JwTightCOMSecuritySettings: TJwCOMSecuritySettings = ( SDDL: 'O:LAG:BAD:(A;;0x1FFFFFF;;;SY)(A;;0x1FFFFFF;;;BA)'; AuthenticationLevel: calPktPrivacy; ImpersonationLevel: cilIdentify; Capabilities : [acDisableActivateAsActivator, acNoCustomMarshal, acDynamicCloaking]; );
Used by TJwComProcessSecurity.CreateTightServerSecurityOptions to set a tight security setting for a COM server.
Allows SYSTEM and LocalAdministrator full access to the server.
http://alt.pluralsight.com/wiki/default.aspx/Keith.GuideBook/WhatIsCoInitializeSecurity.html
Owner: Local Administrator Group: Builtin Administrators DACL: 1. ACE-Type: Allow AccessMask : 0x1FFFFFF (0000 000 1 11111111 1111111111111111) SID: Local System 2. ACE-Type: Allow AccessMask : 0x1FFFFFF (0000 000 1 11111111 1111111111111111) SID: Builtin Administrators
acDisableActivateAsActivator Do not start the server as the activator so it will be spawn into the caller's logon session. acNoCustomMarshal Do not load unnecessary DLLs. acDynamicCloaking Use thread token on outgoing COM calls.
|
Copyright (c) 2010. All rights reserved.
This help was created by Doc-O-Matic sponsored by toolsfactory software inc. |
|
What do you think about this topic? Send feedback!
|