support@bowkerit.co.uk • 0844 88 00 737
I spent quite some time trying to find how to do this, mainly so I can query remote computers link speeds on a domain using WMI to eliminate network bottlenecks.
The information required is below, which noone seems to have stumbled across from Googling.
All you need to do is add the Domain Admins, or other group with the required user, to both the DCOM policys for the computer. For more information see Technet.
Using Group Policy to Manage Computer-Wide DCOM Access Restrictions
To manage the computer-wide ACLs in an enterprise, you can use the following Group Policy settings in Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options:
- DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax. You can use this setting to grant access to all the computers to particular users for DCOM application in the enterprise through Group Policy.
- DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax. You can use this setting to grant launch or activation permissions to all the computers to particular users for DCOM application in the enterprise through Group Policy.
Posted on October 21, 2009