Quote:

---

Ok, it looks like we may finally have the solution. I opened up a case with MS and this is what they came up with that works:

Upon research I found that Windows 2003 SP1 creates a local group called ‘Distributed COM Users’ which has all rights for Com security. Please add your low user rights accounts to ‘Distributed COM Users’ group on SQL server in order to make the connection.

I've done this and it does work. I guess this local group has more rights than individually modifying the DCOM permissions. Not sure, but just glad it works.

---

One More Thing: You will also need to modify COM permissions to successfully run the Web reporting tool from your remote SMS Administrator Console.

To use remote SMS Administrator Console

1. Add remote administrators to the %smsserver%\Distributed COM Users group
2. Run dcomcnfg.exe>Component Services>Computers>My Computer>Properties>COM Security TAB> 'Launch and Activation Permissions' "Edit Defaults" Button
3. ADD Distributed COM Users group and grant: Local Launch, Remote Launch, Local Activation, and Remote Activation