Set Access Control List Security Permissions

The network administrator(s) that are responsible for using the Management Console must have Access Control List (ACL) permissions configured for network Distributed Component Object Model (DCOM) security.

  1. Select Start > Run.
  2. Type gpedit.msc in the Open: field.
    The Group Policy Object Editor dialog opens.
    Group Policy Object Editor dialog
  3. Select Computer Configuration > Windows Settings > Security Settings > Local Policies >Security Options.
    The right pane refreshes, listing the Policy settings.
    Group Policy Object Editor dialog policy settings
  4. Double-click DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax from the Policy column in right pane.
  5. Click Edit Security.
  6. Add users and/or groups.
  7. Select any or all of the following options for each user or group:
    • Local Access
    • Remote Access
  8. Click OK.
  9. Double-click DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax from the Policy column in the right pane.
  10. Click Edit Security.
  11. Add users and/or groups.
  12. Select any or all of the following options for each user or group:
    • Local Launch
    • Remote Launch
    • Local Activation
    • Remote Activation
  13. Click OK.
  14. Close Group Policy Object Editor dialog.
  15. Select Start > Run.
  16. Run gpupdate.exe from the command line.
    Group policy settings are refreshed with the DCOM settings that you specified.