Works like a charm. I think that using this feature as I have--for your own shares--would be a fairly standard thing. Perhaps I'll post a little utility that sets that up on a person's box, though it's easy to do by hand.
Thanks again,
Ken
----Original Message Follows---- From: "Cavnar-Johnson, John" Reply-To: "Moderated discussion of advanced .NET topics." To: [EMAIL PROTECTED] Subject: Re: [ADVANCED-DOTNET] .NET Full Trust Policy to single machine Date: Sat, 12 Jul 2003 09:19:28 -0500 MIME-Version: 1.0 Received: from mc4-f21.law16.hotmail.com ([65.54.237.156]) by mc4-s14.law16.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Sun, 13 Jul 2003 07:33:31 -0700 Received: from discuss.develop.com ([66.129.110.38]) by mc4-f21.law16.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Sun, 13 Jul 2003 07:33:30 -0700 Received: from develop-lserv (66.129.110.38) by discuss.develop.com (LSMTP for Windows NT v1.1b) with SMTP id <[EMAIL PROTECTED]>; 13 Jul 2003 10:26:33 -0400 Received: from DISCUSS.DEVELOP.COM by DISCUSS.DEVELOP.COM (LISTSERV-TCP/IP release 1.8e) with spool id 480483 for [EMAIL PROTECTED]; Sun, 13 Jul 2003 10:26:32 -0400 Received: from mercury.sarkhouston.com (65.208.216.100) by discuss.develop.com (LSMTP for Windows NT v1.1b) with SMTP id <[EMAIL PROTECTED]>; Sat, 12 Jul 2003 10:15:41 -0400 Received: by mercury.sarkhouston.com with Internet Mail Service (5.5.2650.21) id ; Sat, 12 Jul 2003 09:19:04 -0500 Received: from OrbisTertius (alpha1323.kingwoodcable.com [208.223.13.23]) by mercury.sarkhouston.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21) id M9JXYZA8; Sat, 12 Jul 2003 09:19:03 -0500 X-Message-Info: MxAodtZPLiQ6HPHOc8rBiXjgUFkT69DC Approved-By: [EMAIL PROTECTED] X-Mailer: Microsoft Outlook, Build 11.0.4920 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Thread-Index: AcNH7iZ82NdMqVHGRo6IIPjBS3c1LAAM+pWAABd+/lA= Message-ID: Sender: "Moderated discussion of advanced .NET topics." In-Reply-To: Precedence: list Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 13 Jul 2003 14:33:30.0350 (UTC) FILETIME=[BAE5C0E0:01C3494B] Looking back at your original post, it appears that you created your code group as child group of the Local Computer Zone (first) and then as a child group of the Trusted Zone. The code group needs to be a child group of the All Code group.
-----Original Message----- From: Moderated discussion of advanced .NET topics. [mailto:ADVANCED- [EMAIL PROTECTED] On Behalf Of Cavnar-Johnson, John Sent: Friday, July 11, 2003 9:05 PM To: [EMAIL PROTECTED]
Creating a code group based on a URL condition of the form:
file://CAVNAR-JOHNSON/*
works perfectly for me.
> -----Original Message----- > From: Moderated discussion of advanced .NET topics. [mailto:ADVANCED- > [EMAIL PROTECTED] On Behalf Of Kenneth Brubaker > Sent: Friday, July 11, 2003 1:33 PM > To: [EMAIL PROTECTED] > > Hi, > > In an earlier post: > > http://discuss.develop.com/archives/wa.exe?A2=ind0307a&L=advanced- > dotnet&T=0&F=&S=&P=1297 > > I inquired about how to grant full trust to a *single* machine on the > inTRAnet. I know I could boost the permissions for the Intranet Zone but > that would not follow the "Principle of Least Privilege". > > As explained in the above posting, I tried to use the URL permission but > had no luck. Has anyone tried this? What has been your expirience? If I > know someone else has suceeded at this I can look again at what I may have > done wrong. > > The original posting notes that I'm specifically trying to give access to > shares from my own machine. > > Any help would be very appreciated. > > Kenneth Brubaker
_________________________________________________________________ STOP MORE SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail
