Intranet zone full trust in vista

[Bryan]

Hello,
I just finally installed vista for some testing. I have a embedded control
in IE that requires .net 1.1 and full trust, as it writes some data to a
local db on the machine, when I goto the wizard for security it does not
allow me set permissions for local intranet zone to full trust, it only
shows to medium trust. I have even tried using caspol with .net 2.0 and it
said that I don't have authority to change and to see my network admin. The
problem is on this vista my login is an administrator, so it should allow me
to change these settings, right?

Any help would be great.

Thanks,
Bryan

 

[Stickman2006]

Hello Bryan:
If you think this is going to be easy... think again.
I'm "The Master of VISTA" and I couldn't figure this out.
I posted a similar question on dec 6th and still haven't heard
anything.

 

[Bryan]

Well being that I am an MSDN subscriber it would be nice to get an answer
from MS on this. I will keep you posted at to what I find out, even if I
have to open a support ticket.

 

[PS]

Start / All Programs / Accessories / Command Prompt / Right click - Run As
Adminstrator

Paste this into window and press Enter:

%windir%\Microsoft.Net\Framework\v2.0.50727\caspol -cg 1.2 FullTrust

Works for me to run a .Net 2.0 application over LAN.

PS

 

[PS]

Hello Bryan:
If you think this is going to be easy... think again.
I'm "The Master of VISTA" and I couldn't figure this out.
I posted a similar question on dec 6th and still haven't heard
anything.

You may also need to the add the server to your trusted site in Internet
Explorer. Tools / Options / Security / Local Intranet / Sites / Advanced /
\\ServerName Add. Not sure how Vista determines what computers are in Local
Intranet.

PS

 

[Walter Wang [MSFT]]

Hi Bryan,

With UAC (User Account Control:
http://technet.microsoft.com/en-us/windowsvista/aa906021.aspx) turned on
(which is also the default setting), when an administrator logs on to a
computer, the system creates two different tokens
(http://www.pluralsight.com/wiki/default.aspx/Keith.GuideBook/WhatIsAToken.h
tml) representing the same logon session
(http://pluralsight.com/wiki/default.aspx/Keith.GuideBook/WhatIsALogonSessio
n.html). The first token grants all the permissions and privileges afforded
to the administrator while the second token is a restricted token, offering
far fewer permissions and pvivileges. The system then creates the shell
(explorer.exe) using the restricted token.

Setting .NET Code Access Security Policy will require administrative
privilege, and you will need elevation
(http://www.windowsecurity.com/articles/Understanding-User-Account-Control-V
ista.html) to launch the CAS tool with the unrestricted token.

Hope this helps. Please feel free to let me know if you need further
information.

Sincerely,
Walter Wang ([email protected], remove 'online.')
Microsoft Online Community Support

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications. If you are using Outlook Express, please make sure you clear the
check box "Tools/Options/Read: Get 300 headers at a time" to see your reply
promptly.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.