Do We Need DCOM Enabled?



In order to further minimize attack surfaces, I'm thinking of

1) uninstalling "Enabled Network COM+ Access" in Add Remove Programs |
Windows Components | Application Servers

2) Starting DCOMCNFG and unselected the Enable DCOM checkbox

Which applications use either of these? When is it important to leave
DCOM enabled on a Windows 2000 and Windows 2003 server?

If you do 1) and 2), why does the DCOM Application Starter service remain in
Automatic state, and what functions is it performing?

I read that certificate autoenrollment uses DCOM. If you have DCOM
disabled, how would you register your certificates on new servers?

If we want to develop .NET applications, does the .NET 2.0 and 3.0
architecture require DCOM?

--
Will


.



Relevant Pages

  • Re: Do We Need DCOM Enabled?
    ... a system functions fine without DCOM ... Windows Components | Application Servers ... DCOM enabled on a Windows 2000 and Windows 2003 server? ...
    (microsoft.public.windows.server.security)
  • Error 10006 - DCOM error
    ... getting on one of my Windows 2000 servers. ... Event Source: DCOM ... DCOM got error "Class not registered " from the computer SERVER2 when ...
    (microsoft.public.windows.server.general)
  • From Tracker....
    ... Remember, we're talking about Windows Platforms 95,98 ... provided with Cable/DSL dial-up accounts. ... Wrong IP no news. ... We aren't talking about News Servers here (at the ...
    (comp.security.firewalls)
  • number 2
    ... Remember, we're talking about Windows Platforms 95,98 ... provided with Cable/DSL dial-up accounts. ... Wrong IP no news. ... We aren't talking about News Servers here (at the ...
    (alt.computer.security)
  • From Tracker....
    ... Remember, we're talking about Windows Platforms 95,98 ... provided with Cable/DSL dial-up accounts. ... Wrong IP no news. ... We aren't talking about News Servers here (at the ...
    (microsoft.public.security)