OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Brian Muth (bmuthSWI.COM)
Date: Wed Jul 04 2001 - 17:17:30 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    > Here is what I think of doing now: set my object server to run as a
    > service
    > (it was a dll, so I had to set it as a surrogate and give it a user to
    run
    > under. No such problem when it runs as a service!) Have the
    installation
    > create a local account called IUSR_*, and match the passwords for both
    > IUSR_* accounts. Make the new IUSR_* member of admins so that the
    default
    > access permissions and "access this computer from the network" will
    let it
    > through. IIS should resync its password on startup right? Then I
    think
    > I'm
    > done!
    >
    > What do you think?
    >

    You are on the right track, but I think there is a better way. There is
    no need to set up a separate local IUSR_ account on your target DCOM
    Server.

    Keith Brown has covered this topic thoroughly in:

    http://msdn.microsoft.com/msdnmag/issues/0600/websecure/websecure.asp

    http://msdn.microsoft.com/msdnmag/issues/0700/websecure2/websecure2.asp

    Brian

    ----------------------------------------------------------------
    Users Guide http://msdn.microsoft.com/workshop/essentials/mail.asp
    contains important info. Save time, search the archives at
    http://discuss.microsoft.com/archives/index.html .
    To unsubscribe, mailto:DCOM-signoff-requestDISCUSS.MICROSOFT.COM