
Securing DCOM
BP-FILE-DCOM-01 DCOM should be secured “UUCU”.
BP-OPSYS-LICENSE-01 DCOM must be LICENSED.
BP-OPSYS-OWNER-01 DCOM should be owned by SUPER.SUPER.
BP-OPSYS-FILELOC-01 DCOM must reside in $SYSTEM.SYSnn.
If available, use Safeguard software or a third party object security product to grant
access to DCOM object files only to users who require access in order to do their jobs.
BP-SAFE-DCOM-01 Add a Safeguard Protection Record to grant appropri-
ate access to the DCOM object file.
Discovery Questions Look here:
OPSYS-OWNER-01 Who owns the DCOM object file? Fileinfo
OPSYS-LICENSE-01 Is the DCOM object file licensed? Fileinfo
FILE-POLICY Who is allowed ...