2

I am trying to gather some information on the following subject: I have developed an application that requires administrator rights. This is achieved with the following line in the manifest file:

<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />

Now what I would like to do is to provide a simple interface for people to use and create an extension for this application. This should be provided as an assembly an will be placed in the 'Plugins' directory. The appplication will load them in dynamicly.

Obviously, I would not want those assemblies to be loaded with administrator rights.

What are the recommended ways to do this?

Thanks!

SaphuA
  • 3,092
  • 3
  • 39
  • 58

1 Answers1

2

I'm not quite sure what you are trying to do, but if you want to load an assembly with limited rights, create a new application domain and assign it limited permissions by providing some low-permission level evidence, like putting it in the internet zone. Then load your assembly into this domain and it will have those low permissions.

Here's something similar to get you started.

Here's more about evidence.

Community
  • 1
  • 1
richard
  • 12,263
  • 23
  • 95
  • 151