Hi all,
I've got an application written in C# which reads from the registry.
Being started from a network file share, the app crashes. I found out
that you can "Full Trust" the Intranet Zone, which makes the application
running fine; however, since there are a lot of clients working with it,
it would be a better solution (in other words: the customer demands) to
avoid setting the security permissions on each computer.
Therefore, is there any way I can "sign" my application to run in Local
Computer mode instead of Intranet Zone, or to have the security checks
bypassed?
I tried using the sn.exe tool and included the strong name into the
assembly, but still the same problem occurs.
Thank you for any help on that!
Regards,
Roland
Eric Cadwell - 15 Oct 2003 19:45 GMT
Roland,
There are a few ways around that:
Set up a small executable that will load the application locally and
distribute it to each client.
Or
Define a custom permission set, then give the LocalIntranet_Zone group those
rights.
I would create a permission set with the same access as LocalIntranet, then
add Registry access for only the specific Keys they need access to. Then set
the LocalIntranet_Zone code group to use the newly created permission set.
The admin tool helps you evaluate the permissions granted to the assembly.
The policies you set up can also be deployed via the administration tool.
This builds an .MSI file that installs the .config files to the clients
preventing the need to manually configure each machine.
HTH,
Eric Cadwell
http://www.origincontrols.com