COM security : Different user accessing COM createobject throws permission error RRS feed

  • Question

  • I have a scenario below. Have COM legacy application which we use for automation of batch. This COM is an exe running in mixed mode having VC++ and .Net code exposing general methods for automation.

    I have setup Components and services (dcom config) security for this COM component to have lauched using This user (its service account) and under security provided full access to all security customize buttons to this user and another user who would be actually running this batch(batch user) from another machine.

    But when batch user tries to createobject, it gives permission denied error, even on this same machine.

    This batch user and current COM launching user (service account) are having ADMINS rights, any other thing I need to check ?. The requirement is to have same above batch user running COM API's for batch and not service account.



    Tuesday, July 23, 2019 2:33 AM

All replies

  • Hello,

    Since your issue is about Application Security. I'll move to the Windows Security forum for more professional support.

    This forum is for "Discuss and ask questions about the Visual C++ IDE, libraries, samples, tools, setup, and Windows programming using MFC and ATL."

    Best Regards,

    Suarez Zhou

    Tuesday, July 23, 2019 9:49 AM
  • Hi,

    I think there is a com/dcom team who can address this, but could not find, VC++ was the closest team I felt to put this. Anyways thanks, hope someone picks this.

    Tuesday, July 23, 2019 12:34 PM