First off, I have already seen this: http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/mangxpsp2/mngsecps.mspx\
That said, I have an application that is causing DCOM errors to fill the system log. The fix is to run 'dcomcnfg' and change the launch permissions for a local group (one that's created when the application is installed and contains the same members as the local administrators group) to allow for all. Rather than have to visit each machine I'd like to do this through group policy. Searching EE the afore mention link was a popular post but I do not find any particularly useful information from it.
Ultimately I'd like to allow a specifc local group to launch a specific object and I would appreciate any help I could receive.