Re: Assigning a Permission Set to an Assembly

From: Shawn Farkas [MS] (shawnfa@online.microsoft.com)
Date: 01/20/03 

From: "Shawn Farkas [MS]" <shawnfa@online.microsoft.com>
Date: Mon, 20 Jan 2003 13:33:39 -0800

MMC.exe is not a managed application, so it is not affected by the .Net
security policy. You need to make sure the snap-in is fully trusted. If
you mean to be running with the default policy, the easiest way to make sure
that you indeed have the default policy is to just run:

caspol -all -reset

Then try to add the custom code group again. 

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send email directly to this alias, this alias is for newsgroup
purposes only.
"Lee Gillie" <DESPAMlee@odp.comMAPSED> wrote in message
news:ONYFOEMwCHA.2288@TK2MSFTNGP09...
> I am running with installation defaults, what ever they are.  How can I
> tell?
>
> I see this is an MMC snap-in, so do I need to boost MMC.EXE or the
SNAP-IN?
>
> Can I turn on some kind of auditing so I can see specifically what is
> failing, or do we need to discover by trial and error?
>
> - Lee Gillie
>
> "Shawn Farkas [MS]" <shawnfa@online.microsoft.com> wrote in message
> news:OgHEhlLwCHA.1644@TK2MSFTNGP12...
> > Is it possible that the .Net Configuration tool is not running with
> > FullTrust?  This error might occur if the tool does not have enough
> > permissions to load your assembly off the disk into an AppDomain.
> >
> > -Shawn
> >
> > --
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > Please do not send email directly to this alias, this alias is for
> newsgroup
> > purposes only.
> >
> >
> > "Lee Gillie" <ANTISPAMIFICATION_lee@odp.com> wrote in message
> > news:uBUiHoJwCHA.2292@TK2MSFTNGP10...
> > > Hi Shawn -
> > >
> > > "The Import Failed. The assembly does not appear to be valid."
> > >
> > > It has a dependency of another library, which I was able to
> > > import on this computer, first.
> > >
> > >
> > > I did try this on my development machine, and it worked there.
> > >
> > > Thanks for any light you can shed on what this means.
> > >
> > > Best regards - Lee Gillie
> > >
> > >
> > > "Shawn Farkas [MS]" <shawnfa@online.microsoft.com> wrote in message
> > > news:#jedEynvCHA.2492@TK2MSFTNGP10...
> > > > Hi Lee,
> > > >
> > > >     The tool to generate the key pairs is sn.exe, you can invoke
> > > "sn -k
> > > > mykey.snk" to create a keypair for your assembly.  The attribute you
> > > are
> > > > looking for is called AssemblyKeyFile.  It is not required that you
> > > place
> > > > your assemblies in the GAC in order for the strong name membership
> > > condition
> > > > to work.
> > > >     Can you provide more details on the error you are encountering?
> > > Thanks.
> > > >
> > > > -Shawn
> > > >
> > > > --
> > > > This posting is provided "AS IS" with no warranties, and confers no
> > > rights.
> > > > Please do not send email directly to this alias, this alias is for
> > > newsgroup
> > > > purposes only.
> > > >
> > > >
> > > > "Lee Gillie" <ANTISPAMIFICATION_lee@odp.com> wrote in message
> > > > news:#mcYQLmvCHA.2596@TK2MSFTNGP11...
> > > > > Peter -
> > > > >
> > > > > I still don't have it working myself, but I think I know what is
> > > > > SUPPOSED to happen, so will share that much. If you use
> > > VSVARS32.BAT
> > > > > to assign your command line environment variables.  Set default
> > > folder
> > > > > to where your sources are. Then use the tool to generate public
> > > and
> > > > > private keys (.key file as I recall). I beleive this is a one-time
> > > > > thing, somewhat like making guids. Then there is an ASSEMBLY
> > > attribute
> > > > > you can include in one of the sources for the assembly, which
> > > > > references the key file. Once you do this, then you can use the
> > > STRONG
> > > > > NAME as the EVIDENCE for your code, which is the assembly. You
> > > browse
> > > > > the assembly.  The .NET Framework Configuration tool will then
> > > fill in
> > > > > the public part of the key for you, and offer to also optionally
> > > > > (additionally) verify by the assembly name, and even the version
> > > if
> > > > > you like. I have dependent assemblies, as well, and these ALSO
> > > need
> > > > > the keys, before the calling assembly can be configured. I moved
> > > them
> > > > > both to the GAC (before configuring), but I don't know that is
> > > > > required. I'm not sure what happens after this, because when I do
> > > this
> > > > > it will either NOT LOAD the assembly, or else it WILL LOAD, but
> > > > > corrupt the configuration database.  Sorry I can't help you more.
> > > > > Maybe someone who has been successful can add or correct anything
> > > I
> > > > > have here.
> > > > >
> > > > > Best regards -
> > > > > Lee Gillie
> > > > > Spokane, WA
> > > > >
> > > > > "Peter Singer" <petes@knorrassociates.com> wrote in message
> > > > > news:u27iH6jvCHA.1244@TK2MSFTNGP12...
> > > > > > Is there a way to assign a permission set to a particular
> > > assembly?
> > > > > I know I
> > > > > > can configure an assembly via the Microsoft.NET Framework
> > > > > Configuration. But
> > > > > > this lets me define the binding policy and a codebase, not
> > > assign it
> > > > > a
> > > > > > permission set. There doesn't seem to be a Membership Condition
> > > for
> > > > > an
> > > > > > assembly. Can something be done with
> > > > > > the "Custom" condition type? I guess giving it a Strong Name is
> > > > > another
> > > > > > option?
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • RE: Vista MMC Task Scheduler not in Group Policy
    ... they will communicate it to the GP and Vista teams. ... END POLICY;!!SiteAdministration ... prevents error message.If you enable this setting, the snap-in is permitted. ... ExplainExchangeServer2007 ="Permits or prohibits use of this snap-in. ...
    (microsoft.public.windows.group_policy)
  • Re: IPSec for ODBC connection?
    ... found that currently in a NAT environment it won't really work (since NAT ... Both Win2k and XP have ipsec support built into the os. ... through the IP Security Management MMC snap-in (at a run command, type MMC, ... create a policy in your Win2k Active Directory (you'll have to use the AD ...
    (microsoft.public.win2000.security)
  • Re: Group Policy & MMC restictions
    ... The old policy is still active for the user, so move him out of this OU and it should work. ... I seem to have an odd issue regarding Group Policy and MMC snap-in ... MMC snap-ins unless explicitly enabled using "Restrict users to the ... I have created a new group policy object and filtered it by a group ...
    (microsoft.public.win2000.group_policy)
  • Re: Group Policy & MMC restictions
    ... It looks that the new policy will not be applied to your manager. ... I seem to have an odd issue regarding Group Policy and MMC snap-in ... MMC snap-ins unless explicitly enabled using "Restrict users to the ...
    (microsoft.public.win2000.group_policy)
  • Re: Another Recipient Policy question
    ... I fix that? ... Please do not send email directly to this alias. ... run that policy. ... all of what it needs to be deleting? ...
    (microsoft.public.exchange.admin)