1. A method of controlling access to a component object model (COM) object in a computer device, the method comprising: a) intercepting a request by a first user process for creation of a COM object as an elevated COM object having an elevated privilege level which is elevated with respect to a privilege level of the first user process; b) determining whether the first user process is entitled to access the COM object and if so then continuing to step (c); c) creating the COM object without the requested elevated privilege level; d) intercepting a second user process that implements the COM object; e) confirming that the second user process is entitled to access the COM object and if so then continuing to step (f); and f) elevating the privilege level of the second user process that implements the COM object to the requested elevated privilege level.