id summary reporter owner description type status component version resolution keywords cc guest host 8426 Unable to lock down VBOX COM using DCOMCNFG rbhkamal "I need to install VirtualBox in an environment that permits only a special user (vboxuser) to control virtual box.[[BR]] [[BR]] The problem is that on Windows XP, locking down VirtualBox is not working (could be a windows bug), any user can launch with VBOXSVC and then have complete control over VirtualBox (if the set VBOX_USER_HOME properly). Windows 7 works fine (UAC on and off).[[BR]] [[BR]] [[BR]] Here are the steps to lock down the COM service:[[BR]] 1- Install virtualbox under any admin user[[BR]] 2- Create a new user (vboxuser), make it an admin.[[BR]] 3- Login to vboxuser and start DCOMCNFG as admin[[BR]] 4- Select Component Services --> Computers --> My Computer --> DCOM Config[[BR]] 5- Locate VirtualBox then right click on open Properties[[BR]] 6- Select Security Tab[[BR]] 7- Change Launch/Activation to SYSTEM and vboxuser (local launch and activation)[[BR]] 8- Change Access to SELF,SYSTEM and vboxuser (local access)[[BR]] 9- Change Configuration to SYSTEM, vboxuser (full control)[[BR]] 10- Click OK and make sure that virtualbox.exe can start under vboxuser[[BR]] 11- logoff from vboxuser and then log back in to your user.[[BR]] 12- Start virtual box, and it starts! That is the problem.[[BR]] [[BR]] On Windows 7 you would get an error (Access Denied) and it would only work if I use runas /user:vboxuser virtualbox.exe.[[BR]] [[BR]] The problem happens only on Windows XP SP3 x86 (I haven't tested any x64 versions)[[BR]] [[BR]] I tested another COM service, and the permissions seem to work on Windows XP.[[BR]] Please let me know if you have any questions[[BR]] [[BR]] I was able to reproduce this problem using VBOX 4.0.4 and VBOX-OSE 3.2.18 (self compiled/installed)" defect new other VirtualBox 4.0.4 Linux Windows