FIX: EOAC_DISABLE_AAA Capability Flag Is Not Enforced by the COM Service Control Manager

You can use the EOAC_DISABLE_AAA capability flag as a value for the dwCapabilities argument of the CoInitializeSecurity function. This flag is designed to prevent a secure COM server from launching an out-of-process server that is marked to run as the Launching User. This in turn prevents the use of the secure COM server identity as the identity of the untrusted out-of-process COM server.

However, the EOAC_DISABLE_AAA flag may not be enforced by the COM Service Control Manager (SCM) that activates out-of-process servers.

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows 2000 Service Pack 2.