|Important||This document may not represent best practices for current development, links to downloads and other resources may no longer be valid. Current recommended version can be found here. ArchiveDisclaimer|
Remote Debugging Across Domains
Remote debugging with the default transport uses DCOM. DCOM security prevents remote debugging across Windows NT domains and across the public Internet unless the domains have two-way trust.
Remote debugging using the TCP/IP (native only) transport depends on IP ports that will be closed on most firewalls, preventing remote native debugging across the public Internet.
If you need to debug across domains that do not have two-way trust, you can use Terminal Server.
To debug across domains that do not have two-way trust
- Use Terminal Server to log into a machine on the other domain. The machine you log into should have Visual Studio installed.
- Launch Visual Studio on the machine you have logged into under Terminal Server.
- You can now debug an application on the machine you have logged into under Terminal Server or use remote debugging to debug an application on another machine in the same domain.
On Windows XP Professional, remote debugging is disallowed by default, because of the default security setting for "sharing and security model for local accounts." To debug between two Windows XP Professional machines on different domains, you must change this setting.
To change the security setting to allow debugging between Windows XP Professional machines on different domains
- Perform the following procedure on both machines:
- From the Start menu, choose Control Panel.
- In Control Panel, double-click Administrator tools.
- In the Administrative tools window, double-click Local Security Policy.
- Under Security Settings, open the Local Policies folder.
- In the Local Policies folder, select Security Options.
- In the Policy column, find Network access: sharing and security model for local accounts and double-click on it.
- In the Network access: sharing and security model for local accounts dialog box, change the setting to Guest only - local users authenticate as Guest and click OK.
- Close the window and restart the machine.
You can now do remote debugging using the same user name on both machines.