When attempting to confirm DCOM permissions are correctly set for the ERASService account, users may be unable to select “Edit Limits” for the Launch and Activation Permissions because the button is disabled.
This is typically caused by a Security Policy (Either Domain or Local) used to restrict access to this setting. Please use the following directions to check for the Security Policy on the client machine:
- Open the Local Security Policy on the client machine.
- Navigate to Local Policies > Security Options.
- Locate the Security Policy named “DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax”.
If this policy is in any state but “Not Defined” you will be unable to edit the DCOM permissions, and neither will the ERAS Connector. To correct this issue, the policy must be set to an unconfigured state.