How to: Make Code Groups Exclusive or Level Final

Optionally, using the .NET Framework Configuration tool (Mscorcfg.msc), you can make a code group exclusive or level final, as shown in the following instructions.

Important
Mscorcfg.msc has been removed from the .NET Framework version 4 and later versions. This documentation applies only to earlier versions of the .NET Framework. For more information about security changes in the .NET Framework 4, see Security Changes in the .NET Framework 4.

To make code groups exclusive or final using Mscorcfg.msc

1. Run the .NET Framework Configuration tool (Mscorcfg.msc).

   1. In Control Panel, open Administrative Tools.

   2. Double-click Microsoft .NET Framework <version> Configuration.

   Alternatively, you can run the tool from a command prompt:

   • In the .NET Framework versions 1.0 and 1.1, type the following at the command prompt: %Systemroot%\Microsoft.NET\Framework\versionNumber\Mscorcfg.msc.

   • In the .NET Framework 2.0, start the Visual Studio and Windows SDK Command Prompts and type mscorcfg.msc.

2. Expand the Runtime Security Policy node.

3. Expand the node for the policy level that contains the code group you want to make exclusive or final.

4. Expand the Code Groups node, and then expand the tree under the All_code node.

5. Right-click the code group that you want to be exclusive or final and select Properties.

6. To make a code group exclusive, select the check box labeled "This policy level will only have the permissions from the permission set associated with this code group".

   -or-

   To make a code group level final, select the check box labeled "Policy levels below this level will not be evaluated".

7. Click OK.

See Also

Reference

Mscorcfg.msc (.NET Framework Configuration Tool)

Other Resources

Configuring Security Policy

Configuring Security Policy Using the .NET Framework Configuration Tool (Mscorcfg.msc)

Configuring Code Groups Using the .NET Framework Configuration Tool (Mscorcfg.msc)