I currently need to create a COM object that is served by an out-proc COM server from inside an ASP.NET handler. So every time I deploy the COM server I have to fire up DCOM Config and change the security settings. Specifically I need to ensure that both "local launch" and "local activation" is allowed fro the local user ASPNET.
What surprises me is that when I open the relevant settings page "local launch" is already allowed but "local activation" is not allowed.
That doesn't make sense - why would I need such combination of permissions?