.NET runs in full trust mode by default, to run it on a shared server you have to set it run in a custom medium trust mode, and then do some custom config to enable required features that this then disables, such as the ability for users to use OLEDB and ODBC DSN's
This is a PITA to do this for every server, so I am wondering if there is any script or tool anyone has made to automate this.
I would just copy my config files and deploy to each server, but I am not sure this is reliable and might contain server specific settings which would break .net
I did post this on the other microsoft general server forums, and was shocked to find out most people have no idea about the .net security, which means there is a lot of insecure servers out there.
I hope the folks here are more aware of this.
↧