Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...
.NET Forum / .NET Framework / New Users / January 2006

Tip: Looking for answers? Try searching our database.

InstallUtil Security Error

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Dani - 05 Jan 2006 14:37 GMT
When I run the following command as an Administrator on Windows 2003
version 5.2.3790...

     C:\Windows\Microsoft.NET\Framework\v1.1.4322>installutil

... I get following error dialog appears:

     InstallUtil.exe - Common Language Runtime Debugging Services
     Application has generated an exception that could not be handled.
     Process id=0x...(....), Thread id=0x...(....)

This is followed with the following text in the Command Prompt:

     Unhandled Exception: System.Security.SecurityException: Security
error. at
     System.Configuration.InstallUtil.Main(String[] args)

     The granted set of failing assembly was:
     <PermissionSet class="System.Security.PermissionSet" version="1">
           <IPermission
class="System.Security.Permissions.EnvironmentPermission, mscorlib,
Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b77a5c561934e089"
version="1" Unrestricted="true"/>

snip

Must I reinstall the framework to fix this?  Here is a thread regarding
a very similar with which the problem was not solved by reinstalling
the framework:

http://groups.google.com/group/microsoft.public.sqlserver.reportingsvcs/browse_t
hread/thread/9fd00187b9212f37/534954f4f4a5f672?lnk=st&q=installutil+security+err
or&rnum=4#534954f4f4a5f672
Reply to this Message
Nicole Calinoiu - 05 Jan 2006 15:33 GMT
It sounds like the code access security policy on the server has probably
been modified so that locally run code no longer receives an unrestricted
permission grant.  If this is the case, changing the permission grant for
installutil.exe (and/or some supporting assemblies) should fix the problem
without requiring a reinstall.  If would like help in determining what
additional permission grants might be required, could you please post the
full exception details (including the portions that you "snipped")?

> When I run the following command as an Administrator on Windows 2003
> version 5.2.3790...
[quoted text clipped - 27 lines]
>
> http://groups.google.com/group/microsoft.public.sqlserver.reportingsvcs/browse_t
hread/thread/9fd00187b9212f37/534954f4f4a5f672?lnk=st&q=installutil+security+err
or&rnum=4#534954f4f4a5f672
Reply to this Message
Dani - 06 Jan 2006 05:42 GMT
Here are the full exception details:

Unhandled Exception: System.Security.SecurityException: Security error.
  at System.Configuration.InstallUtil.Main(String[] args)

The granted set of the failing assembly was:
<PermissionSet class="System.Security.PermissionSet"
              version="1">
  <IPermission
class="System.Security.Permissions.EnvironmentPermission, mscorl
ib, Version=1.0.5000.0, Culture=neutral,
PublicKeyToken=b77a5c561934e089"
               version="1"
               Unrestricted="true"/>
  <IPermission
class="System.Security.Permissions.FileDialogPermission, mscorli
b, Version=1.0.5000.0, Culture=neutral,
PublicKeyToken=b77a5c561934e089"
               version="1"
               Unrestricted="true"/>
  <IPermission class="System.Security.Permissions.FileIOPermission,
mscorlib, V
ersion=1.0.5000.0, Culture=neutral, PublicKeyToken=b77a5c561934e089"
               version="1"
               Unrestricted="true"/>
  <IPermission
class="System.Security.Permissions.IsolatedStorageFilePermission
, mscorlib, Version=1.0.5000.0, Culture=neutral,
PublicKeyToken=b77a5c561934e089
"
               version="1"
               Unrestricted="true"/>
  <IPermission
class="System.Security.Permissions.ReflectionPermission, mscorli
b, Version=1.0.5000.0, Culture=neutral,
PublicKeyToken=b77a5c561934e089"
               version="1"
               Unrestricted="true"/>
  <IPermission class="System.Security.Permissions.RegistryPermission,
mscorlib,
Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b77a5c561934e089"
               version="1"
               Unrestricted="true"/>
  <IPermission class="System.Security.Permissions.SecurityPermission,
mscorlib,
Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b77a5c561934e089"
               version="1"
               Flags="Assertion, UnmanagedCode, Execution,
ControlThread, Contr
olEvidence, ControlPolicy, SerializationFormatter, ControlDomainPolicy,
ControlP
rincipal, ControlAppDomain, RemotingConfiguration, Infrastructure,
BindingRedire
cts"/>
  <IPermission class="System.Security.Permissions.UIPermission,
mscorlib, Versi
on=1.0.5000.0, Culture=neutral, PublicKeyToken=b77a5c561934e089"
               version="1"
               Unrestricted="true"/>
  <IPermission class="System.Net.DnsPermission, System,
Version=1.0.5000.0, Cul
ture=neutral, PublicKeyToken=b77a5c561934e089"
               version="1"
               Unrestricted="true"/>
  <IPermission class="System.Drawing.Printing.PrintingPermission,
System.Drawin
g, Version=1.0.5000.0, Culture=neutral,
PublicKeyToken=b03f5f7f11d50a3a"
               version="1"
               Unrestricted="true"/>
  <IPermission class="System.Diagnostics.EventLogPermission, System,
Version=1.
0.5000.0, Culture=neutral, PublicKeyToken=b77a5c561934e089"
               version="1"
               Unrestricted="true"/>
  <IPermission class="System.Net.SocketPermission, System,
Version=1.0.5000.0,
Culture=neutral, PublicKeyToken=b77a5c561934e089"
               version="1"
               Unrestricted="true"/>
  <IPermission class="System.Net.WebPermission, System,
Version=1.0.5000.0, Cul
ture=neutral, PublicKeyToken=b77a5c561934e089"
               version="1"
               Unrestricted="true"/>
  <IPermission class="System.Diagnostics.PerformanceCounterPermission,
System,
Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b77a5c561934e089"
               version="1"
               Unrestricted="true"/>
  <IPermission
class="System.DirectoryServices.DirectoryServicesPermission, Sys
tem.DirectoryServices, Version=1.0.5000.0, Culture=neutral,
PublicKeyToken=b03f5
f7f11d50a3a"
               version="1"
               Unrestricted="true"/>
  <IPermission class="System.Messaging.MessageQueuePermission,
System.Messaging
, Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
               version="1"
               Unrestricted="true"/>
  <IPermission
class="System.ServiceProcess.ServiceControllerPermission, System
.ServiceProcess, Version=1.0.5000.0, Culture=neutral,
PublicKeyToken=b03f5f7f11d
50a3a"
               version="1"
               Unrestricted="true"/>
  <IPermission class="System.Data.OleDb.OleDbPermission, System.Data,
Version=1
.0.5000.0, Culture=neutral, PublicKeyToken=b77a5c561934e089"
               version="1"
               Unrestricted="true"/>
  <IPermission class="System.Data.SqlClient.SqlClientPermission,
System.Data, V
ersion=1.0.5000.0, Culture=neutral, PublicKeyToken=b77a5c561934e089"
               version="1"
               Unrestricted="true"/>
  <IPermission
class="System.Security.Permissions.StrongNameIdentityPermission,
mscorlib, Version=1.0.5000.0, Culture=neutral,
PublicKeyToken=b77a5c561934e089"

