Share via

Configuring Permission Sets Using the .NET Framework Configuration Tool

  • Article

Each security policy level has a set of permission sets that can be associated with code groups on that level. You can create a permission set for a particular level and associate it with a new or existing code group.

You can use the .NET Framework Configuration tool to perform the following tasks related to permission sets:

  • Create a permission set.

  • Remove a permission set.

  • Add a permission to a permission set.

  • Remove a permission from a permission set.

  • Modify a permission in a permission set.

    Note   The .NET Framework SDK includes several built-in permission sets. The only built-in permission set that that can be changed is the Everything permission set.

To create a permission set

  1. Run the .NET Framework Configuration tool. At the command prompt, type:

    %Systemroot%\Microsoft.NET\Framework\versionNumber\Mscorcfg.msc

  2. Expand the Runtime Security Policy node.

  3. Expand the node for the policy level you want to add a permission set to.

  4. Right-click Permission Sets and choose New.

  5. Give the permission set a name and, optionally, a description. Click Next.

  6. Select a permission from the Available Permissions list and click Add. The Permission Settings dialog box appears, which contains information about the selected permission. Enter the information needed for that permission and click OK.

    If you want to add a custom permission, click the Import button and browse to the XML file that contains information about the custom permission.

  7. Repeat step six until all the desired permissions are added to the permission set.

  8. When you are finished adding permissions, click Finish.

To remove a permission set

  1. Run the .NET Framework Configuration tool. At the command prompt, type:

    %Systemroot%\Microsoft.NET\Framework\versionNumber\Mscorcfg.msc

  2. Expand the Runtime Security Policy node.

  3. Expand the node for the policy level you want to remove a permission set from.

  4. Expand the Permission Sets node.

  5. Right-click the permission set you want to remove and choose Delete.

    Note   You cannot remove built-in permission sets or permission sets that are associated with a code group.

To add a permission to a permission set

  1. Run the .NET Framework Configuration tool. At the command prompt, type:

    %Systemroot%\Microsoft.NET\Framework\versionNumber\Mscorcfg.msc

  2. Expand the Runtime Security Policy node.

  3. Expand the node for the policy level that contains the permission set you want to add the permission to.

  4. Expand the Permission Sets node.

  5. Right-click the permission set you want to add the permission to and choose Change Permissions.

  6. Select a permission from the Available Permissions list and click Add. The Permission Settings dialog box appears, which contains information about the selected permission. Enter the information needed for that permission and click OK.

    If you want to add a custom permission, click the Import button and browse to the XML file that contains information about the custom permission.

  7. When you are finished adding permissions, click Finish.

To remove a permission from a permission set

  1. Run the .NET Framework Configuration tool. At the command prompt, type:

    %Systemroot%\Microsoft.NET\Framework\versionNumber\Mscorcfg.msc

  2. Expand the Runtime Security Policy node.

  3. Expand the node for the policy level you want to remove the permission from.

  4. Expand the Permission Sets node.

  5. Right-click the permission set you want to remove the permission from and choose Change Permissions.

  6. Select a permission from the Assigned Permissions list and click Remove.

  7. Click Finish.

To modify a permission in a permission set

  1. Run the .NET Framework Configuration tool. At the command prompt, type:

    %Systemroot%\Microsoft.NET\Framework\versionNumber\Mscorcfg.msc

  2. Expand the Runtime Security Policy node.

  3. Expand the node for the policy level you want to change the permission for.

  4. Expand the Permission Sets node.

  5. Right-click the permission set whose permission you want to modify and choose Change Permissions.

  6. Select a permission from the Assigned Permissions list and click Properties. The Permission Settings dialog box appears, which contains information about the selected permission. Change the information for that permission and click OK.

  7. Click Finish.

See Also

Security Policy Management | .NET Framework Configuration Tool (Mscorcfg.msc) | Configuring Security Policy | Configuring Security Policy Using the NET Framework Configuration Tool (Mscorcfg.msc)