Siemens SIMATIC NET Manual page 258

18 DCOM Settings with the dcomcnfg System Program
Table 18-1
Default Permissions
Access permissions
Launch permissions
Configuration permissions
(Windows 2000 only)
These permissions can be set individually for each object and the default
properties are then ignored.
Settings for Simple Commissioning
If you make the following settings for the user accounts "EVERYONE",
"INTERACTIVE", "NETWORK" and "SYSTEM" both at the client and server end,
you will find it simple to commission DCOM:
S Access permissions: (Allow access)
S Launch permissions: (Allow launch)
S Configuration permissions: (Full control)
When working in a domain, it is adequate to enter only the user accounts
"SYSTEM" and the accounts of the authorized users in the lists for access, launch,
and configuration rights on the client and server.
Notice
These settings make commissioning straightforward but allow every user in the
network access to the computer. If you have security problems with these settings,
the permissions must be restricted to individual user accounts.
258
The default access permissions for all COM objects specify which
accounts are allowed to access the object; in other words, call the
methods and which accounts are explicitly denied access.
The default launch permissions for all COM objects specify which
accounts have the right to create the object and which accounts are
explicitly denied this permission.
The default configuration permissions specify which accounts can
modify the information in the registry about COM objects; in other
words can also install new objects on the computer.
Commissioning PC Stations - Manual and Quick Start
Meaning
Release 5/2005
C79000-G8976-C156-07