Siemens Commissioning PC Stations C79000-G8976-C156-07 - Manual (Page 258)

18 DCOM Settings with the dcomcnfg System Program
258
Commissioning PC Stations - Manual and Quick Start
Release 5/2005
C79000-G8976-C156-07
Table 18-1
Default Permissions Meaning
Access permissions The default access permissions for all COM objects specify which
accounts are allowed to access the object; in other words, call the
methods and which accounts are explicitly denied access.
Launch permissions The default launch permissions for all COM objects specify which
accounts have the right to create the object and which accounts are
explicitly denied this permission.
Configuration permissions
(Windows 2000 only)
The default configuration permissions specify which accounts can
modify the information in the registry about COM objects; in other
words can also install new objects on the computer.
These permissions can be set individually for each object and the default
properties are then ignored.
Settings for Simple Commissioning
If you make the following settings for the user accounts “EVERYONE”,
“INTERACTIVE”, “NETWORK” and “SYSTEM” both at the client and server end,
you will find it simple to commission DCOM:
S
Access permissions: (Allow access)
S
Launch permissions: (Allow launch)
S Configuration permissions: (Full control)
When working in a domain, it is adequate to enter only the user accounts
“SYSTEM” and the accounts of the authorized users in the lists for access, launch,
and configuration rights on the client and server.
Notice
These settings make commissioning straightforward but allow every user in the
network access to the computer. If you have security problems with these settings,
the permissions must be restricted to individual user accounts.