REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DCOM" /v MachineAccessRestriction /t REG_SZ /d O:BAG:BAD:(A;;CCDCLC;;;AN)(A;;CCDCLC;;;WD) /f
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DCOM" /v MachineLaunchRestriction /t REG_SZ /d O:BAG:BAD:(A;;CCDCLCSWRP;;;BA)(A;;CCDCLCSWRP;;;WD) /f