Computer-wide access permissions specify the users who are assigned or denied access to COM applications. By using the Component Services snap-in, you can change either the computer-wide default access permissions or the computer-wide restriction policy. This topic includes the procedure for setting computer-wide access permissions. For more information on computer-wide restriction policy, see Computer-wide Restrictions (


Modifying access permissions can affect the ability of applications to start, connect, function, or run securely. Therefore, we recommend that you modify application-specific permissions rather than change computer-wide default access permissions.

Membership in Administrators, or equivalent, is the minimum required to complete this procedure.

To set computer-wide access permissions
  1. Open Component Services.

  2. In Component Services, right-click the computer whose computer-wide access permissions you want to modify, and then click Properties.

  3. Click the COM Security tab.

  4. Under Access Permissions, click either Edit Limits or Edit Default, depending on whether you want to modify the computer-wide restriction policy or the computer-wide default settings. An Access Permission dialog box appears.

  5. To remove a user account or group, select the group or user in the Group or user names list, and then click Remove. The selected user account or group no longer appears in the list.

  6. To add a user account or group, click Add. In the Select Users, Computers, or Groups dialog box, type the fully qualified name of the user or group that you want to add.

    If you do not know the name of the user or group that you want to add, click Advanced, and then click Find Now to view a list of users and groups in the selected domain. Select a user or group in the list, and then click OK. The added user or group appears in the Group or user names list.

  7. In the Group or user names list, select the group or user whose computer-wide access permission you want to change.

  8. In the Permissions list, select the Allow or Deny check boxes to either allow or deny the local access permission and the remote access permission for the selected group or user name.

  9. Click OK to return to the COM Security tab.

  10. Click OK. The new computer-wide access permissions are applied the next time that an application on the computer is started. Applications that are currently running are not affected until they are restarted.

Additional considerations

  • Component Services is no longer in Administrative Tools. To open Component Services, click Start. In the search box, type dcomcnfg, and then press ENTER.

Additional references