RE: caspol & local intranet security

From: adam (adam_at_twv.org)
Date: 01/16/04


Date: Fri, 16 Jan 2004 10:11:05 -0800

Thanks luke

I tried this, but both the options you suggest fail with the message

Unknown permission set "Fulltrust"

Adam
     
     ----- MSFT wrote: -----
     
     Hi Adam,
     
     Thank you for using MSDN Newsgroup. I am Luke and I am review this issue
     currently. As I understand, you want to find some way which can change the
     Zone Security setting for intranet. Regarding the problem, I think
     Caspol.exe should be a good solution: It can create/modify code group's
     attributes in the code access security setting:
     
     Changing Code Groups
     http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/htm
     l/cpconchangingcodegroup.asp
     
     In your situation, you need follow command:
     
     Caspol -machine -chggroup LocalIntranet_Zone Fulltrust
     
     or
     
     Caspol -machine -chggroup 1.2 Fulltrust
     
     This will grant full trust to local intranet code group.
     
     For more information on caspol, you may refer to:
     
     http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/htm
     l/cpconusingcodeaccesssecuritypolicytoolcaspolexe.asp
     
     Hope this help,
     
     Luke
     Microsoft Online Support
     
     Get Secure! www.microsoft.com/security
     (This posting is provided "AS IS", with no warranties, and confers no
     rights.)
     
     
     
     



Relevant Pages