I have an application that only requires 2 admin functions. I decided to do these operations in a separate ActiveX exe and use the COM Moniker to elevate this exe.

Set srv = CreateObject("Elevation:Administrator!new:testSrv.Admin")

I was getting the same Permission Error when making a method call into this object as a restricted user.

It seems the ActiveX exe object needs to CoInitializeSecurity.

I was able to get it working using the registry AppID technique refered to at this link: http://na.tm.agilent.com/pna/DCOMSecurity.html