|
Posted by Roger Abell [MVP] on January 17, 2006, 1:02 am
If you were Registered and logged in, you could reply and use other advanced thread options
http://support.microsoft.com/search/default.aspx?qu=dcom+sp1
>I am trying to resolve a problem with an old DCOM-based application,
>running
> on Windows 2003 server with SP1 installed.
>
> The client and server components of the application use anonymous access
> and
> no authentication, which is obviously rather insecure but they were
> written
> a number of years ago in VB6. Although they run happily when installed on
> Windows 2003 server prior to SP1, the additional DCOM security features in
> SP1 cause an "access denied" error when connecting the client to the
> server.
> It may be of some note that the server components issue events to the
> client, so there are call-backs being set up there too, but it's the
> initial
> connect that's causing the problem.
>
> All of the server components are set (via Component Services) to run with
> an
> Authentication Level of None, they are launched by a separate process on
> the
> server (wierd, but that's the way it works) so the launch permissions from
> the client aren't a problem, and the access permissions list includes the
> Everyone account, so all client accounts should be allowed.
>
> The client components are configured with an impersonation level of
> Anonymous, so the call-backs from the server should be accepted
> regardless.
>
> That all worked OK before SP1, with the client running on XP or 2000, so
> in
> order to relax the security added in SP1 we have changed the following on
> the 2003 server:
>
> Edited the security limits (via the COM Security tab in Component
> Services)
> to ensure that Local Access and Remote Access is enabled for the Everyone
> and ANONYMOUS LOGON accounts (not sure if that's totally necessary but
> we're
> clutching at straws a bit here)
>
> What else needs to be done (other than rewriting the application to use
> security properly, which isn't an option at the moment) ?
>
> Any help much appreciated.
> Alan
>
>
| 
XML site map