Code Access Secutiy example.

This post describe shortly how to set the full trust all assemblies in the specified share.

>caspol -m -ag LocalIntranet_Zone -url \\machinename1\temp\* FullTrust -n "IntranetApplications" -d "FullTrust for all applications in the specified share" -exclusive on

The example above extends the machine policy level (-m) with the new code group (-ag) named ‘IntranetApplications’. The new code group is inserted under node “LocalIntranet_Zone”, which already defines the policy for all applications in intranet.

The new code group’s policy will be usually combined with the existing group policy in the intranet zone. Because of this the code group “IntranetApplications” is created with the exclusive flag (-exclusive on). It means,  all assemblies matching the target url (\\machinename\temp\*) will used policy defined by this group only.

If this flag wouldn’t be used, the resulting policy for all assemblies in the specified share would be less then FullTrust, because the policy of the new group would be intersected with the policy of its parent group (in this case LocalIntranet_Zone).

More about caspol tool.

More advanced about policies and security groups can be found here (GER only).