Skip to main content

Configure DCOM access rights

Autoenrollment Server relies on the Distributed Component Object Model (DCOM). Follow these steps to configure DCOM:

  1. Open Administrative Tools > Component Services. In the left pane, expand Component Services, then Computers. Right-click My Computer and select Properties.

  2. From the Default Properties tab, select the check box next to “Enable Distributed COM on this computer.”

  3. Select the COM Security tab. Under Access Permissions, select Edit Limits.

  4. If not already listed, add the following groups. For each group, check the Allow check box for Local Access and Remote Access, and then select OK.

    • Domain Computers

    • Domain Controllers

    • Domain Users

    Note

    If you’re unable to add the desired groups, you may need to add the Group object type by selecting Object Types.

  5. Under Launch and Activation Permissions, select Edit Limits.

  6. Add the same 3 groups added in the Access Permissions tab (steps 3 and 4). For each, check Allow for Local Activation and Remote Activation, and clear Allow for Local Launch and Remote Launch.

  7. Click OK to close the dialog and apply changes.

Next: Set permissions

In this section: