Re: Creating MSI for installing .NET security policies

Hi,

no thats the default behavior. You should write an MSI installer with custom install/uninstall actions to programmatically create the stuff for you.

System.Security.Policy has all the classes you need.

I can dig out some code if you need it.

---
Dominick Baier, DevelopMentor
http://www.leastprivilege.com

Hi folks,

I'm deploying my app to a network share and I need the security
permissions installed on the client. AFAICT I cannot use ClickOnce
because ClickOnce deployment doesnt allow user to specify install
location i.e. Network share. So I have gone down the route of creating
a Strong Name key and signing my assemblies with that key, creating a
new Code Group in the Microsoft .NET configuration Tool which assigns
full trust to my Strong Name key, and then finally creating a
deployment package MSI to allow users to install the Security Policy
easily.

Now, this all works ok, but I find it a bit sas that the security
policies are over written in the Code Groups with the new settings
i.e. they are not merged with the existing groups. Luckily my clients
have a clean slate of policies anyway so I wasnt overwriting anyone
elses, but what if some other vendor had written an app for the client
and had used the same approach, I would scrub there policies, or vice
versa someone could quite easily scrub mine. Is this correct?

Of course policies could be manually added in, but this might be a
pain if there were a lot of users.

Or is there another way I have missed?

Thanks again,
David


.

Relevant Pages

  • Re: Group Policy question
    ... this OU (by default the computer account object will be located in the ... Install Terminal Services in Application Mode ... policies that affect the computer side configuration are applied (based on ...
    (microsoft.public.win2000.active_directory)
  • Re: Can not install applications using any admin account
    ... Software Restriction Policies? ... Maybe you use an outdated version of the adm template on the ... restrictions is *not* applied to Administrators. ... I keep getting denied access to install them. ...
    (microsoft.public.windows.terminal_services)
  • Re: GPOs only applying once a day
    ... That applies to changed policies, which will get applied without rebooting the computer. ... ;) Be careful with those settings, as it will probably have a impact on the startup behavior. ... install the software and reboot the system. ... and apply the settings to the registry entries. ...
    (microsoft.public.windows.group_policy)
  • Re: Which Group Policy settings are enabled?
    ... forest or have trust relationships set up. ... GPMC on Windows Server 2003 directly. ... but you need one WindowsXP to install it on. ... >> sections with the Show Configured Policies Only option. ...
    (microsoft.public.win2000.group_policy)
  • Re: Group Policies in TS on W2K
    ... install WIN2000 Server as a Member Server on a server-class machine that ... create an OU called TermServer and move that machine account object into ... Install Terminal Services in Application Mode ... policies that affect the computer side configuration are applied (based on ...
    (microsoft.public.win2000.termserv.apps)