albertony/dcompermex

Command line utility for setting permissions to COM servers

dcompermex's Issues

Problem with localized names

Looks like not using correct codepage when printing security principals' names.

LookupAccountSid result not checked

There is a bug with LookupAccountSid call - there is no check for call result. If it fails (and it does for some SIDs on current Win10) then incorrect value from the previous call is used (printed).

P.S. And there is a larger problem with DACL: current code checks only for 2 types of ACEs; there could be more (audit for example).
The solution can be in printing and setting DACL in SDDL format.

Updating Identity Password

Hi Albert, my situation is I have a legacy business critical application that have a number of different Windows components that need to have their password rotated by an external trigger. This application has 2x "DCOM Config" objects that also need their Identity Password rotated.

I've read the Source code (both yours and Microsoft's) that indicates that when running the "dcomperm -runas {12345678-1234-1234-1234-00aa00bbf7c7} redmond\jdoe password" command, it should actually update the password. However, running a precompiled version, it doesnt appear to and after I run the application all indications are that it still has the old password.

My questions are:

• is the dcomperm command as shown supposed to update the password? Where can I look to confirm a change? If I change the user, I see the change in both registry & dcomcnfg, but no change in the password field (number of dots).
• Both yours and Microsoft's dcomperm.h have a duplicate set of DWORD assignments (sorry if I get the lingo wrong). Could this be an issue?:
  DWORD GetRunAsPassword (
  LPTSTR AppID,
  LPTSTR Password
  );

DWORD SetRunAsPassword (
LPTSTR AppID,
LPTSTR Principal,
LPTSTR Password
);

DWORD GetRunAsPassword (
LPTSTR AppID,
LPTSTR Password
);

DWORD SetRunAsPassword (
LPTSTR AppID,
LPTSTR Password
);

Not being an experienced developer, I'm attempting to get some confidence that I'm on the right track to solving this issue I have before I go down the track of compiling etc.

Thanks

Unable to compile

Hi Albertony

I'm trying to compile the files using the below command in VS 2017 Build Tools:

cl /EHsc AclMgmt.Cpp DComPerm.Cpp ListAcl.Cpp SDMgmt.Cpp SrvcMgmt.Cpp UtilS.Cpp Wrappers.Cpp /link /out:dcompermex.exe

When I do I receive errors regarding unresolved external links.

Just wondering if you have the exe version of dcompermex available to download, or can assist with compiling issue.

Sorry I didn't know the best place to post this!

Many Thanks

Anthony

Can this be used on an offline windows install (dualboot) situation.

Can this be or be modified to be used on and offline windows install on the same hardrive?