Configure COM Security

Previous SQL Server Configuration	Manual Configuration	Configure SQL Network Protocols Next

FineBuild can configure COM security to allow access to Integration Services from remote machines.

The COM Security processing in FineBuild is based on the details given by Microsoft in Grant permissions to the service.

Security Compliance

COM Security configuration helps to secure SSIS access rights. If you setup Security Compliance then COM Security configuration will always be implemented.

FineBuild COM Security configuration

Automated silent COM Security Configuration relates to Process Id 5AA and is controlled by the parameters below:

SQL Version	Parameter	FULL Build	WORKSTATION Build	CLIENT Build
SQL2019	/SetupDCOM:	Yes	Yes	Yes
SQL2017	/SetupDCOM:	Yes	Yes	Yes
SQL2016	/SetupDCOM:	Yes	Yes	Yes
SQL2014	/SetupDCOM:	Yes	Yes	Yes
SQL2012	/SetupDCOM:	Yes	Yes	Yes
SQL2008R2	/SetupDCOM:	Yes	Yes	Yes
SQL2008	/SetupDCOM:	Yes	Yes	Yes
SQL2005	/SetupDCOM:	Yes	Yes	Yes

In order to maintain compatibility with older versions of SQL FineBuild, the parameter /ConfigDCOM: can also be used.

This process can only be automated for Windows 2008 and above. If you are using Windows 2003 or XP, you must complete the Manual COM Security configuration process below.

Top

---

Manual COM Security Configuration

The following steps show what you would have to do for manual COM Security Configuration. FineBuild does all of this work for you automatically for Windows 2008 and above.

1. Navigate via Settings -> Control Panel -> Administrative Tools to start the Component Services MMC snap-in.

   Within this panel, navigate to Component Services -> Computers -> My Computer -> DCOM Config, then scroll to the DST Server from the table below, right-click and select Properties.

   SQL Version	DTS Version
   SQL2019	MsDtsServer150
   SQL2017	MsDtsServer140
   SQL2016	MsDtsServer130
   SQL2014	MsDtsServer120
   SQL2012	MsDtsServer110
   SQL2008R2	MsDtsServer100
   SQL2008	MsDtsServer100
   SQL2005	MsDtsServer

   

2. Select the Security tab, and within Launch and Activation Permissions, click Edit.

   

3. The Launch Permission window is displayed. Click on Add.

   

4. Use the process Find Group on Server with the Group Name Distributed COM Users to configure COM Security.

5. Grant all permissions to the Distributed COM Users group.

   

6. Click OK until the Properties window is closed, then close the Component Services window.

Copyright FineBuild Team © 2011 - 2018. License and Acknowledgements

Previous SQL Server Configuration	Top	Configure SQL Network Protocols Next