Is there a script way to set DCOM run location & configuration permissions?

Question

I tried Powershell script and also modify Reg keys, both only

set 'run application on the following computer' but leave 'run application on this computer' ticked
set 'launch and activation permissions' and 'access permissions', not 'configuration permissions'

Answer 1

Hi ,

Right click AppID{GUID} and choose Permissions, this is configuration permission. You can add a new user and see this reflected in the AppID{GUID} permissions of the key.

The Default Permissions are determined by the parent key. So we compare the ACL for the AppID{GUD} permissions and if it matches the parent key we consider this Default and will set the radio button in the Component Services GUI to Default.

--------------------------------------------------------------

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

I think I figured out the 'run location' part. to untick 'run on this computer', rename HKCR\CLSID{ID of the dcom}\LocalServer32 key to _LocalServer32.

but still, the configuration permissions don't seem to have entries in registry.

Answer 3

Hi ,

Based on my understanding, you want to know which registry key corresponds to the COM Security Configuration permission. Is it right? Please feel free to let me know if I have any misunderstanding.

The Configuration Security for a DCOM server in Component Services controls the ACL on the AppID registry key for that DCOM server would be:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID{GUID}

If you go in to Component Services (dcomcnfg.exe), go to the properties of the DCOM server and modify the Configuration Security, i.e. add a new user, and you will see this reflected in the AppID{GUID} permissions of the key. You can use Regedit.exe to view the registry key permissions.

Best Regards,

Candy

--------------------------------------------------------------

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.