Windows Service Security Zone

7 Sep 2006 9:01 PM

The Man From SQL

Can someone tell me in which of the four security zones a windows service
running under a domain account would run? I have a windows service installed
under C:\Program Files\blah blah blah... so at first I figured My Computer,
but since it's a service I figured the security zone might be something else.
I need to create a custom code access security policy for this windows
service but I want to make sure I drop it to the right security zone.

Thanks very much,

themanfromsql

8 Sep 2006 3:21 AM

Steven Cheng[MSFT]

Hello,

If the security zone you mentioned is the .NET CAS security zone, for
windows service application, if its application assemblies(exe and dll) are
all copied on local machine, it is under LocalComputer zone by default(at
machine policy level). Also, you can add additional codegroup to restrict
permission its permission at user policy level(by using url or strong-named
evidence).

Actually any code running from local computer(on file disk) is evaluated in
local computer zone. If you have .net framework sdk 2.0 installed, you can
use the .net framework configuration tool to evaluate the permissions or
codegroup of a certain assembly(exe or dll) from a given location

#.NET Framework Configuration Tool (Mscorcfg.msc)
http://msdn2.microsoft.com/en-us/library/2bc0cxhc.aspx

Hope this helps. If there is anything unclear, please feel free to let me
know.

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead

==================================================

Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.

==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.