/bundles/itninjaweb/img/Breadcrumb_cap_w.png
Hi There all,

I've done extensive googling looking for a tool/script/anything to help
me do this to no avail...

What I need is a script/tool/utility that will automate the following
steps for me...

Open dcomcnfg
Go To Component Services/Computers
Right Click on My Computer, select Properties
Click on Default Com Security tab, and under "Access Permissions",
click "Edit Default"
Add a new user and close.

I know this maps to the
HKLM\Software\Microsoft\OLE\DefaultAccessPermissions Key but I can't
figure out how to add/remove to the encoded ACL in there... can anyone
help?

I need to add it as a custom action in a package I'm creating (as well as adding a new user, setting various other security settings all over the place, I've got those sorted just this one left).

Rgds

Paul
0 Comments   [ - ] Hide Comments

Comments

Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
Answer this question or Comment on this question for clarity

Answers

0
Look into dcomperm.exe. I never found a good reference to the command line switches but it will configure security settings from the command line.
Answered 02/28/2005 by: kkaminsk
Ninth Degree Black Belt

Please log in to comment
0
Hey kkaminsk,

Yep I found lots of references to said dcomperm, but no download links other than a 160 meg source code package from MSDN that has heaps of other stuff in it that refuses to download from work - any help as to where to get it from?

Thanks

Paul
Answered 02/28/2005 by: plangton
Second Degree Blue Belt

Please log in to comment
0
Well it should be available here http://www.iapetus.com/dcom/dcomtool.htm but it appears to be offline. I used it at a previous client site so I might be able to get a copy from there but it looks like this will be a fun one to track down.
Answered 02/28/2005 by: kkaminsk
Ninth Degree Black Belt

Please log in to comment
0
Hi kkaminsk,

Yep I saw that too, was hoping google would have a cache of it but sadly, no luck. Man its hard sometimes, cant do this through WMI/vbscript you think?? I'll have a play around and post my results :)

Rgds

Paul
Answered 02/28/2005 by: plangton
Second Degree Blue Belt

Please log in to comment
0
Well I've FINALLY downloaded the source code but of course no one has a copy of Visual C++ handy - anyone feel like compiling this for me please??? :)
Answered 02/28/2005 by: plangton
Second Degree Blue Belt

Please log in to comment
2
This can be done using VBScripting and WMI.

Google for: wmi Win32_DCOMApplicationSetting
Answered 08/01/2005 by: brenthunter2005
Fifth Degree Brown Belt

Please log in to comment
0
Wow, you can too, I searched MSDN thinking there must be a way but obviously I didn't look hard enough, thanks for that BrentHunter - though that dcomperm.exe also does the job just fine, this is much more useful!

*edit* actually, that class doesn't let you change apparently
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wmisdk/wmi/win32_dcomapplicationsetting.asp
States that all the values are read only

And the following links seem to back that up...
(http://groups.google.com.au/group/microsoft.public.win32.programmer.wmi/browse_frm/thread/6cddf9ba463ac5/598ba01fa2cd22ba?lnk=st&q=Win32_DCOMApplicationSetting&rnum=1&hl=en#598ba01fa2cd22ba
http://groups.google.com.au/group/microsoft.public.win32.programmer.wmi/browse_frm/thread/c76db86d2d1dabae/0a3e0c9711b7063a?lnk=st&q=Win32_DCOMApplicationSetting&rnum=5&hl=en#0a3e0c9711b7063a

Looks like you can only echo whats already there... bummer

Unless I've read this wrong?

Rgds

Paul
Answered 08/01/2005 by: plangton
Second Degree Blue Belt

Please log in to comment
0
bugger. [:(]
Answered 08/02/2005 by: brenthunter2005
Fifth Degree Brown Belt

Please log in to comment
0
Maybe this could help you http://cwashington.netreach.net/depo/view.asp?Index=1067&ScriptType=vbscript
Answered 08/02/2005 by: AngelD
Red Belt

Please log in to comment