Permissions
Within DCOM Security the launch permission is described as the right to start (launch) an application. As an OPC Server will be started (launched) by the Client application (CreateInstance) the launch permission for the OPC Server application must be granted for the Security Context in which the OPC Client is running. The Security Context of the Client may be different depending on the uuser actually logged in and double clicked the Client.
The access permission is described as the right to access (communicate to) an application. As an OPC Client will call functions on the OPC Server Object the Security Context of the Client must be known by the Server. When sending callbacks to the Client (asynchronous functions or DataChange) the Client must grant access permission to the OPC Server.