security exception on network

[kleinma]

Have any of you guys deployed an app to customers that will be installing on a network drive? I did a test today and copied my app to a shared network drive, and it bombed when trying to read from the system registry. I figured the problem out by going into the .net framework config in the control panel and giving full access to local intranet apps (it was set one below full access by default)

so what this means I guess is that if users want to install it on a network they need to go into this setting themselves and grant access to my app or all network apps.

the other option i guess is to not use the system registry, possibly use local XML files to store the information... that makes it a much bigger pain to have individual settings for users like the registry automatically does with HKCU

how have you guys tackled this?

[plenderj]

Does the user account executing the application have local administrative privileges?

[Mike Hildner]

Not sure if this will help, ran across it using FxCop, but you can request permissions and at least the user gets notified when the app loads, and not during execution.

Disclaimer, I haven't deployed a network app, so haven't checked it out. Doesn't look like you can just grant your app permissions during install, but at least you can notify the user that their admin needs to take some action.

[kleinma]

Originally posted by plenderj
Does the user account executing the application have local administrative privileges?

yeah, infact if I run the exe locally it works fine, but copy it to the network drive and it crashes. If I go into the administrative options for the .net framework in the control panel, I can set local intranet permissions to allow (or I can set just for the specific exe) but by default it does not allow certain functionality when running an exe off the network (registry reading is the one that this specific app crashes on)

MOST of my users install locally, but I know some install to a network drive and I just need to have a work around for them so they can use it as needed. I guess if I could alert them and give instructions on how to set the permissions, then it would be ok.