Bulk Enable DCom

zac9551 · 2007-10-08T14:24:44.000Z

Dcom is disabled on all my workstations. The proper security is on, allowing only administrators to remotely dcom, but it is not enabled so that’s kind of moot.

Has anybody found any way of enabling dcom by script, gpo, registry, or even by some 3rd party application? The inventory collection/wmi is failing on ALL of my machines, except for the few that I’ve turned on by hand.

I manage hundreds of workstations in multiple cities… having to screenshare with each user or flip them on one by one pretty much ends my evaluation of Spiceworks. It would be a shame because it seems like a very solid product.

myshell-spiceworks · 2007-10-16T11:00:14.000Z

Hi Zac,

I’ve been doing some research on this, I’m not 100% that a GPO can be created however I did find one link that appears to have the solution.

http://www.microsoft.com/technet/security/prodtech/windowsxp/adprtect.mspx#ENBBG

Post back your findings

pablodeluna1654 · 2007-12-14T13:17:54.000Z

Using GPO on AD i used this options and it work out for me
My network consist on 110 workstations and 5 servers

Create New GPO call Spiceworks Policy

Computer configuration
----Administrative Templates
------Network
---------Network Connections
-----------Windows Firewall
--------------Domain Profile
---------------Windows Firewall: Allow remote administration exception
------------------Allow uncolicitated incomming messages from: IP Adress of spiceworks server

That´s all i did and it running just fine

myshell-spiceworks · 2007-12-14T13:21:19.000Z

Greetings Pablo Francisco5319,

Thank you for posting your findings!

chrisciolli · 2008-01-11T14:28:15.000Z

A script to enable and configure DCOM
http://community.spiceworks.com/topic/7994

joewatkins2939 · 2008-02-07T07:43:16.000Z

Excellent, thanks!

rworship7923 · 2008-05-29T00:40:56.000Z

Worked fine. Excellent. Thanks for the help.

willbradley5795 · 2008-06-13T11:38:31.000Z

Neither of the answers in this thread solved my version of the question-- how do I change the security settings on DCOM on all my domain computers automatically? I finally found two ways to do it, see my thread here.

markfulton2926 · 2009-04-30T14:07:33.000Z

Your tip about the GPO allowed my Vista workstations to inventory properly. Thanks!

andrewdunning1088 · 2009-07-10T07:37:59.000Z

HI ConeAnahuak,

Your suggested worked great for me on my domain. I knew the Windows Firewall was blocking but could figure out what. I tried a few ideas and did your suggest on a system first (gpedit.msc) before doing applying it on AD2003

Thanks,

harryperrystephensjr · 2010-12-14T17:42:28.000Z

Thanks for the assist.

jmfinley7164 · 2011-01-29T09:29:24.000Z

Using group policy you also need to make sure the computer is joined to the domain. Some computers may be configured in a workgroup of the same name.

But the most common problem for Windows XP machines is that “Group Policy Client Side Extensions” is not installed. If you are using WSUS you can deploy it centrally or download it and run it on each. Also you should create a separate domain account for workstation administration…

jayburgess2 · 2011-09-24T18:31:33.000Z

ConeAnahuak wrote:

Using GPO on AD i used this options and it work out for me
My network consist on 110 workstations and 5 servers

Create New GPO call Spiceworks Policy

Computer configuration
----Administrative Templates
------Network
---------Network Connections
-----------Windows Firewall
--------------Domain Profile
---------------Windows Firewall: Allow remote administration exception
------------------Allow uncolicitated incomming messages from: IP Adress of spiceworks server

That´s all i did and it running just fine

What OS did you run this against and what server version are you running?