Gets the COM Access or Launch and Activation permissions for the current computer.
Get-ComPermission -Access -Limits [-Identity <String>] [<CommonParameters>]
Get-ComPermission -Access -Default [-Identity <String>] [<CommonParameters>]
Get-ComPermission -LaunchAndActivation -Limits [-Identity <String>] [<CommonParameters>]
Get-ComPermission -LaunchAndActivation -Default [-Identity <String>] [<CommonParameters>]COM access permissions ared used to "allow default access to application" or "set limits on applications that determine their own permissions". Launch and Activation permissions are used "who is allowed to launch applications or activate objects" and to "set limits on applications that determine their own permissions." Usually, these permissions are viewed and edited by opening dcomcnfg, right-clicking My Computer under Component Services > Computers, choosing Properties, going to the COM Security tab, and clicking Edit Default... or Edit Limits... buttons under the Access Permissions or Launch and Activation Permissions sections. This function does all that, but does it much easier, and returns objects you can work with.
These permissions are stored in the registry, under HKLM\Software\Microsoft\Ole. The default security registry value for Access Permissions is missing/empty until custom permissions are granted. If this is the case, this function will return objects that represent the default security, which was lovingly reverse engineered by gnomes.
Returns Carbon.Security.ComAccessRule objects, which inherit from `System.Security.AccessControl.AccessRule.
| Name | Type | Description | Required? | Pipeline Input | Default Value |
|---|---|---|---|---|---|
| Access | SwitchParameter | If set, returns permissions for COM Access permissions. |
true | false | False |
| LaunchAndActivation | SwitchParameter | If set, returns permissions for COM Access permissions. |
true | false | False |
| Default | SwitchParameter | Gets default security permissions. |
true | false | False |
| Limits | SwitchParameter | Gets security limit permissions. |
true | false | False |
| Identity | String | The identity whose access rule to return. If not set, all access rules are returned. |
false | false |
Carbon.Security.ComAccessRule.
Get-ComPermission -Access -DefaultGets the COM access default security permissions. Look how easy it is!
Get-ComPermission -LaunchAndActivation -Identity 'Administrators' -LimitsGets the security limits for COM Launch and Activation permissions for the local administrators group.