Help on COM+ Server Application role-based security

I’m facing a problem while accessing COM+ server application from VB application where the role-based security is enabled.

My COM+ server application has following settings.

1. Checked “Enforce access checks for this application”
2. Selected security level as “Perform access checks at the process and component level. Security property will be included on the object context. The COM+ security call context is available.”
3. Authentication level as “None”
4. Impersonation level as “Impersonate”
5. Identity as “This user” (System Administrator)
6. Created a Role and added specific user (user where the VB application calls)
7. Assigned the role into each Components, Interfaces & Methods in the application

Even though, its failing to access COM+ application. What do I need to do?

ourspt

Based on your description, you've done everything correctly. Although I'd recommend you use a different setting than "None" for the Authentication Level. The default of "Packet" is a reasonable compromise between security and performance.

What error does your client receive? If you are being denied access by COM+ Role-based Security, you'll get error 70 - Access denied. If the error is other than this, then it isn't role-based security that's foiling you.

If you un-check "Enforce Access Checks", are you able to access the methods? If not, then again, COM+ role-based security is not the issue.

Give me a bit more information and I'll try to help.

Who is the client in your scenario? Is it a VB application? Is it an ASP/ASP.Net web site?

Are the client and your COM+ application located on the same machine?

Is the machine in a domain or a workgroup? If the client and server are different machines, are they in the same domain/workgroup? Is the user that you've added to the role a local user or a domain user?

What OS and service pack level are you using?


Let me know,

Patrick