, and confers no rights.
"Чжен Сергей" <sergeyc@mcd.ru> wrote in message
news:uAwTZ1$VCHA.1704@tkmsftngp10...
> Hi All.
>
> I'm faced with problem: I can't launch application on remote machine with
> DCOM.
>
> I have Client-Server application developed on COM technology.
>
> I want launch EXE-COM server on remote machine (Win 2000 Server) with DCOM
> in security context of interactive user of caller machine (client).
>
> DCOM reports "Access denied" on message box on client and in Event Viewer
I
> can read message "General Permission Denied.".
>
> If I try launch COM server locally with DCOM it's all right. Remote
> launching is unsuccessfull.
>
> How I can get to client permission to launch application on remote
machine?
> Include in specific group ? Edit local security policy ? Anything else ?
>
> Thanks for any regards.
>
> Sergey.
>
>


Relevant Pages

  • access deny error when interop with dcom event
    ... I finally created a instance of DCOM object from a remote machine(DCOM dll ... was already added to my project reference): ... System.Type t = Type.GetTypeFromCLSID(guid, "remote machine", true); ...
    (microsoft.public.dotnet.framework.interop)
  • Example code on using CoSetProxyBlanket and CoCreateInstanceEx
    ... Im trying to create a DCOM object on a remote machine, ... supply my credentials using CoSetProxyBlanket after creating the object ...
    (microsoft.public.dotnet.languages.csharp)
  • How to get permission to launch application to remote machine with DCOM ?
    ... I want launch EXE-COM server on remote machine with DCOM ... DCOM reports "Access denied" on message box on client and in Event Viewer I ...
    (microsoft.public.win2000.security)
  • Re: win32 service and sockets
    ... I have found that it works if I launch the client on the same ... It will not work from a remote machine. ... It was the built-in firewall that was getting me. ...
    (comp.lang.python)
  • DCOM configuration problem
    ... I have a Windows client application written in VB 6 running on "Computer A" ... The DCOM object is an out-of-proc server also ... So I go to DCOMCNFG on "Computer B" and give "User A" launch and access permissions to my DCOM object. ...
    (microsoft.public.vb.com)