Question about modify security policy in client machine

[James Wong]

Hi everybody,

I'm facing a problem to run an appliation in a shared network drive. The
application is developed in VB2005. I understand I have to add a signature
with strong name key to all assambies. I found that I have to modify
security policy to trust strong names.

I want to clarify the followings:
1. Does it mean I have to modify the security policy for each client machine
which runs my application in network drive?
2. Is there an easier way to modify the security policy for client machine
if the answer of question 1 is yes? For example, is it possible to do this
in installation procedure using .msi file?
3. For the client machine (one is Vista Business) which does not install
..NET Framework SDK, I can't find .NET Framework Configuration Utility
(mscorcfg.msc). So I don't know how I can modify the security policy.

The article in http://blogs.msdn.com/shawnfa/archive/2003/06/20/57023.aspx
is my major information source.

Thanks for your attention and kindly help!

Regards,
James

 

[Phill W.]

I want to clarify the followings:
1. Does it mean I have to modify the security policy for each client machine
which runs my application in network drive?
Yes.

2. Is there an easier way to modify the security policy for client machine
if the answer of question 1 is yes? For example, is it possible to do this
in installation procedure using .msi file?

Probably, but I've never had to (I'm lucky that way).

3. For the client machine (one is Vista Business) which does not install
.NET Framework SDK, I can't find .NET Framework Configuration Utility
(mscorcfg.msc). So I don't know how I can modify the security policy.

Use caspol.exe instead - OK, it's a command-line thing but at least it
ships with the Framework, not the SDK.

HTH,
Phill W.

 

[Rich P]

I have run into this problem also. What I did was to create a test
certificate (click on the "Create Test Certificate" button in the
Signing tab of Project/Properties). Then I deploy my app on the network
using "Click Once".

This seems to be good for about a year then it asks again for a new
Signing authority so I recreate the test certificate. Well, this is
what worked for me.

Rich

 

[James Wong]

Hi Phil,

Thanks for your reply! The information about caspol is useful to solve my
problem. I think I have to find an easy way to execute caspol in client
machine (esp. the end users don't have admin. right and know nothing about
Framework).

Regards,
James