Configuring Security for Visual Studio Analyzer on Windows 95

  • 项目

Visual Studio Analyzer ships with security open. You can increase the security settings to reflect your site's needs. To increase the security settings, you need to complete the following steps:

  1. Restrict access to the Visual Studio Analyzer server to specific users.

  2. Restrict access to the Visual Studio Analyzer client.

  3. Edit the registry on the Visual Studio Analyzer server to enable security checking.

  4. Edit the registry on the Visual Studio Analyzer client to enable security checking.

These steps are described in the following procedures.

Note:   You need to configure security on a per-machine basis for any machine on which you are running the Visual Studio Analyzer server or client.

The procedures for restricting access all use DCOMCNFG, a configuration utility intended for configuring DCOM-specific settings in the registry. DCOMCNFG is shipped with the Windows 95 DCOM Refresh but is not added to the Start menu or to any groups. You must start DCOMCNFG using the Run command on the Start menu.

For more information on using DCOMCNFG to configure access and launch permissions, search for "DCOMCNFG" in MSDN Library Visual Studio 6.0.

To restrict access to the Visual Studio Analyzer server to specific users

  1. Start DCOMCNFG, if necessary.

  2. On the Applications tab, select MSVSA Local Event Concentrator Class (scroll down if necessary).

  3. Click Properties.

  4. Click the Security tab.

  5. Select Use custom access permissions and click Edit.

    The Access Permissions dialog box appears. This dialog box lists the known users who currently have (or are denied) access to the machine. Click Add to add users to the list; click Remove to remove users.

  6. Click Add to add the specific users to whom you want to allow access to the Visual Studio Analyzer server on this machine.

    The Add Access Permissions dialog box appears.

  7. Select a user ID in the Name box, then click Grant Access to allow access or Deny Access to deny access to that user. The user you selected is added to the corresponding list. When you are satisfied with the access list, click OK.

  8. Click OK.

To restrict access to the Visual Studio Analyzer client

You need to perform this procedure on any machine where you are running the Visual Studio Analyzer client. This procedure ensures that the machine will connect to legitimate Visual Studio Analyzer servers only.

  1. Start DCOMCNFG, if necessary.

  2. On the Applications tab, select Microsoft Development Environment (scroll down if necessary).

  3. Click Properties.

  4. Click the Security tab.

  5. Select Use custom access permissions and click Edit.

  6. Make sure that the user ID you specified for the Visual Studio Analyzer server to run under is included in the list of users. If it is not, click Add to add it, and then add any other user IDs for machines to which you plan to connect.

  7. Click OK, then click OK twice more to stop DCOMCNFG.

To edit the registry to enable security checking on the Visual Studio Analyzer server

  1. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VisualStudio\6.0.

  2. Click Edit, point to New, and click Key.

  3. Replace the supplied name of the key with Analyzer and press Enter.

  4. Select Analyzer.

  5. Click Edit, point to New, and click Key.

  6. Replace the supplied name of the key with Security and press Enter.

  7. Click Edit, point to New, and click DWORD Value.

  8. Replace the supplied name of the value with Enable.

  9. Double-click Enable to display the Edit DWORD Value dialog box.

  10. Type 1 in the Value data box and click OK.

To edit the registry to enable security checking on the Visual Studio Analyzer client

  1. Start regedit.

  2. Navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\VisualStudio\6.0 and select 6.0.

  3. Click Edit, point to New, and click DWORD Value.

  4. Replace the supplied name of the value with EnableSecurity and press Enter.

  5. Double-click EnableSecurity to display the Edit DWORD Value dialog box.

  6. Type 1 in the Value data box and click OK.

Connecting to Microsoft® Windows® 95 Machines Running Visual Studio Analyzer

If you want to connect to a remote Microsoft® Windows® 95 machine running Visual Studio Analyzer, you must run DCOMCNFG on the remote machine to change your DCOM settings to allow remote connections. Before you can run DCOMCNFG on any machine, you must set the machine's access control to user level (DCOMCNFG requires user-level access control in order to run). You should need to run DCOMCNFG one time only to change these settings.

Important   Changing access control to user level on a Windows 95 machine can have far-reaching consequences. For example, it will reset all of your current share permissions and you will need to restore those permissions manually. However, you cannot run Visual Studio Analyzer on a remote Windows 95 machine without changing access control to user level. Make sure you check with your system administrator before you change access control.

To set access control to user level

  1. Click Start, point to Settings, and then click Control Panel.

  2. Double-click the Network icon.

  3. Click the Access Control tab.

  4. Click User-level access control and enter your domain name in the box beneath.

  5. Click OK.

To allow remote connections

  1. Click Start, then click Run.

  2. In the Open box, type Dcomcnfg and click OK.

  3. Click the Default Security tab.

  4. Select the Enable Remote Connection check box.

  5. Click OK.

To allow access to your Windows 95 machine, you must also run the Visual Studio Analyzer Server each time you want to allow remote connections. See Starting the Visual Studio Analyzer Server on Windows 95 for steps on how to start the Visual Studio Analyzer Server.

Visual Studio Analyzer ships with security open. In this way, you can adjust the security settings to reflect your site's needs.

On Windows 95, you might find a situation where no components that generate Visual Studio Analyzer events are listed for the machine to which you are connected, even though those components exist and are registered. To work around this problem, you need to install the Remote Registry Service on that machine. To use the Remote Registry Service, you must be using user-level security and you must have the Remote Administration option enabled.

To enable the Remote Administration option

  1. Click Start, point to Settings, and then click Control Panel.

  2. Double-click the Network icon.

  3. Click File And Print Sharing.

  4. Select both check boxes on the File and Print Sharing dialog box, then click OK.

  5. Double-click the Passwords icon.

  6. Click the Remote Administration tab.

  7. Select the Enable remote administration of this server check box.

  8. Set a password for Remote Administration, then click OK.

    Note   If you are using user-level security, you do not receive a password dialog box. Instead, add users to the list by clicking Add.

To install the Remote Registry Service

  1. Click Start, point to Settings, and then click Control Panel.

  2. Double-click the Network icon.

  3. Click Add, click Service, click Add, and then click Have Disk.

  4. In the Copy Manufacturer's Files From box, type the path to the Admin\Nettools\RemoteReg folder on your Windows 95 CD-ROM, then click OK.

  5. When the Microsoft Remote Registry service has been added to the list of installed components, click OK. Restart your computer when you are prompted to do so.