[snip]

[snip]

It gets complicated.  First, a reference:
http://msdn.microsoft.com/en-us/library/cb6t8dtz(VS.80).aspx

You might also try a:
<dotnetframeworkpath\caspol.exe -list | more
to see what _they_ mean by the groups (some of which share names with
more familiar IE groups).

So, my .Net 2.0 program, to get to run from a network share, required
several things.  First, the person setting up for remote access was a
local admin on the box.  Power User might work, I'm not sure.  The user
has to be able to modify local security policies, though, because that's
what caspol does.  Second, they required caspol.exe, which is usually in
c:\windows\microsoft.net\framework\v<version>\CasPol.exe.  Note that if
side-by-side versions of .Net are installed then you must use the one
that corresponds with the version of .Net framework your program uses.

Then I wrote this command file:
@echo off
echo y|c:\windows\microsoft.net\frameowrk\v2.0.50727\caspol.exe -m -ag
1.2 -url file://server/sharename/path/to/my/program/* FullTrust
exit

That echo y| thing is all one easy-to-read line.  -ag 1.2 is AddGroup for
the Zone - Intranet: LocalIntranet, which is how intranet shares are
classified.  The 1.2 is easily found in the first few lines of caspol -
list | more.

Google is your friend.  Also, I should have named my entry because I seem
to be getting multiple entries, one per program update.  Also, every user
must rerun the caspol command file each time your program version is
updated because that's part of the security (note that the * in my
example allows _all_ code from that location to be run, not necessarily
very secure).

I found my example using google, hopefully this is enough to get you
going.