HighTechTalks DotNet Forums  

Re: running .exe from network share

Dotnet Security microsoft.public.dotnet.security


Discuss Re: running .exe from network share in the Dotnet Security forum.



Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old   
Hernan de Lahitte
 
Posts: n/a

Default Re: running .exe from network share - 06-18-2004 , 12:14 PM






There are several issues and differences when you run an app on your local
machine and on a network share. The latter is placed on the "Intranet Zone"
and therefore has lower privileges than when you are on your machine
(Fulltrust permissions by default).
So if you want to develop and debug/test your code as if you where running
from your network share, take a look at this post:
http://weblogs.asp.net/hernandl/arch.../26/96800.aspx

At the same time, you should "prepare" your app to be able to run under a
restricted Zone and you might check out this post:
http://blogs.msdn.com/shawnfa/archiv.../20/57023.aspx


--
Hernan de Lahitte
Lagash Systems S.A.
http://weblogs.asp.net/hernandl


This posting is provided "AS IS" with no warranties, and confers no rights.

"Jesse" <jaufiero (AT) cascodev (DOT) com> wrote

Quote:
Hello,

Is there any definitive place to look for information regarding the topic
of: security considerations when running a WinForms application from a
network share (as opposed to running from the local client machine)?

We'd like to avoid various deployment issues by simply placing our .exe on
the network and having all of the client pc's access the .exe via a
shortcut
on each client desktop.

Are there any major pitfalls to this approach (specific to security... or
otherwise)?

Thank You,
Jesse





Reply With Quote
  #2  
Old   
AT
 
Posts: n/a

Default Re: running .exe from network share - 06-18-2004 , 04:26 PM






I've also got a blog entry on modifying policy to allow something like this to work:

http://blogs.msdn.com/shawnfa/archiv.../20/57023.aspx

In this situation, I would recommend signing your application's assemblies with a key, and then trusting the public key (without the version) on each
client machine. This will allow you to deploy future applications, and upgrades to the existing application without modifying policy again.

-Shawn
http://blogs.msdn.com/shawnfa

--

This posting is provided "AS IS" with no warranties, and confers no rights.
Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread from which they
originated.
--------------------
Quote:
Reply-To: "Hernan de Lahitte" <hernan (AT) lagash (DOT) com
From: "Hernan de Lahitte" <hernan (AT) lagash (DOT) com
References: <u9pfqDJVEHA.2508 (AT) TK2MSFTNGP12 (DOT) phx.gbl
Subject: Re: running .exe from network share
Date: Fri, 18 Jun 2004 13:14:22 -0300
Lines: 43
Organization: Lagash Systems S.A.
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
Message-ID: <ucmGb7UVEHA.1472 (AT) TK2MSFTNGP09 (DOT) phx.gbl
Newsgroups: microsoft.public.dotnet.security
NNTP-Posting-Host: 200.81.13.117
Path: cpmsftngxa10.phx.gbl!TK2MSFTFEED01.phx.gbl!TK2MSFT NGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
Xref: cpmsftngxa10.phx.gbl microsoft.public.dotnet.security:6545
X-Tomcat-NG: microsoft.public.dotnet.security

There are several issues and differences when you run an app on your local
machine and on a network share. The latter is placed on the "Intranet Zone"
and therefore has lower privileges than when you are on your machine
(Fulltrust permissions by default).
So if you want to develop and debug/test your code as if you where running
from your network share, take a look at this post:
http://weblogs.asp.net/hernandl/arch.../26/96800.aspx

At the same time, you should "prepare" your app to be able to run under a
restricted Zone and you might check out this post:
http://blogs.msdn.com/shawnfa/archiv.../20/57023.aspx


--
Hernan de Lahitte
Lagash Systems S.A.
http://weblogs.asp.net/hernandl


This posting is provided "AS IS" with no warranties, and confers no rights.

"Jesse" <jaufiero (AT) cascodev (DOT) com> wrote in message
news:u9pfqDJVEHA.2508 (AT) TK2MSFTNGP12 (DOT) phx.gbl...
Hello,

Is there any definitive place to look for information regarding the topic
of: security considerations when running a WinForms application from a
network share (as opposed to running from the local client machine)?

We'd like to avoid various deployment issues by simply placing our .exe on
the network and having all of the client pc's access the .exe via a
shortcut
on each client desktop.

Are there any major pitfalls to this approach (specific to security... or
otherwise)?

Thank You,
Jesse








Reply With Quote
Reply




Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.