Ekjon Nabik
Ekjon Nabik

Reputation: 3

How to add user into COM permission list in windows server 2012 using PowerShell?

enter image description here

How can i add user into permission list using Windows PowerShell command

Upvotes: 0

Views: 487

Answers (1)

Andrii Matus
Andrii Matus

Reputation: 176

Information about dcom permission could be accessed via winregistry, HKLM\Software\Microsoft\Ole, DefaultAccessPermission / DefaultLaunchPermission, or via wmi.

Either way you need to get sid of your user, create object in SDDL format, and put it to registry. There is already few examples of powershell implementation on internet, for example this one.

But for real life I can suggest to do it not from powershell, but from GPO (Computer configuration - windows settings - security settings - local policies - security options - DCOM: Machine Launch/Access Restrictions in Security Descriptor Definition Language (SDDL) syntax ). Its easy, GUI-provided, could be used in SCCM compliance checks, etc etc.

Upvotes: 1

Related Questions