Re: Code Access Security - User Policy Level

From: Nicole Calinoiu (calinoiu)
Date: 03/14/05

  • Next message: Ignus Fast: "Re: Error instantiating RSACryptoServiceProvider" 
    Date: Mon, 14 Mar 2005 09:25:18 -0500

    Either use the various policy modification tools (e.g.: caspol, .NET
    Framework configuration MSC, or coded policy level modification) while
    logged in as that user, or modify/replace the user's security.config file
    (located in <user settings>\Application Data\Microsoft\CLR Security
    Config\<framework version> directory) while logged in as any account with
    sufficient permissions on the file. If you need an automated mechanism for
    deployment of the policy to multiple machines, some options are described at
    http://msdn.microsoft.com/library/en-us/dnnetsec/html/entsecpoladmin.asp.
    For a user-level policy modification, you might also have some other
    options. If you would like more information, please provide a bit more
    detail concerning what you're attempting to accomplish (e.g.: modification
    vs complete replacement of policy level, one target machine or many, one
    target user account or many, etc.).

    HTH,
    Nicole

    "Kjetil Kristoffer Solberg" <kks@pride.no> wrote in message
    news:eQlvB9HKFHA.3992@TK2MSFTNGP15.phx.gbl...
    > How can I set Code Access Security, User Policy Level, policy for a
    > certain user
    > on a machine?
    >
    > regards
    > Kjetil Kristoffer Solberg
    >

  • Next message: Ignus Fast: "Re: Error instantiating RSACryptoServiceProvider"

    Relevant Pages

    • Security Policy, Code Groups and Security Tools.
      ... membership conditions specified within each code group. ... When an assembly belongs to multiple code groups, permissions assigned by ... another code group when they are both part of the same Policy level. ...
      (microsoft.public.dotnet.languages.csharp)
    • Security Policy, Code Groups and Security Tools.
      ... membership conditions specified within each code group. ... When an assembly belongs to multiple code groups, permissions assigned by ... another code group when they are both part of the same Policy level. ...
      (microsoft.public.dotnet.framework)
    • Re: Enabling App Domain Policy to run an executable
      ... There's no way to use a policy level to elevate permissions ... AppDomain policy is best use to sandbox assemblies into a permission set lower than what the machine ... >System.Security.Policy.PolicyStatement internetPolicyStatement = new ...
      (microsoft.public.dotnet.security)
    • Re: Enterprise Policy?
      ... There's essentially no difference at all unless you plan your policy ... deployment in such a way as to take advantage of both policy levels. ... restrict this via the machine policy level. ... > As I understand modifying the Enterprise policy will NOT affect all ...
      (microsoft.public.dotnet.framework.aspnet.security)
    Loading