Configuring DCOM for Remote Access
- If the computer belongs to a workgroup instead of a domain, make sure that it does not use simple file sharing. Open Windows Explorer or double click My Computer, click Tools, then go to Folder Options, click View and uncheck Use simple file sharing (Recommended) in Advanced settings.
- Click Start, click Programs, click Administrative Tools, click Component Services.
- Expand Component Services, expand Computers, and right-click My Computer. Select Properties.
- Click Default Properties. Select Enable Distributed COM on this computer. Set the Default Authentication Level to Connect (None also works). Set the Default Impersonation Level to Identify (Impersonate also works).
- Click Default COM Security.
- Under Default Access Permissions click Edit Default. Add SYSTEM, INTERACTIVE, and NETWORK. The user whose authentication credentials will be used to access the COM application must also be included in this list. There are many ways to do this. You can add the specific user or simply add a group the user belongs to. Possible values include:
- Domain\Username (A specific user)
- Domain\Administrators (All administrators on a specific domain)
- Domain|Domain users
- Everyone (All users)
- Under Default Launch Permissions click Edit Default. Make sure the Default Launch Permissions have the same values as the Default Access Permissions.
- Click Default Protocols. Make sure Connection-oriented TCP/IP is listed first.
- You must now configure the COM application you wish to access. Expand Component Services, expand Computers, expand My Computer, and click DCOM Config. Right-click on the application you wish to configure. Select Properties. If your COM application is a DLL, you must first create a surrogate EXE for it using the SetDllHost tool. Once a surrogate EXE is created, the surrogate name will appear in the list of applications. Select Properties for the surrogate and continue on.
- Click General. Set the Authentication Level to Default.
- Click Location. Select Run application on this computer.
- Click Security. Set Launch Permissions to Use Default. Set Access Permissions to Use Default. Set Configuration Permissions to Use Default.
- Click Identity. Select The launching user. This setting specifies the account that will be used to run the COM application once it is launched by a client program. The launching user is the user account of the client process that launched the server, and is the recommended setting. Depending on the COM application you want to connect to, you may need to change this to:
- The interactive user – The user that is currently logged on to the machine hosting the COM application (use this if you are going to access MS Excel and make it visible).
- This user – Specify a user account that will always be used to run the COM application regardless of which user is accessing it.
- For more information on “How To Configure Office Applications to Run Under the
“Interactive User Account”, please see the References section at the bottom of this page
- Click Endpoints. Select default protocol
- If you still get an “Access denied” or “permission error” then restart the computer, and try again