InfoPath Dev

My organisation basically trusts everybody within. Yet the organisation is too big to realisticly roll out msi packages every single time there's an update on our forms. And we certainly do not want to purchase a digital certificate since we trust ourselves.

is there a switch to turn off full trust checking on the infopath application?

Hi Qwer,
That's a dangerous precedent. Because even if you trust one another, do you all trust one another's e-mail? What happens if someone clicks on a link to an XML file that installs an XSN that is full trusted and which then decides to stomp all over your hard drive? I wouldn't do that. Sure there is a way and it's documented in chapter 8, but I wouldn't do it... :)

Patrick Halstead [InfoPath MVP]
InfoPathDev

Hi Patrick,

You have a point. But we are keen to explore this option at this stage since we can filter external emails containing infopath files. Can you tell me which chapter 8 you are talking about? Is there a hyperlink to it?

Thank you

Surely a big company like yours can cough up $800 for a two year code signing certificate? :-)

About the MSI, those can be installed automaticly either on boot or pushed from AD or scripts.

The book Patrick is talking about is the one he co-wrote with Matthew Blain: Developing Solutions with Microsoft InfoPath.

Google it or find it on Amazon.

//AndersR

We considered both the digicert option and the msi package option initially and we identified maintenance issues. Boot scripts are currently done by an outsourced compnay because we outsourced our computer equipments and there are simply too many procedures to go through just for employees to use a form. And we don't want to do this for every form that is developed in the future.

The digital certificate is definitely the more attractive option, but if full trust checking on InfoPath can be switched off then it is less work than buying a digital certificate. Full trust do not have a lot of point in my opinion because right now I can still use vbscript objects in untrusted forms and screw up people's harddrive and registry.

Also there are issues with digital certificates that we are unsure with, can somebody tell me:
1) how do save a user from pressing the yes button when the certificate is loaded (i was told using a windows endorsed certificate and installing it into the trusted root of every machine's certificate catalog? am I wrong?)
2) which company's certificate is recommended? as in which company got the best deal?
3) will my form fail instantly when my certificate is not renewed?

thank you