Configuring a local security policy for the Distributed COM Users group · MaxPatrol SIEM

Setting up sourcesOperating systems. Event collectionMicrosoft Windows Server 2003, 2003 R2: source configuration

Configuring a local security policy for the Distributed COM Users group

To configure a local security policy for the Distributed COM Users group:Open the Windows Control Panel.Click Administrative Tools → Local Security Policy.

You can start the local security settings snap-in by executing the secpol.msc command.

In the left pane, select the node Local Policies → Security Options.Select the policy DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax.On the main menu, click Action → Properties.

Selecting a local security policy

In the window that opens, click Edit Security.In the window that opens, select the Distributed COM Users group.In the lower part of the window, in the Allow column, select the Remote Access check box.

Configuring the "DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax" policy permissions for the Distributed COM Users group

Click OK.In the <Policy name> Properties window, click OK.Select the policy DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax.On the main menu, click Action → Properties.In the window that opens, click Edit Security.In the window that opens, select the Distributed COM Users group.In the lower part of the window, in the Allow column, select the Remote Activation check box.

Configuring the "DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax" policy permissions for the Distributed COM Users group

Click OK.In the <Policy name> Properties window, click OK.The local security policy is configured.