Re: Windows 2008 dcom security problems

[[Forwarded to & Followup-To set for
microsoft.public.windows.server.security newsgroup]]

ftnico wrote:
> Hi there
>
> I have a problem with a rpc callback function with Windows 2008 x64
> Server.
>
> The actual Situation is, that we use this windows 2008 x64 as terminal
> server with Citrix xenapp 5. On this server a application starts a
> connection to a remote server .
>
> until that point everything is fine..
>
> Within this tool, there's an option to start a sub-application which is
> connecting to another service on a remote 2003 server.
> The service then accepts this connection and tries to open a new rpc call
> back (calback function) to the windows 2008 x64 (source) server, where the
> original connection came from.
>
> This connection should then bring up a "telnet emulation" window.
>
> With the Domain Admin everything works..
> With a normal ts/citrix user (even if this user is part of the local admin
> group or the domain admins group) we run into a timeout and a security
> audit failure is generated.
>
> dcom security and access permission is given to the user with which the
> 2003
> remote systems tries to open the callback connection.
>
> The same function with the same 2003 remote server is working fine on
> windows 2000 and windows 2003 terminal server / citrix installations.
>
> So, the final question is..
> what has changed in the dcom config or with remote rpc (callback function)
> connections in 2008?