This project has moved and is read-only. For the latest updates, please go here.

Previous SQL Configuration Manual Configuration Configure SQL Network Protocols Next

Configure COM Security

FineBuild can configure COM security to allow access to Integration Services from remote machines.

The COM Security processing in FineBuild is based on the details in http://msdn2.microsoft.com/en-us/library/aa337083.aspx.

Security Compliance

COM Security configuration helps to secure SSIS access rights. If you setup Security Compliance then COM Security configuration will always be implemented.

FineBuild COM Security configuration

Automated silent COM Security Configuration relates to Process Id 5AA and is controlled by the parameters below:

Parameter Build SQL2005 SQL2008 SQL2008 R2 SQL2012 SQL2014
SetupDCOM FULL Yes Yes Yes Yes Yes
SetupDCOM WORKSTATION Yes Yes Yes Yes Yes
SetupDCOM CLIENT Yes Yes Yes Yes Yes

In order to maintain compatibility with older versions of SQL FineBuild, the parameter ConfigDCOM can also be used.

This process can only be automated for Windows 2008 and above. If you are using Windows 2003 or XP, you must complete the Manual COM Security configuration process below.

Manual COM Security configuration

The following steps show what you would have to do for manual COM Security Configuration. FineBuild does all of this work for you automatically for Windows 2008 and above.

1) Navigate via Settings -> Control Panel -> Administrative Tools to start the Component Services MMC snap-in. Within this panel, navigate to Component Services -> Computers -> My Computer -> DCOM Config, then scroll to the following, right-click and select Properties.

SQL2005 SQL2008 SQL2008R2 SQL2012 SQL2014
MsDtsServer MsDtsServer100 MsDtsServer100 MsDtsServer110 MsDtsServer120

COMSecurityDCOMConfig.png
2) Select the Security tab, and within Launch and Activation Permissions, click Edit.
MSDtsServerProperties.png
3) The Launch Permission window is displayed. Click on Add.
LaunchPermission.png
4) Use the process Find Group on Server with the Group Name Distributed COM Users to configure COM Security.

5) Grant all permissions to the Distributed COM Users group.
DCOMUserGroupPermission.png
6) Click OK until the Properties window is closed, then close the Component Services window.

Copyright FineBuild Team © 2011 - 2015. License and Acknowledgements
Previous SQL Configuration Top Configure SQL Network Protocols Next

Last edited May 20, 2015 at 12:04 PM by EdVassie, version 22