Setting Launch Policies per Application

If you want to grant permissions to users and groups specifically for accessing and launching the SAS object server (instead of defining global permissions as shown in the previous section), follow these steps:

1. From the Windows Taskbar, click Start Run.

2. Type dcomcnfg and click OK. The Distributed COM Configuration Properties dialog box appears.

3. Select the Applications tab:

   

   This tab shows the ProgID for each of the DCOM objects that can be launched on this machine. (The GUID is shown for objects that register without a ProgID.)

4. Select the ProgID for the SAS Integrated Object Model (IOM) Server. The ProgID differs depending on which version of SAS is installed. Use the following list to determine what ProgID to look for:

   SAS 8.0

   SAS Workspace (Ver. 1.0)

   SAS 8.1

   SAS: Integrated Object Model (IOM) Server 1.0

   SAS 8.2

   SAS: IOM DCOM Servers

5. After you highlight the selection, click on the Properties button. The Properties dialog box for the server object appears.

6. Select the Location tab:

   

7. Check the default location setting. By default, the only option enabled is Run application on this computer, as shown in the illustration. No other options are required for SAS applications.

8. Select the Identity tab:

   

9. Check the default identity setting. For maximum security, select the option The launching user.

10. Select the Security tab:

    

11. If you want to use default access permissions, select Use default access permissions, select OK, and then continue with Step 12.

    If you want to grant access to users who are not in the list of default access permissions:

    1. Select Use custom access permissions and click the adjacent Edit button. The Registry Value Permission dialog box appears:

       

    2. Select Add. The Add Users and Groups dialog box appears:

       

    3. Use this dialog box to grant users and groups (who are not listed in the Default Access Permissions) access to SAS through DCOM. (For field descriptions, refer to the Windows NT Help.) You can also identify users and groups that are denied access to SAS by changing the selection in Type of Access.

    4. When you are finished, select OK in the Add Users and Groups dialog box, and then select OK in the Registry Value Permissions dialog box.

12. On the Security tab, select Use custom launch permissions and click the adjacent Edit button. The Registry Value Permissions dialog box appears.

13. Click Add. The Add Users and Groups dialog box appears.

14. Use this dialog box to identify users and groups at your site and the type of access (allow or deny launch). It is recommended that you enter the same values that you entered for the Custom Access Permissions. (For field descriptions, refer to the Windows NT Help.) When you are finished, click OK.

    Note: If you grant launch permissions for an application to specific users and groups, you may affect those users who previously had permission to the application through default permissions.

15. Click OK in each of the open dialog boxes to save your selections and exit the dcomcnfg utility.