/build/static/layout/Breadcrumb_cap_w.png

App-V .Net Security caspol

Hello all, I have a query around using caspol.exe for an App-V sequence.

I have a .Net application being virtualised that requires .Net security to be set for a URL using a command like the following

caspol -machine -q -addgroup All_Code -url //server/share/* FullTrust -name Name"

As .Net is on the base machine build, I assume that this command cant be captured within a sequence and would need to be run during a pre-launch script - is this correct?

I have tried running this as a pre-launch script, but as a normal user this reports access denied as users dont have rights to modify machine policy.

Is the only way to get round this issue to change the policy level to user from machine as shown?

caspol -user -q -addgroup All_Code -url //server/share/* FullTrust -name Name"

Appreciate your help.

0 Comments   [ + ] Show comments

Answers (4)

Posted by: kkaminsk 13 years ago
9th Degree Black Belt
1
If you are using SCCM you could add another package as a dependency that runs caspol but otherwise I would suggest using group policy to deliver the script.
Posted by: carlosg 13 years ago
Senior Yellow Belt
0
Hi kkaminsk thanks for the suggestion.

I think thats what I will do - chain the App-V package to a script running caspol in SCCM, so it has the required permissions.

I've tested the caspol with user security (caspol -user), however this doesnt appear to set the requried .Net permissions. So I cant use this approach as a pre-launch script, which is a shame.

It appears as though the application requires machine level permissions, otherwise it crashes.

Thanks again.
Posted by: msenn 12 years ago
Orange Belt
0
Hello kkaminsk,

... read your advise, but how do I make a dependency in SCCM?
Could you explain?

Thank you

ORIGINAL: kkaminsk

If you are using SCCM you could add another package as a dependency that runs caspol but otherwise I would suggest using group policy to deliver the script.
Posted by: cygan 12 years ago
Fifth Degree Brown Belt
0
you can create an msi package for the .net security running caspol with a custom action ( this will be your dependency package)
hope this helps
Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