Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / .NET Framework / Security / January 2008

Tip: Looking for answers? Try searching our database.

network share security - mscorlib

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
louis - 27 Dec 2007 20:55 GMT
I have used the caspol tool and tried to set security for the network share
but still getting errors containing:
"System.Security.Permissions.UIPermission mscorlib" and
"System.InvalidOperationException".
The program is a small exe created with VB 2005 - runs fine in the IDE, runs
fine on another Win XP pro machine (with the exe on a network share on Win
2003).  The PC it gives the errors on is my development PC - again, only when
trying to run from the network share.  Since the "mscorlib.dll" is on my
local PC, there must be some setting that caspol does not fix.   I have
researched this to death and tried all sorts of settings to no avail.  This
is really way too difficult for client/server applications.
Barry Flynn - 15 Jan 2008 00:53 GMT
Louis

I have had a similar experience to yours - although possibly not exactly the
same.
Some time ago, I issued a CASPOL command on a machine, and was then able to
(a) write VB 2005 code where the source code was on the network, and (b) run
the resulting .exe's from the network.

Then I lost both abilities.
I hadn't used that machine to do DotNet stuff for a couple of months - and
when I did try I found I had security problems in both areas.

A few days later, in Windows Explorer, I right-clicked a zip file on the
network, and got a message about "this page has an unspecified potential
security risk".

I looked that up on the web, and found a suggestion about changing an IE
setting.
In Internet Explorer,
- go to Internet Options / Security
- click on Local Intranet
- Click the Sites button
A window should pop up saying "automatically detect intranet?"
Turn OFF that "main" option, but leave the other three options checked.

A "help link" in that area of Internet Explorer appeared to confirm that
changing that setting was a good idea.

It seems to have fixed my problems.

Barry

Signature

Barry Flynn
Complete Solutions DG

>I have used the caspol tool and tried to set security for the network share
> but still getting errors containing:
[quoted text clipped - 10 lines]
> This
> is really way too difficult for client/server applications.
louis - 15 Jan 2008 14:54 GMT
Barry -
Thanks for the suggestion.  I check my system and the item you suggested was
already un-checked.  I believe I fixed the problem several days ago by
running the caspol tool on the fileserver itself.   I had been running it on
the workstation.  We are still testing to see if this solved the problem.

> Louis
>
[quoted text clipped - 42 lines]
> > This
> > is really way too difficult for client/server applications.
Barry Flynn - 15 Jan 2008 20:09 GMT
Louis

Thanks for the info.

My opinion has been that CASPOL takes effect on the machine it is executed
on.
So, I have believed that it needs to be run on the workstation, rather than
the Server.

After you have finished your testing, can you please post your conclusions?

Thanks

Barry

Signature

Barry Flynn
Complete Solutions DG

> Barry -
> Thanks for the suggestion.  I check my system and the item you suggested
[quoted text clipped - 58 lines]
>> > This
>> > is really way too difficult for client/server applications.

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.