.net framework configuration through programming

[syed_razi]

Is it possible to set Local Intranet Zone code group's security level
to FullTrust without going in the control panel to configure it?

I have a VB 2005 app with a SQL backend database, but I can't get it
to run from a network drive without changing the setting through .Net
2.0 Framework Configuration tool. I have to do this on each client
computer where I want to run the app.

I need a way to either run this app from a network drive without
setting these permissions, or have a setup program make this
configuration without having to manually do it from the control panel.
Is there a way to do either?

 

[Norman Yuan]

You have to configure the .NET for the computer running your app from
network in some way. Since you use .NET2.0 (hence VB2005), there is no .NET
Configuration applet in Control Panel if the computer only has .NET
framework redistributable (not .NET SDK) installed. So, you need to use
command line tool CASPOL.exe to configure .NET security on each computer.
You can simply add a script/*.bat, which runs the CASPOL tool, in your setup
project (if you have setup project, why not install your all locally,
though), or run the script/*.bat manually. You need admin right to configure
..NET security, though.

Also, give entire local LAN full trust is a bit too much. I usually only
give a network folder full trust, where I place all the small .NET app to be
run froom there. Only authorized person has write-permission, while regular
users only have read-permission. This way, no one can run not verified .NET
apps from network share.

The better approach might be to consider using ClickOnce to deploy your app
from network drive. So, you only store/update the package in network drive.

 

[syed_razi]

You have to configure the .NET for the computer running your app from
network in some way. Since you use .NET2.0 (hence VB2005), there is no .NET
Configuration applet in Control Panel if the computer only has .NET
framework redistributable (not .NET SDK) installed. So, you need to use
command line tool CASPOL.exe to configure .NET security on each computer.
You can simply add a script/*.bat, which runs the CASPOL tool, in your setup
project (if you have setup project, why not install your all locally,
though), or run the script/*.bat manually. You need admin right to configure
.NET security, though.

Also, give entire local LAN full trust is a bit too much. I usually only
give a network folder full trust, where I place all the small .NET app to be
run froom there. Only authorized person has write-permission, while regular
users only have read-permission. This way, no one can run not verified .NET
apps from network share.

The better approach might be to consider using ClickOnce to deploy your app
from network drive. So, you only store/update the package in network drive.








- Show quoted text -

Hey

Thanks for information. It sounds promising. I am not familiar with
caspol or ClickOnce, but I'll look more it in to those two options.
I'll let you know if I have any questions on them.

Thanks