How to disable DCOM support in Windows

The Distributed Component Object Model (DCOM) is a protocol that enables software components to communicate directly over a network. Previously named "Network OLE," DCOM is designed for use across multiple network transports, including Internet protocols such as HTTP. More information about DCOM, visit the following Microsoft Web site: http://technet.microsoft.com/en-us/library/cc958799.aspx
DCOM is supported natively in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003.

Warning If you disable DCOM, may you may lose operating system functionality. After you disable support for DCOM, the following may result:

• Any COM objects that can be started remotely may not function correctly.
• The local COM+ snap-in will not be able to connect to remote servers to enumerate their COM+ catalog.
• Certificate auto-enrollment may not function correctly.
• Windows Management Instrumentation (WMI) queries against remote servers may not function correctly.

There are potentially many built-in components and 3rd party applications that will be affected if you disable DCOM. Microsoft does not recommend that you disable DCOM in your environment until you have tested to discover what applications are affected. Disabling DCOM may not be workable in all environments.

Support for DCOM on all Windows NT-based operating systems can be disabled. To disable this support, follow these steps.

Note To disable DCOM on a Windows 2000-based computer, you must be running Windows 2000 Service Pack 3 (SP3) or later.

Edit the Registry

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756 How to back up and restore the registry in Windows

1. Start Registry Editor.
2. Locate the following path:
   HKEY_LOCAL_MACHINE\Software\Microsoft\OLE
3. Change the EnableDCOM string value to N.
4. Restart the operating system for the changes to take effect.

Use DCOMCNFG.EXE

1. Run Dcomcnfg.exe.
   
   
   
2. If you are running Windows XP or Windows Server 2003, perform these additional steps:
   
   
   1. Click the Component Services node under Console Root.
   2. Open the Computers folder.
      
   3. For the local computer, right-click My Computer, and then click Properties.
   4. For a remote computer, right-click Computers folder, point to New, and then click Computer.
   5. Type the computer name.
   6. Right-click the computer name, and then click Properties.
      
3. Click the Default Properties tab.
   
   
4. Click to select (or click to clear) the Enable Distributed COM on this Computer check box.
5. If you want to set more properties for the computer, click Apply to enable (or disable) DCOM. Otherwise, click OK to apply the changes and quit Dcomcnfg.exe.
6. Restart the operating system for the changes to take effect.