HOW TO: Set Permissions for Distributed COM Programs in Windows 2000 (323287)

SUMMARY

This step-by-step article describes how to set the access permissions for the distributed version of Component Object Model (COM) programs.

back to the top

Set Default Permissions for All Distributed COM Programs

To set default permissions for all distributed COM programs:

1. Click Start, click Run, type dcomcnfg, and then click OK.
2. Click the Default Security tab.
3. Under Default Access Permissions, under Default Launch Permissions, and under Default Configuration Permissions, click Edit Default to set default permissions.
4. If appropriate, click Add to add other user accounts to the Name box.
5. In the Name box, select the user or group whose default permissions you want to change.
6. In the Type of Access box, select an access type for the selected user or group.

NOTE: To customize configuration permissions, open the Registry Key Permissions dialog box, and then click Special Access under Type of Access.

back to the top

Set Custom Permissions for a Specific Distributed COM Program

To set custom permissions for a specific distributed COM program:

1. Click Start, click Run, type dcomcnfg, and then click OK.
2. Click the Applications tab, click the program that you want to configure, and then click Properties.
3. Click the Security tab, click Use custom access permissions, click Use custom launch permissions, or click Use custom configurations permissions as appropriate, and then click Edit.
4. If appropriate, in the Registry Value Permissions dialog box, click Add to add other user or group accounts to the Name box.
5. In the Name box, click the user or group whose permissions you want to set.
6. In the Type of Access box, select an access type for the selected user or group.

back to the top

Set Special Access Configuration Permissions for Distributed COM Programs

To set special access configuration permissions for distributed COM programs:

1. Click Start, click Run, type dcomcnfg, and then click OK.
2. Click the Default Security tab, and then click Edit Default under Default Configuration Permissions.
3. In the Registry Key Permissions section, click Special Access in the Type of Access box.
4. Click any of the following settings to select the type of control you want to assign to the selected user or group:
   • Full Control (All): Click this setting to assign Full Control.
   • Other: Click this setting, and then click the types of access that you want to assign to customize special access.
   • Query Value: Click this setting to allow the user to read a value entry from the registry key.
   • Set Value: Click this setting to allow the user to set value entries in the registry key.
   • Create Subkey: Click this setting to allow the user to create subkeys on the registry key.
   • Enumerate Subkeys: Click this setting to allow the user to identify the subkeys of the registry key.
   • Notify: Click this setting to allow the user to audit notification events from the key.
   • Create Link: Click this setting to allow the user to create a symbolic link in the key.
   • Delete: Click this setting to allow the user to delete the key.
   • Write DAC: Click this setting to allow the user to gain access to the key for the purpose of writing a discretionary access control list (ACL) to the key.
   • Write Owner: Click this setting to allow the user to gain access to the key for the purpose of taking ownership of it.
   • Read Control: Click this setting to allow the user to gain access to the security information on the key.

back to the top