Microsoft KB Archive/816641

= INFO: Deploy an Enterprise Security Policy Before You Install the .NET Framework =

Article ID: 816641

Article Last Modified on 1/11/2007

-

APPLIES TO


 * Microsoft .NET Framework 1.1

-





SUMMARY
This article discusses information about deploying a Microsoft .NET Framework enterprise security policy before you install the .NET Framework. This article also describes issues that you may experience when you install the .NET Framework with a restrictive enterprise security policy.

The .NET Framework Configuration tool permits you to create a Microsoft Windows Installer file that can be used to deploy an enterprise security policy installation package. The Windows Installer file runs without the .NET Framework.



Requirements

 * You must have security administrator permissions to deploy the enterprise security policy.

Note Security administrator permissions are not required if the computer has a Microsoft Windows 95 operating system, a Microsoft Windows 98 operating system, or a Microsoft Windows XP operating system. Security administrator permissions are also not required if the computer has a disk with a FAT32 file system or with a FAT16 file system, or if the permissions are granted to the user by the security administrator.
 * Your interaction is not required during the deployment of the enterprise security policy installation package.

Install the Enterprise Security Policy
When you start the enterprise security policy installation package that is generated by the .NET Framework Configuration tool, the enterprise security policy configuration file (Enterprisesec.config) is deployed to the following directory:

%WindowsDirirectory%\Microsoft.Net\Framework\ \config

Note The  represents a version of the runtime that is used to create a policy file in the form of the following string: “v” + + + The following is an example:

c:\windows\microsoft.net\framework\v1.1.4322\config

The Windows Installer file that you create by using the .NET Framework Configuration tool applies only to a specific version of the .NET Framework. If you want to deploy an enterprise security policy for different versions of the .NET Framework, you must deploy a separate Windows Installer file for each version of the .NET Framework. Each version of the .NET Framework has its own .NET Framework Configuration tool.

