Security Error over LAN

  • Thread starter Thread starter Mike Griffin
  • Start date Start date
M

Mike Griffin

I wrote an internal tool for our program using .NET 1.1 C# that
accesses MS Access DBs on the LAN and an INI file in the same directory
as the app.

Before we had a change, I was able to get the app to work by utilizing
our IT's decision to promote the LocalIntranet Zone to FullTrust in the
security policy by default.

This week, our IT decided to more all network shares to a DFS system
for easier management. Now, my app breaks due to a security error.

If I access the app via the UNC direct path name, then I am able to
load the app fine. If I access the same file via the DFS share, I get a
security exception.

I found that if I explicitly trust each assembly that the app uses, it
will work correctly. I have also found that solution not to be
consistent, meaning you could trust the assembly and then it suddenly
no longer has permission to run.

My question is how to properly trust my app and automate the procedure
so that the user can run an msi or such to allow the app to run?

I have looked into the colpol.exe and sn.exe file, but I haven't been
able to successfully get them to work.

Thanks
 
Hi

You could write a bat file that calls the caspol.exe command line tool to
create a new group granting the correct trust for your assembly.

To apply this to all PCs, you could apply the script via group policy. This
would mean that the policy is applied to machines either when the machine
reboots or when the user logs on. This would save you having to manually
apply the policy to every machine.

Hope this helps

Chris Seary
 
Back
Top