Managing Code Access Security

W

wayneph

Freshman
Joined
Jul 13, 2004
Messages
25
Location
Dallas, TX, USA
We have a 3rd party app that has been installed to one of our network servers and is to be run from a share. In the documentation that came with the program, the company has stated that they wanted the Local Intranet CAS settings ste to Full Trust. I don't have a huge problem with that, but it seems like a bit of overkill to me. There are also about 500 users (many without local admin rights) that would need to update this, and I don't want to have to go to every machine.

I know that caspol.exe will allow me to update settings, and I can also specify just a specific share to give privledges to. The network group can probably push it out as a script that updates the entire network in one swoop. The problem is that for the life of me, I can't come up with the right combination of switches...

Can anyone provide some samples that use caspol to give Full Trust to a share? (or the entire Local Intranet for that matter...) I'll need to run this for both the 1.1 and 2.0 frameworks, but I assume that once I have one command line, the other will be the same.
 
Might be easier than using caspol.exe - if you have the security settings configured correctly on a single pc you can go into the .Net configuration tool and right click on the 'Runtime Security Policy' node. One option is 'Create Deployment Package' - this will allow you to generate a MSI file containing the policy. This can then be deployed via something like group policy to all the relevant machines.
 
Back
Top