Article ID: 815173
Article Last Modified on 5/13/2007
APPLIES TO
- Microsoft .NET Framework 1.0
- Microsoft .NET Framework 1.1
SUMMARY
This step-by-step article discusses how to build and deploy a .NET Framework security policy deployment package. Security policies define the permissions assigned to the .NET Framework applications. Often, when you deploy .NET Framework applications, you have to configure the .NET Framework runtime security policies on systems that will host the application. You can automate this process by creating a .NET Framework security deployment package by using the Microsoft .NET Framework Configuration tool. You can then deploy that package to an enterprise by using group policies.
back to the top
Create the Deployment Package
To create a deployment package for the .NET Framework runtime security policy, follow these steps:
- Click Start, point to Settings, and then click Control Panel.
- Double-click to open the Administrative Tools folder, and then double-click to start the Microsoft .NET Framework Configuration tool.
- Configure the Runtime Security Policy for the enterprise, machine, or user policy level the way you want.
- Right-click the Runtime Security Policy node, and then click Create Deployment Package. The Deployment Package Wizard starts.
- On the Choose The Policy Level To Deploy page, choose the policy level you are deploying by selecting either Enterprise, or Machine, or User. Generally, you use Enterprise security policy. This does not prevent Machine or User policies from being defined on a system, but those policies can never grant more trust than the Enterprise policy grants.
- Click the Browse button, select a location to store the .msi package that the wizard generates, and then click Save.
- Click Next, and then click Finish to complete the Wizard.
Deploy the Package
The most efficient way to deploy .NET Framework security deployment packages to an enterprise is by using group policies, such as other Microsoft Software Installer (.msi) packages. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
314934 HOW TO: Use Group Policy to Remotely Install Software in Windows 2000
REFERENCES
For more information, visit the following MSDN Web sites:
Code Access Security Policy Tool (Caspol.exe)
http://msdn2.microsoft.com/en-us/library/cb6t8dtz(vs.71).aspx
Deploying Applications
http://msdn2.microsoft.com/en-us/library/ybshs20f(vs.71).aspx
For additional information, click the following article numbers to view the articles in the Microsoft Knowledge Base:
315736 HOW TO: Secure an ASP.NET Application by Using Windows Security
315588 HOW TO: Secure an ASP.NET Application Using Client-Side Certificates
Keywords: kbpolicy kbdeployment kbbuilder kbsecurity kbhowtomaster KB815173
