Re: How to get permission to launch application to remote machine with DCOM ?
From: Tarek Kamel [MS] (tarekk@online.microsoft.com)
Date: 09/10/02
- Next message: Tarek Kamel [MS]: "Re: disabling DOS access"
- Previous message: Thomas: "Analysis Services Security"
- In reply to: Чжен Сергей: "How to get permission to launch application to remote machine with DCOM ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Tarek Kamel [MS]" <tarekk@online.microsoft.com> Date: Tue, 10 Sep 2002 11:17:24 -0700
There are two aspects for this.
First, what does the security permissions on the DCOM object allow access
to. this you can adjust from:
- run mmc
- add the "component service"
- expand to Computers->My Computer->DCOM config
- Select the DCOM object, right click and select "properties"
- select the "Security" tab and adjust to whom you wish to grant access.
Second need to be able to authenticate to the remote machine. this can be:
- the user on the client machine can authenticate (like if this is a
domain environment and this user is a domain user) and the DCOM object
allows access to that user (use above)
- same local user exists on both machines with the same password and the
DCOM object allows access to that user (use above)
- Guest account is enabled on the remote machine, in which case your
client account will be authenticated as guest on the remote machine and the
DCOM object allows access to Guest (use above)
the last option though allows who have access to the machine to
logon as guest and allows any one to access that DCOM object and thus this
last approach is weakest and should only be used in a closed environment.
Thanks,
-Tarek
-- This posting is provided "AS IS" with no warranties, and confers no rights. "Чжен Сергей" <sergeyc@mcd.ru> wrote in message news:uAwTZ1$VCHA.1704@tkmsftngp10... > Hi All. > > I'm faced with problem: I can't launch application on remote machine with > DCOM. > > I have Client-Server application developed on COM technology. > > I want launch EXE-COM server on remote machine (Win 2000 Server) with DCOM > in security context of interactive user of caller machine (client). > > DCOM reports "Access denied" on message box on client and in Event Viewer I > can read message "General Permission Denied.". > > If I try launch COM server locally with DCOM it's all right. Remote > launching is unsuccessfull. > > How I can get to client permission to launch application on remote machine? > Include in specific group ? Edit local security policy ? Anything else ? > > Thanks for any regards. > > Sergey. > >
- Next message: Tarek Kamel [MS]: "Re: disabling DOS access"
- Previous message: Thomas: "Analysis Services Security"
- In reply to: Чжен Сергей: "How to get permission to launch application to remote machine with DCOM ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|