Enabling Access Checks for an Application

Performing this step enables either process access checks or full role-based security, depending on what security level you select and whether you enable access checking for individual components.

ms679482.wedge(en-us,VS.85).gifTo enable access checks for an application

  1. In the console tree of the Component Services administrative tool, right-click the COM+ application for which you want to enable access checks, and then click Properties.

  2. In the application properties dialog box, click the Security tab.

  3. Select the Enforce access checks for this application check box.

  4. Click OK.

Note  As of Windows Server 2003, access checks are enabled by default when creating a COM+ application. Access checks are enabled by default at the application level and disabled by default at the component level. Previously, access checks were disabled by default at the application level and enabled by default at the component level.

After enabling access checks, you should select the appropriate security level. See Setting a Security Level for Access Checks. Also, you must be sure to define roles and add them to the application. If access checks are enabled but no roles have been added, all calls to the application will fail. See Defining Roles for an Application.

Note   When debugging your application, it might be helpful to disable security so that you can concentrate on other aspects of your program's behavior and design.

See Also

Assigning Roles to Components, Interfaces, or Methods
Configuring Role-Based Security
Defining Roles for an Application
Enabling Access Checks at the Component Level
Setting a Security Level for Access Checks

Send comments about this topic to Microsoft

Build date: 7/23/2009

Tags :


Community Content

Thomas Lee
Disable "Enforce access checks for this application" in COM+ by code

Hi, i write this content to help someone like me... during a few days i have been finding on internet (obviously on MSDN) how to disable "Enforce access checks for this application" in COM+ by code and after a lot of probes y get the solution..

' In the AssemblyInfo.vb file..

<Assembly: ApplicationAccessControl(Authentication:=AuthenticationOption.Packet, ImpersonationLevel:=ImpersonationLevelOption.Impersonate, AccessChecksLevel:=AccessChecksLevelOption.Application, Value:=False)> 


When you install a component via InstallerClass, by default this setting is set to True, i mean, the checkbox is checked.
After that, when you you run your application you get an error saying "Access is denied" and the history begin..

Well.. the last parameter on Assembly attribute say to the installer the correct configuration..

Value:=False


Yes... is a bit confusing the name "Value".. but.. is that we have..

By the moment that is all..

Byes.. Lucas F. Zacutti


Page view tracker