HOW TO: Build and Deploy a .NET Security Policy Deployment Package

Article translations Article translations
Article ID: 815173 - View products that this article applies to.
Expand all | Collapse all

On This Page


This step-by-step article discusses how to build and deploy a .NET Framework security policy deployment package. Security policies define the permissions assigned to the .NET Framework applications. Often, when you deploy .NET Framework applications, you have to configure the .NET Framework runtime security policies on systems that will host the application. You can automate this process by creating a .NET Framework security deployment package by using the Microsoft .NET Framework Configuration tool. You can then deploy that package to an enterprise by using group policies.

back to the top

Create the Deployment Package

To create a deployment package for the .NET Framework runtime security policy, follow these steps:
  1. Click Start, point to Settings, and then click Control Panel.
  2. Double-click to open the Administrative Tools folder, and then double-click to start the Microsoft .NET Framework Configuration tool.
  3. Configure the Runtime Security Policy for the enterprise, machine, or user policy level the way you want.
  4. Right-click the Runtime Security Policy node, and then click Create Deployment Package. The Deployment Package Wizard starts.
  5. On the Choose The Policy Level To Deploy page, choose the policy level you are deploying by selecting either Enterprise, or Machine, or User. Generally, you use Enterprise security policy. This does not prevent Machine or User policies from being defined on a system, but those policies can never grant more trust than the Enterprise policy grants.
  6. Click the Browse button, select a location to store the .msi package that the wizard generates, and then click Save.
  7. Click Next, and then click Finish to complete the Wizard.
back to the top

Deploy the Package

The most efficient way to deploy .NET Framework security deployment packages to an enterprise is by using group policies, such as other Microsoft Software Installer (.msi) packages. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
314934 HOW TO: Use Group Policy to Remotely Install Software in Windows 2000

back to the top


For more information, visit the following MSDN Web sites:
Code Access Security Policy Tool (Caspol.exe)
Deploying Applications
For additional information, click the following article numbers to view the articles in the Microsoft Knowledge Base:
315736 HOW TO: Secure an ASP.NET Application by Using Windows Security
315588 HOW TO: Secure an ASP.NET Application Using Client-Side Certificates
back to the top


Article ID: 815173 - Last Review: May 13, 2007 - Revision: 1.7
  • Microsoft .NET Framework 1.0
  • Microsoft .NET Framework 1.1
kbpolicy kbdeployment kbbuilder kbsecurity kbhowtomaster KB815173

Give Feedback


Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from