RE: Click Once Install fails on Vista

Tech-Archive recommends: Speed Up your PC by fixing your registry

Luke,

Sorry I haven't replied for a while. I've been travelling.

The account used is a domain account and NOT a local account so elevation is
required. The problem was the elevation seemed to fail. Not sure why??

Interestingly enough the installation seems to start now. Not sure if that
means something has changed in the Network?? What I am now finding that that
the install is failing while trying to register the assemblies with CAS.

A dialog is displayed during the setup program:

System.Security.PolicyException:Policy level 'Enterprise' could not be saved.
at System.Security.PolicyManager.EncodeLevel(PolicyLevel level)
at System.Security.PolicyManager.EncodeLevel(String level)
at System.Security.PolicyManager.Save()
at System.Security.SecurityManager.SavePolicy()
at xxx.EditorControl.Installer.Install(iDictionary stateSaver)

cannot find any reference to this error anywhere. The code that installed
the assemblies in the CAS does not reference 'Enterprise' anywhere. and is
still working on XP.

I have tried this on x86 Vista Ultimate and x64 Vista Enterprise



"Luke Zhang [MSFT]" wrote:

Hello,

Thank you for the reply. Can you confirm if the account is a local
administrator account who has full permission on the Vista client? If he
was a local administrator, he didn't need permission elevation anyway. For
the error log, the problem occur when call CorLaunchApplication(), which
try to launch an assembly from local, permission elevation will be
required.

By the way, if you add the deploy web site to the client's Trusted Sites,
will this help?

Sincerely,

Luke Zhang

Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.




.

Relevant Pages

  • RE: Elevate permission of code
    ... As for the privilege elevation, I'm afraid you're limited to the Vista ... Microsoft MSDN Online Support Lead ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.platformsdk.security)
  • RE: Elevate permission of code
    ... As for the privilege elevation, I'm afraid you're limited to the Vista ... Microsoft MSDN Online Support Lead ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.platformsdk.security)
  • Re: Can SSAS 2005 work in Novell network?
    ... windows account which was used to log on to the local machine. ... the server to the relevant OLAP roles you should be good to go. ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.sqlserver.olap)
  • RE: sp_attach_db on Vista causes read only problems
    ... this issue could occur if the SQL Server service ... You may try to use "local system" account as startup ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.sqlserver.setup)
  • Re: Impersonation Question
    ... **a domain account of the domain this machine belong to ... You can not call logonUser API against a local account on another remote ... Microsoft MSDN Online Support Lead ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.languages.vb)