Re: No .Net 2.

0 Configuration Tool

Re: No .Net 2.0 Configuration Tool

Source: http://www.derkeiler.com/Newsgroups/microsoft.public.dotnet.security/2005−12/msg00149.html

• From: "Claus Konrad" <some>

• Date: Thu, 22 Dec 2005 19:13:53 +0100

Hi

I wonder if you have an Visual Studio Command Prompt? This guy has the
nesseceary settings to call Caspol.exe.Alternatively locate vcvars32.bat and
run that; it should set the appropriate settings.

Now − Caspol is a beast of it's own without the UI.

the syntax is like this:

Usage: caspol <option> <args> ...

caspol −m[achine]
Modifier that makes additional commands act on the machine level

caspol −u[ser]
Modifier that makes additional commands act on the user level

caspol −en[terprise]
Modifier that makes additional commands act on the enterprise level

caspol −cu
caspol −customuser <path>
Modifier that makes additional commands act on the custom user level

caspol −a[ll]
Set all policy levels as the active levels

caspol −ca
caspol −customall <path>
Modifier that makes additional commands act on all levels as a custom
user

caspol −l[ist]
List code groups & permission sets

caspol −lg
caspol −listgroups
List code groups

Re: No .Net 2.0 Configuration Tool 1

 Re: No .Net 2.0 Configuration Tool

caspol −lp
caspol −listpset
List permission sets

caspol −lf
caspol −listfulltrust
List full trust assemblies

caspol −ld
caspol −listdescription
List code group names and descriptions

caspol −ap
caspol −addpset { <named_xml_file> | <xml_file> <name> }
Add named permission set to policy level

caspol −cp
caspol −chgpset <xml_file> <pset_name>
Change named permission set in active level

caspol −rp
caspol −rempset <pset_name>
Remove a named permission set from the policy level

caspol −af
caspol −addfulltrust <assembly_name>
Add full trust assembly to policy level

caspol −rf
caspol −remfulltrust <assembly_name>
Remove a full trust assembly from the policy level

caspol −rg
caspol −remgroup <label|name>
Remove code group at <label|name>

caspol −cg
caspol −chggroup <label|name> {<mship>|<pset_name>|<flag>}+
Change code group at <label|name> to given membership,
permission set, or flags

caspol −ag
caspol −addgroup <parent_label|name> <mship> <pset_name> <flag>
Add code group to <parent_label|name> with given membership,
permission set, and flags

caspol −rsg
caspol −resolvegroup <assembly_name>
List code groups this file belongs to

caspol −rsp

Re: No .Net 2.0 Configuration Tool 2

 Re: No .Net 2.0 Configuration Tool

caspol −resolveperm <assembly_name>

List permissions granted to this file

caspol −s[ecurity] { on | off }

Turn security on or off

caspol −e[xecution] { on | off }

Enable/Disable checking for "right−to−run" on code execution start−up

caspol −pp
caspol −polchgprompt { on | off }
Enable/Disable policy change prompt

caspol −q[uiet]
Disable policy change prompt for this command

caspol −r[ecover]
Recover the most recently saved version of a level

"arti" <mysteryman@xxxxxxxxxxxxxxxx> wrote in message

news:e5XPaEwBGHA.3572@xxxxxxxxxxxxxxxxxxxxxxx
> Exactly. It is only installed with the SDK. So assuming that I want to
> use
> the "command−line tool" Caspol (are we still in the 80s?) I don't even see
> how to do that. Here is why:
>
> It is located here:
> "C:\WINNT\Microsoft.NET\Framework\v2.0.50727\Caspol.exe". When you
> install
> the plain redist package it does not add that to the Path environment
> variable. So I have two options:
>
> 1. Include the full path in a batch file that I have to run everywhere
> (of
> course some PCs have Windows installed in WINNT and some use WINDOWS)
> which
> is a kludge
> 2. Do it manually from the command line. Except that you can't do this.
> Why? Open a command window and type "CD \WINNT\Microsoft.NET" and you get
> "Invalid directory."
>
>
> Can anyone offer any suggestions as to how I can make this something other
> than a big pain?
>
> Thanks!
>
>

Re: No .Net 2.0 Configuration Tool 3

 Re: No .Net 2.0 Configuration Tool
>
>
> "Dominick Baier [DevelopMentor]" <dbaier@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> wrote in message news:4580be63174f288c7d49c588806f7@xxxxxxxxxxxxxxxxxxxxx
>> Hello Claus,
>>
>> the GUI only gets installed with the SDK − the plain redist package does
>> not contain it anymore..
>>
>> −−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−
>> Dominick Baier − DevelopMentor
>> http://www.leastprivilege.com
>>
>> > You could use Caspol.exe which is a commandline tool. But − this is
>> > really a
>> > longhaired approach.
>> > At my pc (XP Prof.), the tool which is an mmc−snapin is found here:
>> > "C:\Program Files\Microsoft Visual Studio 8\SDK\v2.0\Bin\mscorcfg.msc"
>> >
>> > /Claus
>> >
>> > "arti" <mysteryman@xxxxxxxxxxxxxxxx> wrote in message
>> > news:%23RjB$9jBGHA.4076@xxxxxxxxxxxxxxxxxxxxxxx
>> >
>> >> I have installed .Net 2.0 on a Win2K PC. I keep getting security
>> >> exceptions. I realize that I need to adjust the security policy.
>> >> But
>> >> every
>> >> place I look says to use the "Microsoft .Net Framework Configuration
>> >> Tool"
>> >> which is located in the Administrative Tools. But in fact there is
>> >> no
>> >> "Microsoft .Net Framework Configuration tool" or anything like that
>> >> on
>> >> this
>> >> PC. I am signed on as Administrator.
>> >> How can I adjust the security so that my application can run on this
>> >> PC?
>> >>
>> >> Thanks.
>> >>
>>
>>
>
>

Re: No .Net 2.0 Configuration Tool 4

 Re: No .Net 2.0 Configuration Tool
• References:
♦ Re: No .Net 2.0 Configuration Tool
◊ From: Claus Konrad
♦ Re: No .Net 2.0 Configuration Tool
◊ From: Dominick Baier [DevelopMentor]
♦ Re: No .Net 2.0 Configuration Tool
◊ From: arti

• Prev by Date: Securely storing cc info

• Next by Date: Re: Securely storing cc info
• Previous by thread: Re: No .Net 2.0 Configuration Tool
• Next by thread: Re: No .Net 2.0 Configuration Tool
• Index(es):
♦ Date
♦ Thread

Re: No .Net 2.0 Configuration Tool 5