Change DCOM config security settings using Powershell

by

Looks like you would do it using WMI.

Get an instance of: Win32_DCOMApplicationSetting like this:

$dcom = Get-WMIObject -Class Win32_DCOMApplicationSetting -Filter 'Description="Something"'

Now you have access to the SetAccessSecurityDescriptor and SetLaunchSecurityDescriptor methods.

From: http://msdn.microsoft.com/en-us/library/windows/desktop/aa384905(v=vs.85).aspx

DCOM applications

DCOM application instances have several security descriptors. Starting
with Windows Vista, use methods of the Win32_DCOMApplicationSetting
class to get or change the various security descriptors. Security
descriptors are returned as instances of the Win32_SecurityDescriptor
class.

To get or change the configuration permissions, call the
GetConfigurationSecurityDescriptor or
SetConfigurationSecurityDescriptor methods.

To get or change the access permissions, call the
GetAccessSecurityDescriptor or SetAccessSecurityDescriptor methods.

To get or change the startup and activation permissions, call the
GetLaunchSecurityDescriptor or SetLaunchSecurityDescriptor methods.

Windows Server 2003, Windows XP, Windows 2000, Windows NT 4.0, and
Windows Me/98/95: The Win32_DCOMApplicationSetting security
descriptor methods are not available.

There’s also a tool called DCOMPERM in which source code is available in the Windows SDK: http://www.microsoft.com/en-us/download/details.aspx?id=8279

You can find compiled versions around online if you search for DCOMPERM compiled.

Here are the command line options:

Syntax: dcomperm <option> [...] 
Options:

Modify or list the machine access permission list 
-ma <"set" or "remove"> <Principal Name> ["permit" or "deny"] ["level:l,r"] 
-ma list

Modify or list the machine launch permission list 
-ml <"set" or "remove"> <Principal Name> ["permit" or "deny"] ["level:l,r,ll,la,rl,ra"] 
-ml list

Modify or list the default access permission list 
-da <"set" or "remove"> <Principal Name> ["permit" or "deny"] ["level:l,r"] 
-da list

Modify or list the default launch permission list 
-dl <"set" or "remove"> <Principal Name> ["permit" or "deny"] ["level:l,r,ll,la,rl,ra"] 
-dl list

Modify or list the access permission list for a specific AppID 
-aa <AppID> <"set" or "remove"> <Principal Name> ["permit" or "deny"] ["level:l,r"] 
-aa <AppID> default 
-aa <AppID> list

Modify or list the launch permission list for a specific AppID 
-al <AppID> <"set" or "remove"> <Principal Name> ["permit" or "deny"] ["level:l,r,ll,la,rl,ra"] 
-al <AppID> default 
-al <AppID> list

level: 
    ll - local launch (only applies to {ml, dl, al} options) 
    rl - remote launch (only applies to {ml, dl, al} options) 
    la - local activate (only applies to {ml, dl, al} options) 
    ra - remote activate (only applies to {ml, dl, al} options) 
    l - local (local access - means launch and activate when used with {ml, dl, al} options) 
    r - remote (remote access - means launch and activate when used with {ml, dl, al} options)

More Related Contents:

  1. this code my teacher gave it to us as homework and it does not work with me idk why
  2. How can you use an object’s property in a double-quoted string?
  3. How can I write/create a powershell script verbatim, from another powershell script?
  4. Powershell: passing json string to curl
  5. How can I replace every occurrence of a String in a file with PowerShell?
  6. How do I pass variables with the Invoke-Command cmdlet?
  7. Loop through files in a directory using PowerShell
  8. Difference between ForEach and ForEach-Object in powershell
  9. How to reference .NET assemblies using PowerShell
  10. Any way to double-click on .PS1 file & open them in PowerShell?
  11. Get current user’s credentials object in Powershell without prompting
  12. Redirect Write-Host statements to a file
  13. Progress during large file copy (Copy-Item & Write-Progress?)
  14. How to get started with PowerShell? [closed]
  15. Powershell ConvertTo-json with embedded hashtable
  16. How to convert to UInt64 from a string in Powershell? String-to-number conversion
  17. How to process a file in PowerShell line-by-line as a stream
  18. How to unzip a file in Powershell?
  19. Echo equivalent in PowerShell for script testing
  20. Why is an empty PowerShell pipeline not the same as null?
  21. How to fail the build from a PowerShell task in TFS 2015
  22. VS code terminal can’t find AWS SAM even though windows terminal can
  23. Script has two variables when done, but when I pipe to SELECT-object only first one returns data to console
  24. PowerShell script to check the status of a URL
  25. Accessing Windows Credential Manager from PowerShell
  26. Out-FINcodedCommand.ps1 is not recognized – executing a script in the current directory
  27. How do I encode Unicode character codes in a PowerShell string literal?
  28. How do I move a file to the Recycle Bin using PowerShell?
  29. Powershell – Output Color for certain results
  30. Pass function as a parameter

Leave a Comment