The rules for the various levels of security policy are all stored in relevant security configuration files, which are merely Extensible Markup Language (XML) files that you can edit with your favorite XML editor or with the Code Access Security Policy (CASPOL) tool. Microsoft recommends the use of CASPOL (covered later in this chapter). Table 22.1 lists the areas in which the configuration files are stored on systems running Windows NT, 2000, or XP.

Table 22.1: Location of Security Policy Configuration Files

table22.1.gif

Suppose a .NET security administrator decides to change the default user policy of user Caroline. The administrator follows these steps:

  • From the command line, he or she runs caspol-user-reset to generate a default user security.cfg file at the administrator's user policy–level directory.

  • Next, he or she copies the security.cfg file to the user's policy configuration directory of Caroline.

  • Finally, the adminstrator uses an XML editor or CASPOL tool to modify security.cfg.

Conclusion

Hope this blog help you to learn about security policy in VB.NET.