Framework Config Security

[Guest]

In the Administrative Tools - .NET Framework 1.1 Configuration (Microsoft
Management Console (MMC)) window how do remove the "read-only" designation
after the Machine Runtime Security Policy (i.e. Machine (Read-Only))

Well some users on the network have the read only designation others don't

I need to added my "New.." assembly and I can't do that with the read-only
designation

Steve

 

[Nicole Calinoiu]

The machine and enterprise policies are only editable by machine
administrators. The users that see the "read-only" are most likely not
members of the Administrators group on their own machines. If you want to
adjust their machine security policy, you will need to do so under an
administrator account. Another option would be to use a GPO or login script
deployed via the network, which would avoid both the user permissions
problem and the need to manually adjust the configuration on each machine.

 

[Guest]

Nicole,

First of all thank you for responding

1. Can you tell me where the administrator account is and briefly what to
do or point me to a web site? I doubt by part-time administrator knows what
to do because I sure don’t.

2. I love that idea about the GPO or Login Script. How can I learn about
them? Long story short it was suggested to me to add my assembly under
machine, select URL and enter file:///\\server_name\\pub\\myNetprogram.*.
AND yes I do have to go to each individual machine that’s when I ran into the
read-only. I selected the site below as a starting point to learn about GPO.
How do add that URL to the GPO?

http://www.microsoft.com/windowsserver2003/technologies/management/grouppolicy/default.mspx

Any help appreciated. Thanks

Steve

 

[Nicole Calinoiu]

Nicole,

First of all thank you for responding

1. Can you tell me where the administrator account is and briefly what to
do or point me to a web site? I doubt by part-time administrator knows
what
to do because I sure don't.

That would the Administrator account on the machine, or any other member of
the Administrators group. You would log into Windows under this account
instead of the usual machine user's account. If you're using Windows XP
with the welcome screen enabled, see http://windowsxp.mvps.org/admins.htm
for instructions on how to log in as admin.

2. I love that idea about the GPO or Login Script. How can I learn about
them? Long story short it was suggested to me to add my assembly under
machine, select URL and enter file:///\\server_name\\pub\\myNetprogram.*.
AND yes I do have to go to each individual machine that's when I ran into
the
read-only. I selected the site below as a starting point to learn about
GPO.
How do add that URL to the GPO?

You don't add "the URL to the GPO". Instead, you create a CAS policy
modification installer (to apply the same policy you were setting "manually"
on each machine) and deploy that via a GPO. See
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/entsecpoladmin.asp
for instructions.

 

[Guest]

Thank You Nicole - your help is always appreciated

--Steve