Set Computer-wide Launch and Activation Permissions

Open Component Services.

In the Component Services snap-in, right-click the computer whose computer-wide launch permissions you want to modify, and then click Properties.

Select the COM Security tab.

Under Launch and Activation Permissions, click either Edit Limits or Edit Default, depending on whether you want to modify the computer-wide restriction policy or the computer-wide default settings. A Launch and Activation Permission dialog box appears.

To remove a user account or group, select the group or user in the Group or user names list, and then click Remove. The selected user account or group no longer appears in the list.

To add a user account or group, click Add. In the Select Users, Computers, or Groups dialog box, type the fully qualified name of the user or group that you want to add. If you do not know the name of the user or group that you want to add, click Advanced, and then click Find Now to view a list of users and groups in the selected domain. Select a user or group in the list, and then click OK. The added user account or group appears in the Group or user names list.

In the Group or user names list, select the group or user whose computer-wide launch and activation permissions you want to change.

In the Permissions list, select the Allow or Deny check boxes to either allow or deny the Local Launch permission, Local Activation permission, Remote Launch permission, and Remote Activation permission for the selected group or user name.

Click OK to return to the COM Security tab.

Click OK. The new computer-wide launch and activation settings are applied the next time that an application on the computer is started. Applications that are currently running are not affected until they are restarted.