Re: Creating MSI for installing .NET security policies



The poblem with that is that doing .NET code inside an MSI via a custom
action is a little painful as of now. MSI doesn't have native support for
..NET custom actions, only script and native DLLs (or exe files). There are
many hacks to support this, but they are all hacks for now and have a
variety of shortcomings.

I agree that the .NET classes are better in theory.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Dominick Baier" <dbaier@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:4580be63196448c8bc30df997b80@xxxxxxxxxxxxxxxxxxxxx
ouch...

use the API. Thats the most robust way.

---
Dominick Baier, DevelopMentor
http://www.leastprivilege.com

Probably the most reliable method would be to create a custom action
that calls caspol.exe with the proper arguments to add your policy to
the current policy. You'll probably want to use a search of some sort
to find the appropriate .NET framework directory to use to call caspol
so that you configure for the correct framework version.

Joe K.





.



Relevant Pages

  • Re: "SystemParametersInfo()" problem
    ... Where are you invoking the custom action from? ... Phil Wilson [MVP Windows Installer] ... > We have an MSI application that invokes "SystemParametersInfo" from the ...
    (microsoft.public.win32.programmer.kernel)
  • Re: .msi packages
    ... I am trying to create a custom .msi package for Kerberos for Windows ... I was able to properly edit the .msi through orca, and it installs ...
    (comp.protocols.kerberos)
  • Re: Extending Active Directory Users and Computers
    ... to manage their custom schema extensions graphically. ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... I'm would like be able to extend Active Directory Users and Computer ... custom tab and then put my custom attributes into the tab. ...
    (microsoft.public.windows.server.active_directory)
  • Re: federated services
    ... If you want more detail on the error message from MSI, ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... remove windows components window. ...
    (microsoft.public.windows.server.active_directory)
  • Re: .NET Deployment: Minimum Customer Effort
    ... to simply deploy a custom your custom .NET security policy as ... MVP Security ... > configuration, installation of .msi file using MMC, etc. ... > agree to the permissions demanded by our code? ...
    (microsoft.public.dotnet.security)