DCOM Machine Restriction (Windows)

Module: Active Directory

Supported Platforms: Windows 2003, Windows 2008, Windows Vista, Windows XP

This check reports if the DCOM local policies are enabled or not. Also it reports the difference in security descriptor in comparison with the template. This check is not applicable for Windows 2000, Windows 2003 SP0 and Windows XP SP0 and SP1.

The following table lists the error messages for the check.

Table: Error messages for DCOM Machine Restriction

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESM_DCOM_INCORRECT_VALUE_G

Category: Policy Compliance

  • Windows 2003 (208148)

  • Windows 2008 (251148)

  • Windows Vista (231148)

  • Windows XP (203148)

Title: Incorrect Policy Value

Description:The actual value in the Policy does not match the expected value in the ESM template.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_DCOM_INCORRECT_VALUE_Y

Category: Policy Compliance

  • Windows 2003 (208149)

  • Windows 2008 (251149)

  • Windows Vista (231149)

  • Windows XP (203149)

Title: Incorrect Policy Value

Description:The actual value in the Policy does not match the expected value in the ESM template.

Severity: yellow-2

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_DCOM_INCORRECT_VALUE_R

Category: Policy Compliance

  • Windows 2003 (208150)

  • Windows 2008 (251150)

  • Windows Vista (231150)

  • Windows XP (203150)

Title: Incorrect Policy Value

Description:The actual value in the Policy does not match the expected value in the ESM template.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_INVALID_TEMPLATE_ENTRY

Category: Policy Compliance

  • Windows 2003 (208151)

  • Windows 2008 (251151)

  • Windows Vista (231151)

  • Windows XP (203151)

Title: Incorrect Template Entry

Description:Invalid entry in the template

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_POLICY_NOT_SET_R

Category: Policy Compliance

  • Windows 2003 (208152)

  • Windows 2008 (251152)

  • Windows Vista (231152)

  • Windows XP (203152)

Title: DCOM Policy not defined

Description:DCOM Policy is not defined

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_POLICY_NOT_SET_Y

Category: Policy Compliance

  • Windows 2003 (208153)

  • Windows 2008 (251153)

  • Windows Vista (231153)

  • Windows XP (203153)

Title: DCOM Policy not defined

Description:DCOM Policy is not defined

Severity: yellow-2

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_POLICY_NOT_SET_G

Category: Policy Compliance

  • Windows 2003 (208154)

  • Windows 2008 (251154)

  • Windows Vista (231154)

  • Windows XP (203154)

Title: DCOM Policy not defined

Description:DCOM Policy is not defined

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_SECDESC_NOT_SET_R

Category: Policy Compliance

  • Windows 2003 (208155)

  • Windows 2008 (251155)

  • Windows Vista (231155)

  • Windows XP (203155)

Title: Security Descriptor not set for DCOM Policy

Description:Security Descriptor not set for DCOM Policy

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_SECDESC_NOT_SET_Y

Category: Policy Compliance

  • Windows 2003 (208156)

  • Windows 2008 (251156)

  • Windows Vista (231156)

  • Windows XP (203156)

Title: Security Descriptor not set for DCOM Policy

Description:Security Descriptor not set for DCOM Policy

Severity: yellow-2

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_SECDESC_NOT_SET_G

Category: Policy Compliance

  • Windows 2003 (208157)

  • Windows 2008 (251157)

  • Windows Vista (231157)

  • Windows XP (203157)

Title: Security Descriptor not set for DCOM Policy

Description:Security Descriptor not set for DCOM Policy

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]