Home All Groups Group Topic Archive Search About

.NET 2.0 Configuration UI and code access permissions

Author
8 Oct 2006 8:16 PM
Paul Hale
Im running Vista RC1 x64 but am having trouble executing any of my code
because of security exceptions. When using Vista Beta 2 I used the .NET
Config tool available in control panel > admin tools to set code access to
"Everybody". I know this probably isnt that secure but at least my code
executed as it should. When I try the same using Vista RC1 I get a non
descriptive error when launching the .NET config tool and then it closes. I
have tried uninstalling the .net Framework 2.0 and reinstalling but get
excactly the same problem. Has anybody had the same problem and found a
workaround?

Failing that, im sure I could probably use the command line tool caspol to
set the security permissions for code access to Everyone but am having
trouble working out the syntax. Any help would be appriciated.

Paul.

Author
9 Oct 2006 6:37 AM
Luke Zhang [MSFT]
Hello Paul,

Is your code a windows form application? If so, you may try following
CASPOL command:

caspol -machine -addfulltrust APP.exe

This will add FULL TRUST permission on your application and it is granted
full permission to access resource on currect machine.

For a full list of CASPOL command syntax:

http://msdn2.microsoft.com/en-us/library/cb6t8dtz.aspx

http://msdn2.microsoft.com/en-us/library/a0ke3k86.aspx

Sincerely,

Luke Zhang

Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
Author
10 Oct 2006 8:08 AM
Paul Hale
Thanks for your response. My code is all .exe running from my network
redirected profile mydocuments\code.

Show quote
"Luke Zhang [MSFT]" wrote:

> Hello Paul,
>
> Is your code a windows form application? If so, you may try following
> CASPOL command:
>
> caspol -machine -addfulltrust APP.exe
>
> This will add FULL TRUST permission on your application and it is granted
> full permission to access resource on currect machine.
>
> For a full list of CASPOL command syntax:
>
> http://msdn2.microsoft.com/en-us/library/cb6t8dtz.aspx
>
> http://msdn2.microsoft.com/en-us/library/a0ke3k86.aspx
>
> Sincerely,
>
> Luke Zhang
>
> Microsoft Online Community Support
> ==================================================
> Get notification to my posts through email? Please refer to
> http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
> ications.
>
> Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
> where an initial response from the community or a Microsoft Support
> Engineer within 1 business day is acceptable. Please note that each follow
> up response may take approximately 2 business days as the support
> professional working with you may need further investigation to reach the
> most efficient resolution. The offering is not appropriate for situations
> that require urgent, real-time or phone-based interactions or complex
> project analysis and dump analysis issues. Issues of this nature are best
> handled working with a dedicated Microsoft Support Engineer by contacting
> Microsoft Customer Support Services (CSS) at
> http://msdn.microsoft.com/subscriptions/support/default.aspx.
> ==================================================
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>

>
>
Author
10 Oct 2006 9:40 AM
Luke Zhang [MSFT]
Hello,

What did you mean "from my network redirected profile mydocuments\code."?
Are your applications running from a network shared folder? If so, you may
create  a new code group and grant special permission set on it, for
example, full trust.

Sincerely,

Luke Zhang

Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
Author
13 Oct 2006 5:55 AM
Luke Zhang [MSFT]
Hi Paul,

Thank you for the reply. Are you a local administrator account on the
computer?  I know some security issue may cause the .NET configuration tool
failed in that way. Can you find some error/exception in event log after
".net  framework 2.0 configuration" MMC failed?

Regarding the security for your applications, as I understand, your
applications need permission to access network resource, is it not enough
to grant a full trust permission on the computer?

Sincerely,

Luke Zhang

Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
Author
18 Oct 2006 6:03 AM
Paul Hale
Due to other commitments I have not had a chance to setup a group via caspol
and set permissions. And yes, my code is stored on a network share and yes I
am a local admin (plus have full admin rights on my network). Im hoping to
upgrade Vista to RC2 before the end of the week and am hoping the config tool
will start working then which will make life a bit easier.

Show quote
"Luke Zhang [MSFT]" wrote:

> Hi Paul,
>
> Thank you for the reply. Are you a local administrator account on the
> computer?  I know some security issue may cause the .NET configuration tool
> failed in that way. Can you find some error/exception in event log after
> ".net  framework 2.0 configuration" MMC failed?
>
> Regarding the security for your applications, as I understand, your
> applications need permission to access network resource, is it not enough
> to grant a full trust permission on the computer?
>
> Sincerely,
>
> Luke Zhang
>
> Microsoft Online Community Support
> ==================================================
> Get notification to my posts through email? Please refer to
> http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
> ications.
>
> Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
> where an initial response from the community or a Microsoft Support
> Engineer within 1 business day is acceptable. Please note that each follow
> up response may take approximately 2 business days as the support
> professional working with you may need further investigation to reach the
> most efficient resolution. The offering is not appropriate for situations
> that require urgent, real-time or phone-based interactions or complex
> project analysis and dump analysis issues. Issues of this nature are best
> handled working with a dedicated Microsoft Support Engineer by contacting
> Microsoft Customer Support Services (CSS) at
> http://msdn.microsoft.com/subscriptions/support/default.aspx.
> ==================================================
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>

>
>

AddThis Social Bookmark Button