You are here: BlueCielo Meridian Enterprise Administrator's Guide > About Meridian network administration > About Meridian support for Microsoft Active Directory > Understanding DCOM problems > Configuring DCOM permissions

Configuring DCOM permissions

Users might not have sufficient DCOM permissions on the server.

Note    This very often occurs after installing Windows Server 2003 Service Pack 1 on the Meridian application server. Among other changes in this service pack, Microsoft changed the defaults for which user groups are able to access DCOM objects on the server from a client computer. This change causes non-administrators to be unable to access the Meridian services (BlueCielo EDM Server service, BlueCielo License Server service, and any others).

To enable the required DCOM permissions:

  1. Verify that the appropriate group of Meridian users is a member of the Distributed COM Users group on the Meridian servers.
  2. Open dcomcnfg.exe from a command (CMD) window on the server.
  3. Expand Component Services, expand Computers, right-click My Computer, and then click Properties.
  4. Click the COM Security tab.
  5. In the Launch and Activation Permissions group, click Edit Limits.
  6. Ensure that the Distributed COM Users group is allowed the Local Launch, Local Activation, and Remote Activation permissions and click OK.

Related concepts

About Meridian support for Microsoft Active Directory

Understanding Active Directory security problems

Understanding DCOM problems

Using Meridian with nested groups

Using Meridian with multiple domains

Related tasks

Granting domain privileges with a service account

Granting domain privileges to the Meridian server

Enabling DCOM

Granting membership query access

Configuring NetBIOS name resolution

Running BlueCielo License Server on a different computer

Synchronizing user groups with Active Directory