How to set DCOM and Local security policy settings for Agilent LC/GC, ICF-based instruments - WKB121320

ENVIRONMENT

• Agilent Instrument Control Framework
• Empower 3 Enterprise
• Agilent LC
• Agilent GC

ANSWER

Ensure that you have the correct settings for Everyone and Domain Users. Below are the steps to follow to set on LAC/E. Reboot the LAC/E when the settings are done.

Verify that Everyone or Authenticated Users and Domain Users are granted Local and Remote Access (if users are not available, you need to add Everyone and Domain Users to the list and provide the settings below). Note correct naming and also access levels need to be tick for Everyone

• In Component Services > Computers > Properties > COM Security > Access Permission, select the Allow check box for Local Access and Remote Access for everyone and domain users.

• In Component Services > Computers > Properties > COM Security > Launch and Activation Permissions, select Everyone in the Group or user names text box, and then select Allow for Local Launch, Remote Launch, Local Activation, and Remote Activation Permissions and also by selecting Domain users.

• In Local Security Policy > Security Settings > Local Policies > Security Options > DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax > Edit Security, select the Allow check box for Local Access and Remote Access for everyone and domain users.

• In Local Security Policy > Security Settings > Local Policies > Security Options > DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax > Edit Security > Launch and Activation Permissions, select Everyone in the Group or user names text box, and then select Allow for Local Launch, Remote Launch, Local Activation, and Remote Activation Permissions, and also by selecting Domain users.

ADDITIONAL INFORMATION