We are being forced to develop ASP with VFP COM objects. We need to access data on another machine.
I'm not that familiar with Impersonation, so let me take a stab at it.

Do we need to set the Interactive User as an account which has access to the data on the other machine in DCOMCNFG?

Does this open up security risks? Do we need to use RevertToSelf or ImpersonateClient to close this security loophole?

TIA