Software Deployment

I would definitely make the change in Group Policy - if you change the registry with your MSI, there's nothing to make it stay that way. Group Policy can force your settings to stay in place.

You might be able to create a transform to change it but I would see if their is a Group Policy to change to just to be safe.

I thought of creating a transform, but when i tried capturing what files and registries get modified when applying the setting, i found out that the files are related to Ms .Net Framework and i really dont prefer modifying Microsoft msi cause they always cause problems when i do.
I agree about the group policy, if there is a way ... then it will really be cool

[:)] it seems i found something which helped

Create .Net Framework Security Deployment Package

To create a deployment package for the .NET Framework runtime security policy, follow these steps:

1. Click Start, point to Settings, and then click Control Panel.
2. Double-click to open the Administrative Tools folder, and then double-click to start the Microsoft .NET Framework Configuration tool.
3. Configure the Runtime Security Policy for the enterprise, machine, or user policy level the way you want.
4. Right-click the Runtime Security Policy node, and then click Create Deployment Package. The Deployment Package Wizard starts.
5. On the Choose The Policy Level To Deploy page, choose the policy level you are deploying by selecting either Enterprise, or Machine, or User. Generally, you use Enterprise security policy. This does not prevent Machine or User policies from being defined on a system, but those policies can never grant more trust than the Enterprise policy grants.
6. Click the Browse button, select a location to store the .msi package that the wizard generates, and then click Save.
7. Click Next, and then click Finish to complete the Wizard.

But if anyone finds something in where i can apply the settings via a GPO instead of deploying a package

I dont think there is a way to do via creating ADM files. The only way i could find is via software distribution.
I'll be going ahead on deploying it via an msi package which will check for MS .Net Framework before installing. Thanks a lot guys.

Thanks for the education! Works for me


Create .Net Framework Security Deployment Package

To create a deployment package for the .NET Framework runtime security policy, follow these steps:

1. Click Start, point to Settings, and then click Control Panel.
2. Double-click to open the Administrative Tools folder, and then double-click to start the Microsoft .NET Framework Configuration tool.
3. Configure the Runtime Security Policy for the enterprise, machine, or user policy level the way you want.
4. Right-click the Runtime Security Policy node, and then click Create Deployment Package. The Deployment Package Wizard starts.
5. On the Choose The Policy Level To Deploy page, choose the policy level you are deploying by selecting either Enterprise, or Machine, or User. Generally, you use Enterprise security policy. This does not prevent Machine or User policies from being defined on a system, but those policies can never grant more trust than the Enterprise policy grants.
6. Click the Browse button, select a location to store the .msi package that the wizard generates, and then click Save.
7. Click Next, and then click Finish to complete the Wizard.

But if anyone finds something in where i can apply the settings via a GPO instead of deploying a package