Solved

How to set  a user permission within a DCOM Config trough a batch procedure

Posted on 2006-10-29
3
2,538 Views
Last Modified: 2013-12-04
Hi,
In dcomcnfg\component services\computers\My Computer\dcom config\     propreties on one of the components
Security tab\costomize add user. Is there any way to add users and set permission using an automatic procedure or utility, on that component.
0
Comment
Question by:gregajesih
3 Comments
 
LVL 6

Accepted Solution

by:
dave_moats earned 250 total points
ID: 17841357
Interesting topic, I did some searching and found the following EE link:

   http://www.experts-exchange.com/Programming/Programming_Languages/Visual_Basic/Q_21496861.html

This and all the other links I found talk about using something called "dcomperm".  It appears that dcomperm is an SDK sample from Microsoft located:

   http://msdn.microsoft.com/library/default.asp?url=/library/en-us/vcsample98/html/vcsmpdcompermpermissionsforcomserver.asp

Using this link will take you to the Visual Studio 6.0 Samples, all the samples are about a 132Mb download

After installing the samples, open the .chm file and search for dcomperm.  This will give you a link to the actual source code.  Once you have extracted this and compiled it, you will be able to use dcomperm.  View the README.txt file, it appears to have instructions on how to use the exe.

There appeard to be some WMI options for Longhorn and Vista according to:
 
   http://www.mcse.ms/archive68-2006-3-2141217.html
   
Which appears to be talking about:

   http://windowssdk.msdn.microsoft.com/en-us/library/ms748750.aspx

   ( Look for SetLaunchSecurityDescriptor )
   
Here is a way to query the dcom permissions using WMI:

   http://mail.nessus.org/pipermail/plugins-writers/2006-September/msg00000.html
0
 
LVL 54

Expert Comment

by:McKnife
ID: 17845845
What are you trying to achieve, do you want do that remotely, or deploy it, or?
In HKEY_CLASSES_ROOT\AppID\{783C030F-E948-487D-B35D-94FCF0F0C172} for example, there are launch permissions that get altered when altering acccess rights on Blocked Drivers which has that ID (783...), so a Start would be to extract these keys.
0
 

Author Comment

by:gregajesih
ID: 17857569
The link from the topic that you found for me, has a script that works excactly as I  want it to.
So, thank you very much dave

On Error Resume Next

'TRUE = 1
'FALSE = 0
DCP_ACL_LAUNCH = 1
DCP_ACL_ACCESS = 2
DCP_E_NO_ACCESS        = &H8004a001
DCP_E_NO_ACL           = &H8004a002
DCP_E_INVALID_OBJECT   = &H8004a003
DCP_E_INVALID_TYPE     = &H8004a004
DCP_E_MUST_BE_ADMIN    = &H8004a005
DCP_E_NO_MORE_ENTRIES  = &H8004a006
DCP_E_INVALID_VERSION  = &H8004a007
DCP_E_OBJ_IS_A_SERVICE = &H8004a008
DCP_E_UNSUPPORTED      = &H8004a009
DCP_E_NO_VALUE         = &H8004a00a
DCP_E_UNKNOWN_USER     = &H8004a00b
DCP_E_NO_APPID         = &H8004a00c

Dim GOSh
Dim dcomperm
Set GOSh = CreateObject("WScript.Shell")
Set dcomperm = CreateObject ("DCOMPerm")
     If Err Then
     Err.Clear
     GOSh.run "dcpinst.exe",0,True
     Set dcomperm = CreateObject ("DCOMPerm")
          If Err Then
          WScript.Echo "Unable to install DCOM Permissions! They will have to be set via DCOMCNFG.",,"DCOM Permmissions"
          WScript.Quit(1)
          End If
     End If
dcomperm.AddPrincipal "Appid:{0737E50A-4C76-4ff7-BB21-A85596F0D004}",DCP_ACL_ACCESS, "YOURDOMAIN\YourGroupORUser", "1"
     If Err Then
     WScript.Echo "Unable to install DCOM Permissions! They will have to be set via DCOMCNFG.",,"DCOM Permmissions"
     WScript.Quit(2)
     End If
dcomperm.AddPrincipal "Appid:{0737E50A-4C76-4ff7-BB21-A85596F0D004}",DCP_ACL_LAUNCH, "YOURDOMAIN\YourGroupORUser", "1"
     If Err Then
     WScript.Echo "Unable to install DCOM Permissions! They will have to be set via DCOMCNFG.",,"DCOM Permmissions"
     WScript.Quit(2)
     End If
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
How to setup GAL Sync with MIM 2016 server 2 458
Cannot run application on Windows 10 client connected to Server 2012 r2. 5 58
antivirus on mac 8 77
Thin secure Windows 10 5 97
As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question