HOW TO: Set Permissions for Distributed COM Programs in Windows 2000

Article translations Article translations
Article ID: 323287 - View products that this article applies to.
This article was previously published under Q323287
This article has been archived. It is offered "as is" and will no longer be updated.
Expand all | Collapse all

On This Page

SUMMARY

This step-by-step article describes how to set the access permissions for the distributed version of Component Object Model (COM) programs.

Set Default Permissions for All Distributed COM Programs

To set default permissions for all distributed COM programs:
  1. Click Start, click Run, type dcomcnfg, and then click OK.
  2. Click the Default Security tab.
  3. Under Default Access Permissions, under Default Launch Permissions, and under Default Configuration Permissions, click Edit Default to set default permissions.
  4. If appropriate, click Add to add other user accounts to the Name box.
  5. In the Name box, select the user or group whose default permissions you want to change.
  6. In the Type of Access box, select an access type for the selected user or group.
NOTE: To customize configuration permissions, open the Registry Key Permissions dialog box, and then click Special Access under Type of Access.

Set Custom Permissions for a Specific Distributed COM Program

To set custom permissions for a specific distributed COM program:
  1. Click Start, click Run, type dcomcnfg, and then click OK.
  2. Click the Applications tab, click the program that you want to configure, and then click Properties.
  3. Click the Security tab, click Use custom access permissions, click Use custom launch permissions, or click Use custom configurations permissions as appropriate, and then click Edit.
  4. If appropriate, in the Registry Value Permissions dialog box, click Add to add other user or group accounts to the Name box.
  5. In the Name box, click the user or group whose permissions you want to set.
  6. In the Type of Access box, select an access type for the selected user or group.

Set Special Access Configuration Permissions for Distributed COM Programs

To set special access configuration permissions for distributed COM programs:
  1. Click Start, click Run, type dcomcnfg, and then click OK.
  2. Click the Default Security tab, and then click Edit Default under Default Configuration Permissions.
  3. In the Registry Key Permissions section, click Special Access in the Type of Access box.
  4. Click any of the following settings to select the type of control you want to assign to the selected user or group:
    • Full Control (All): Click this setting to assign Full Control.
    • Other: Click this setting, and then click the types of access that you want to assign to customize special access.
    • Query Value: Click this setting to allow the user to read a value entry from the registry key.
    • Set Value: Click this setting to allow the user to set value entries in the registry key.
    • Create Subkey: Click this setting to allow the user to create subkeys on the registry key.
    • Enumerate Subkeys: Click this setting to allow the user to identify the subkeys of the registry key.
    • Notify: Click this setting to allow the user to audit notification events from the key.
    • Create Link: Click this setting to allow the user to create a symbolic link in the key.
    • Delete: Click this setting to allow the user to delete the key.
    • Write DAC: Click this setting to allow the user to gain access to the key for the purpose of writing a discretionary access control list (ACL) to the key.
    • Write Owner: Click this setting to allow the user to gain access to the key for the purpose of taking ownership of it.
    • Read Control: Click this setting to allow the user to gain access to the security information on the key.

Properties

Article ID: 323287 - Last Review: October 24, 2013 - Revision: 3.1
APPLIES TO
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
Keywords: 
kbnosurvey kbarchive kbhowto kbhowtomaster KB323287

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com