Certain values in the registry are used to determine security settings for applications that do not call CoInitializeSecurity. The best way to modify these default security settings for a machine is to use Dcomcnfg.exe. For step-by-step procedures that describe how to use Dcomcnfg.exe for this purpose, see Setting Machine-Wide Security Using DCOMCNFG.
Another way to change default machine-wide settings is to manipulate registry values directly. However, only machine administrators and the system have full access to the portion of the registry that contains the default machine-wide call-security settings. All other users have read-access only.
The named values that affect machine-wide security defaults are as follows:
To find out more about a particular named value, choose the hyperlink for the one you are interested in.
You can also set launch permissions and enable or disable DCOM for your machine, as described in Activation Security and Disabling DCOM.