I have a COM application instantiated by a local Windows service with which I would like to gain access to a network share. To achieve this, I simply attempted to configure my COM server to run as a domain user with access to that share: I go to the 'dcomcnfg' console, locate my server under Console Root\Component Services\DCOM Config, right-click to 'Properties', go to the 'Identity' tab and specify the domain user for the "This user" option. When I do this on my own company network, it works beautifully. However, when a user tries it on their network, they get:
An error occurred while processing the last operation on the remote computer 'DOMAIN'. Error code 80070569 - Logon failure: the user has not been granted the requested logon type at this computer."
where 'DOMAIN' is the name of the customer's domain. The domain user is in the 'Administrators' group on the local PC and should have all necessary logon permissions there. I'm presuming then that this is a problem with their domain policies, but network administration is not my area of expertise. Anybody know exactly what domain privilege(s) the domain user needs in order to make this work? Thanks.