HOW TO: Build and Deploy a .NET Security Policy Deployment Package (815173)


The information in this article applies to:

  • Microsoft .NET Framework 1.0
  • Microsoft .NET Framework 1.1

IN THIS TASK

SUMMARY

This step-by-step article discusses how to build and deploy a .NET Framework security policy deployment package. Security policies define the permissions assigned to the .NET Framework applications. Often, when you deploy .NET Framework applications, you have to configure the .NET Framework runtime security policies on systems that will host the application. You can automate this process by creating a .NET Framework security deployment package by using the Microsoft .NET Framework Configuration tool. You can then deploy that package to an enterprise by using group policies.

back to the top

Create the Deployment Package

To create a deployment package for the .NET Framework runtime security policy, follow these steps:
  1. Click Start, point to Settings, and then click Control Panel.
  2. Double-click to open the Administrative Tools folder, and then double-click to start the Microsoft .NET Framework Configuration tool.
  3. Configure the Runtime Security Policy for the enterprise, machine, or user policy level the way you want.
  4. Right-click the Runtime Security Policy node, and then click Create Deployment Package. The Deployment Package Wizard starts.
  5. On the Choose The Policy Level To Deploy page, choose the policy level you are deploying by selecting either Enterprise, or Machine, or User. Generally, you use Enterprise security policy. This does not prevent Machine or User policies from being defined on a system, but those policies can never grant more trust than the Enterprise policy grants.
  6. Click the Browse button, select a location to store the .msi package that the wizard generates, and then click Save.
  7. Click Next, and then click Finish to complete the Wizard.
back to the top

Deploy the Package

The most efficient way to deploy .NET Framework security deployment packages to an enterprise is by using group policies, such as other Microsoft Software Installer (.msi) packages. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

314934 HOW TO: Use Group Policy to Remotely Install Software in Windows 2000


back to the top

REFERENCES

For more information, visit the following MSDN Web sites:

Code Access Security Policy Tool (Caspol.exe)
http://msdn.microsoft.com/library/en-us/cptools/html/cpgrfcodeaccesssecuritypolicyutilitycaspolexe.asp

Deploying Applications
http://msdn.microsoft.com/library/en-us/vsintro7/html/vbconDeployingSolution.asp

For additional information, click the following article numbers to view the articles in the Microsoft Knowledge Base:

315736 HOW TO: Secure an ASP.NET Application by Using Windows Security

315588 HOW TO: Secure an ASP.NET Application Using Client-Side Certificates

back to the top
Modification Type:MinorLast Reviewed:4/30/2003
Keywords:kbpolicy kbDeployment kbBuilder kbSecurity kbHOWTOmaster KB815173 kbAudITPRO
©2002 Microsoft Corporation. All rights reserved.