Setting Machine-Wide Launch Permissions

The launch permissions you set with Dcomcnfg.exe determine a list of users, each of which is explicitly granted or denied permission to launch any server that does not provide its own launch-permission settings. When setting launch permissions, you can add or remove one or more users or groups from this list. For each user that you add, you must specify whether the user is being granted or denied launch permission.

    To set launch permissions for a machine:
  1. On the Default Security property page in Dcomcnfg.exe, choose the Edit Default button in the Default Launch Permissions area.
  2. To remove users or groups, select the user or group you want to remove and choose the Remove button. The selected user or group will no longer appear in the list box. When you have finished removing users and groups, choose OK.
  3. If you want to add a user or group, choose the Add button.
  4. If you know the fully qualified user name you want to add, type it in the Add Names text box.

    If you do not know the user name, you can browse the user database to find it. When you have located the user name, select the user or group from the Names list box and choose the Add button.

  5. From the Type of Access list box, select the access type (either Allow Launch or Deny Launch). To add other users that will also have the selected type of access, repeat step 4. When you have finished adding users for the selected access type, choose the OK button.
  6. To add users that will have a different type of access, repeat steps 4 and 5. Otherwise, choose OK to apply the changes.