Hi,
Here is the DISA statement.
DCOM calls are executed under the security context of the calling user by default. If the RunAs key has been altered, the DCOM calls can be executed under the user context of the currently logged in user, or as a third user. If present, the RunAs value tells the COM Service Control Manager (SCM) the name of the account under which the server is to be activated. In addition to the account name, the COM SCM must also have the password of the account. The result of a successful logon is a security context (token) for the named account that is used as the primary token for the new COM server process. Administrators should not use this method in the evaluated configuration if accountability is required, since accountability cannot be enforced. RunAs values will be removed.
Remove the following registry value:
Hive: HKLM
Key: \Software\Classes\AppID\
Name: “Each subkey listed”
Value: RunAs
---- My Comments Below
"DCOM calls are executed under the security context of the calling user by default." is the first line of the DISA statement. I don't think there is any difference between RunAs being "Interactive User" and not existing. But I will most likely rename RunAs to RunAs.Retina so the higher authorities can check this box.
Jim