Configuration Of The Dcom Settings Of A Com Application - Siemens HiPath 3000 Series Service Documentation

start_h5.fm
Startup and Administration HiPath 5000
Nur für den internen Gebrauch
Optimizing Operating System Settings
From Windows 2008 Server and later – on which the DB Feature Server is installed– firewall
exceptions are added for all executable programs that are a part of the DB Feature Server.
These exceptions are added at the time of installation and removed at the time of uninstalling.
However, when the DB Feature Server is upgraded, new firewall rules are not added. Before
performing an upgrade, the user must ensure that these firewall rules already exist. If these
rules do not exist, the user must uninstall the product manually and then perform a fresh instal-
lation of DB Feature Server.
If the firewall of computer A is activated, additional settings may be required.
6.9.3.2.2

Configuration of the DCOM settings of a COM application

Dcomcnfg.exe
Dcomcnfg.exe is a tool contained in Windows. It facilitates the configuration of the DCOM set-
tings of a COM application for the user. Moreover, it provides a user interface from which certain
settings in the registry can be edited. By using Dcomcnfg.exe, you can activate the security
either computer-wide or process-wide.
You can enable the security for a specific computer, so that the values set by Dcomcnfg.exe
are used if a process does not provide its own security settings - either programmed or via the
registry values. So also, you can use Dcomcnfg.exe to enable the security only for a certain
application.
Domains and Rights
What should be taken into account in particular is whether computer A and computer B belong
to the same domain or different domains or whether neither of the two computers is a member
of a domain.
If you have several domains, the corresponding settings must be made in both domains, so that
domain A considers users from domain B to be reliable and vice versa.
For DCOM to work properly, there should be a reliable connection between the two domain con-
trols. More detailed information on the structure of the reliable connection between domains
can be found in the documentation for Microsoft Windows Server. Once the reliable connection
between your domain controls has been set up, you can usedcomcnfg.exe to edit the DCOM
settings.
If a Windows PC is not a member of a domain, it grades only those user accounts as reliable,
which are present in its local security database. If you try to set up a connection to a decentral-
ized server and get an error of type "Access rejected" or something similar, it means that there
are authorization problems between the two PCs.
To rectify authorization problems, the user must create EXACTLY THE SAME user account
names AND passwords on BOTH the PCs. For this special case, please read through
Section 6.9.3.2, "Editing UAC settings on computer B" as well.
A31003-H3590-S100-7-7620, 06/2012
6-42
HiPath 3000/5000 V9, Service documentation