               version="1"

PublicKeyBlob="0024000004800000940000000602000000240000525341310
00400000100010007D1FA57C4AED9F0A32E84AA0FAEFD0DE9E8FD6AEC8F87FB03766C834C99921EB
23BE79AD9D5DCC1DD9AD236132102900B723CF980957FC4E177108FC607774F29E8320E92EA05ECE
4E821C0A5EFE8F1645C4C0C93C1AB99285D622CAA652C1DFAD63D745D6F2DE5F17E5EAF0FC4963D2
61C8A12436518206DC093344D5AD293"
               Name="InstallUtil"
               AssemblyVersion="1.0.5000.0"/>
  <IPermission
class="System.Security.Permissions.UrlIdentityPermission, mscorl
ib, Version=1.0.5000.0, Culture=neutral,
PublicKeyToken=b77a5c561934e089"
               version="1"

Url="file://C:/WINDOWS/Microsoft.NET/Framework/v1.1.4322/Install
Util.exe"/>
  <IPermission
class="System.Security.Permissions.ZoneIdentityPermission, mscor
lib, Version=1.0.5000.0, Culture=neutral,
PublicKeyToken=b77a5c561934e089"
               version="1"
               Zone="MyComputer"/>
</PermissionSet>
Reply to this Message
Dani - 06 Jan 2006 07:03 GMT
Thanks, Nicole.  After reading your response, I found that the NET
Framework 1.1 Configuration application was giving me the following
error when being launched:

   Snap-in failed to initialize.
       Name:.Net Framework 1.1 Configuration
       CLSID:{1270E004-F895-42BE-8070-DF90D60CBB75}

This error is further discussed here:

http://groups.google.com/group/microsoft.public.dotnet.framework/browse_thread/t
hread/197494c5719ae8ab/385fce82f72466df?lnk=st&q=%22snap-in+failed+to+initialize
%22+framework+configuration&rnum=12#385fce82f72466df

To solve this problem, as discussed in that thread, I manually edited
the following file...

C:\Windows\microsoft.net\Framework\v1.1.4322\CONFIG\Enterprisesec.config

...where I changed the Enterprise Code Group "All_Code" from
"Everything" to "FullTrust".  Afterwards, I was able to launch the "Net
Framework 1.1 Configuration" and run the InstallUtil.exe.  All of this
fixed my original problem of setup crashing when trying to install a
windows service.
Reply to this Message
Nicole Calinoiu - 06 Jan 2006 17:27 GMT
<snip>
> ...where I changed the Enterprise Code Group "All_Code" from
> "Everything" to "FullTrust".

While this might work, it presumably goes against the intent of whoever
altered the policy in the first place.  There are other ways to grant
additional permissions to a subset of assemblies without potentially
compromising a protective mechanism on your server, and you might want to
consider working with the original policy modifier to select an appropriate
approach...
Reply to this Message
Dani - 09 Jan 2006 08:08 GMT
As far as I know, the policy was only once modified by another
developer for the purpose of attempting to install this assembly.  This
is the first .net assembly that we created for this server.  The
developer, who created the assembly, was having some problems with the
installation, but I'm not sure what it was.  Thus, I am not sure what
caused installutil to not work.

On a new installation of Windows server 2003, the Enterprise Code Group
"All_Code" is set by default to "FullTrust".  This leads me to believe
that maybe the developer changed the permission set to "Everything",
hoping to solve another problem.  Maybe, I could reset the Enterprise,
Machine and User policies?  As far as I know, this is the only
non-Microsoft .net assembly on this server.
Reply to this Message
Nicole Calinoiu - 09 Jan 2006 12:49 GMT
Might it be possible that your network administrators have set up automatic
propagation of CAS policy over your network?  If so, you might want to check
with them too.  If it turns out they haven't, resetting the entire CAS
policy would be the simplest approach if you suspect that unplanned and/or
erroneous policy modifications have been applied.

> As far as I know, the policy was only once modified by another
> developer for the purpose of attempting to install this assembly.  This
[quoted text clipped - 9 lines]
> Machine and User policies?  As far as I know, this is the only
> non-Microsoft .net assembly on this server.
Reply to this Message
Dani Küttel - 09 Jan 2006 15:24 GMT
I'll have a check with them.  Thank you so much for your assistance.  :)
Reply to this Message

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage
Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.