Contains data describing the Access Control List (ACL) of the principals that can start new servers for this class. The LaunchPermission named-value may be added under any AppID key to limit activation by remote clients of specific classes.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\APPID\
{AppID_value}\LaunchPermission = ACL
The LaunchPermission named-value is REG_BINARY. Upon receiving a local or remote request to launch the server of this class, the ACL described by this value is checked while impersonating the client, and its success either allows or disallows the launching of the server. If this value does not exist, the machine-wide DefaultLaunchPermission value is checked in the same way as a default to determine if the class code can be launched.
DefaultLaunchPermission, Security in COM