How to specify .NET assembly trusts in group policy?

Question

I have some .NET assemblies on a network share that I need to give FullTrust access to all of my users. What is the best way to do this using Group Policy?

Answer 1

If you want to do it through group policy:

1. Lookup caspol.exe in order to create a security group via the command line. It helps to walk through the .NET security wizard and pay close attention to the window names and options selected because a few of the caspol commands are extra cryptic.

2. Create a script which runs this command.

3. Deploy via the Configuration > Windows Settings > Scripts section of group policy.