Ankit-
I got your email and wanted to look at a 2000 box at work today so I could
give you a step-by-step but I totally forgot and now I'm home with only
Windows xp and 2003 to guide me (and dcomcnfg is different in 2000).
What I'll do is give you a rough walk through and then if you want more
guidance I'll check one of the 2000 servers at work tomorrow or better yet
maybe one of the MVP's wiuth a 2000 box will jump in and post directions.
- Go to run and type dcomcnfg (thats about all thats similar between 2k and
xp/2k3
)
- basically go to the properties of the root of the tree (it may be labeled
COM or DCOM of dcom config I dont remember, but it's the top level of the
tree I think).
- one of the tabs will be a security tab with 6 buttons 3 labeled default
and the others labeled something else
- click on all of them and make sure your account hasn't been denied any
permissions.
- I think that if there are no permissions listed then it uses a default
set of something, but if even 1 account is assigned permission then the
default isn't used and all the permissions mustbe specified. What thatwould
mean is if nothing has been configured for launch security then that might be
okay but if 1 user account has been given rights then that might be bad
because then no other account has rights (so you need to add them - accounts
like system, administrators, interactive (in some cases).
- If you're not sure what permissions to give and you want to test to see
if this is the cause then add the everyone group to all six security windows
with allow launch full control, etc. then reboot (or log out log in) and see
if thatworked.
***do not leave it ateveryone full everything because an attacker can take
control of your machine and have it do anything they want in that state***
Please let me know whatyou find and I hope this helps.
Nick