C# Visual Studio for Computer Science

[cadams10]

Hi, 

Does anyone have a secure way to allow C# to be used for our Computer Science department? We use AppLocker which prevents unauthorised exe's from running, we would like a way to allow the compiled C# programs to run without compromising security. 

[dhicks]

19 minutes ago, cadams10 said:

Does anyone have a secure way to allow C# to be used for our Computer Science department?

 

We have a (web based) remote desktop setup the pupils can log in to, with a variety of development tools available. That's in a Docker container, with no network access to anything except the internet via our onsite filter.

[KK20]

what type of apps?  legacy .NET framework forms apps have a much easier way of signing code with the older clickonce mechanisms, you can supply a code signing certificate and allow your signed apps via applocker.  It is harder with Windows forms apps (later .NET) as you need to manually sign the EXE using signtool - this can be built into the projects as an "aftertarget" but this is quite manual and needs doing per project, also needs the PFX and password known to the user!

 

We do this with a short date domain CA code signing cert installed on the machines and we only use legacy framework due to the PFX and password issue.  It is on my list to look into this further.