Kepware Knowledge Base: Solution
Can I Configure DCOM Using a Workgroup?
Last Update: 2018/11/12
Computers that belong to a workgroup must assume the authentication role of the services that are normally present on a domain. Therefore, when using DCOM to establish a remote connection between computers on a workgroup, users must take the following precautions in order for the connection to succeed.
- The client application must attempt the connection using a Windows account that has the same credentials as an account that is already present on the server computer.
- In most cases, the default security policy settings require that the user account be assigned the same password on both computers. It cannot be left blank.
- The user account (or the group that includes the user account) must belong to the local Administrators group on the server computer.
- The Network access: Sharing and security model for local accounts Local Security Policy must be set to Classic - local users authenticate as themselves on the server computer.
- The Network access: Let Everyone permissions apply to anonymous users Local Security Policy must be set to Enable on the client computer.
- If a computer belongs to a workgroup and another domain, the two computers must authenticate using the requirements specified by the workgroup.
- A typical DCOM configuration must be applied both at the My Computer and application level on the server computer.
Note: For information on properly configuring DCOM, refer to the Remote OPC DA Quick Start Guide (DCOM). For more information on advanced settings, refer to DCOM - Secure by Default.
©
2022
PTC Inc. All Rights Reserved.