Geek Answers Handbook

Change access permissions in component services> COM security with script / api?

is there any api to change access permissions for COM security? I need to write new values ​​in "Edit Limits ..." and "Edit Default ...". are these simple registry settings? cannot find how to install these entries.

+7
com dcom
source share
1 answer

Quick answer: Yes, these are registry parameters, long answer: No, they are not simple registry parameters. The values ​​are binary and indicate the structure of the ACL. To change them, you need to download, update and save the ACL (which requires enough code). the DCOMPerm sample in the Windows SDK is a good place to start, I used it as a basis for a set of classes that I use at work to deal with this problem (unfortunately, I can not publish this code in a public domain)

You can view the MSDN documentation for the DCOM key structure, which covers computer settings. COM-application-specific parameters are stored in the APPID in the registry with AccessPermission and LaunchPermission.

Keep in mind that changing the ACL for machine settings can cause your machine to become inaccessible if you do it wrong. If I remember correctly, you can simply delete the values ​​(via RegEdit), and the OS will restore the default settings to return your computer ... but I'm not 100% sure about that.

EDIT: The binary data is actually a security descriptor, but ultimately it's an ACL to deal with - SD just adds another layer of code when unpacking / packing.

+6
source share

More articles:


All Articles