Re: DCOM Autho Error 529 and 681 with Default Authentication Level = N

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 03/17/05 

Date: Wed, 16 Mar 2005 22:44:53 -0700

Default Authentication Level = None
means that no auth level has been set which will be used
only when the individual applications do not set an auth
level. You really need to look at the dcom permissions
of the specific components.

You really need to let your "IT" know that they have
hosed your line of business application, which likely
used to depend on domain credentials but now must go
through a list of negotiations before apparently finding
a way that will work (and which by the way is likely
very non-secure). If you are being able to use this now
without having adjusted the way the remoting is able
to authenticate, you may be relying on anonymous
access, which means you / your DB data is wide open
to malicious examination/poking/corruption/etc.. 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Craig" <Craig@discussions.microsoft.com> wrote in message
news:5DEA891B-52F3-40B8-9345-AB4B2C06C598@microsoft.com...
> Since IS moved our server out of it's trusted domain into it own
workgroup,
> what we see is that when ever our remote VB application application does a
> dcom CreateObject on the server MTS dlls, we get many of  the following
> errors Authentication security errors 681, 529, 681, 529 and the the
> application continues w/o problems except slowly.  We have turned off DCOM
> Authentication which had no effect.  We have a slowdown problem even if
event
> logging is turned off. There are 2 other servers (NT4 and W2K)
experiencing
> this problem.  Is there anyway we can stop to Authentication checks and
speed
> up our application?
>
> Our VB 6.0/DCOM/MS SQL application has been in production for 5 years.
The
> MS MTS / DCOM/ MS SQL 2000 is running on one W2K Server with SP 4.  IS
just
> changed the server configuration from a Domain with trusts to the main
> company domain to its own workgroup w/o trusts.  Since that time, we are
> getting a large number of Security Errors (Event ID 529 and 681 (error
code =
> 3221225572) and system access has gotten very slow.
>
> Default Security Properties for using dcomcnfg are Default Authentication
> Level = None and Default Impersonation Level = Anonymous or Delegate, or
> Identify, or Impersonate (have tried them all).
>
> At the Component Services level Authorization Enforce Access Checks is
> unchecked and Security Level = Perform Access Checks only at the process
> level and  Default Authentication Level = None and Default Impersonation
> Level = Anonymous or Delegate, or Identify, or Impersonate (have tried
them
> all).
>

Relevant Pages

  • Re: Access denied ( From one site to another, that is in another server)
    ... My web.config is set correctly and the IIS security is set correctly too at both sites ... NET site integrated authentication ... > server. ... you can implement impersonation through code and revert ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: How to use WindowsPrincipal properly??
    ... the administrators in the computer e.g. win2k ... I am basically confused with the role base authentication and the ... impersonation, not sure what exactly is the difference. ... > string ONLY returns the string "Administrator", ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • DCOM Autho Error 529 and 681 with Default Authentication Level = N
    ... Since IS moved our server out of it’s trusted domain into it own workgroup, ... Is there anyway we can stop to Authentication checks and speed ... level and Default Authentication Level = None and Default Impersonation ...
    (microsoft.public.win2000.security)
  • Re: System.IO.Directoryinfo throwing exception
    ... With basic authentication and impersonation you need to ... use a domain account which can delegate and you can check how to mark your ... ASP.NET MVP ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Access denied ( From one site to another, that is in another server)
    ... server. ... you can implement impersonation through code and revert ... This posting is provided "AS IS", with no warranties, and confers no rights. ... | Integrated Authentication ...
    (microsoft.public.dotnet.framework.aspnet.security)