Windows 7 Ignores "FullTrust" grants to applications
I have an application installed on a networked drive that runs under Windows XP and "pre-2008" server editions. "CasPol" was run to create the local security policy that grants FullTrust to the application and the DLLs that it uses. On both a Windows 7 machine and a Windwos 2008 server machine I used the .NET 2.0 Framework tool to create a "Local Intranet" a Code Group that grants Full Trust to the application. I used the same wizard to evaluate the permissions that will be grated to the application and it says the application has "unrestricted" access. But, the application will not start. It fails in exactly the same way it fails when the .NET 2 Framework is not installed. I copy all of the application files to the "C" drive of the Windows 7 machine and the application runs just fine (so .NET 2.0 is installed and configured and doesn't need to be repaired). Also, the application and all of the DLLs have strong names. So why do Windows 7 and Server 2008 refuse to run an application that all other versions will run, and which all machines agree has a Full Trust grant in both the "My Computer" and "Local Intranet" regions? Jeff Griffith
April 20th, 2010 11:26pm

Hi, Regarding the issue on Windows 7 and Windows 2008, I suspect that it should be related to the code by using the .Net Framework 2.0 Tool. Since we only discuss Windows 7 Security issue in this thread, I suggest you create a new thread in .Net Framework 2.0 forum. Thank you for your understanding. Regards, Novak
Free Windows Admin Tool Kit Click here and download it now
April 22nd, 2010 9:34am

No, this is specifcally caused by a bug in Windows 2008 security. As far as I can tell, all of the requirements for granting Full Trust to signed code on a network drive have been met, and yet Windows 2008 refuses to run the code. Stated another way, the Code Group needed to allow signed code to be granted Full Trust exists, and a second code group spefically granting Full Trust to the network directory was created. What more is needed to allow this code to run? Jeff Griffith
April 24th, 2010 1:09am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics