securityPolicy Element (ASP.NET Settings Schema)

Defines a collection of mappings between security policy files and the trust level names for the security policy files.

   <trustLevel />

The following sections describe attributes, child elements, and parent elements.


None, except for the attributes that are inherited by all section elements.

Child Elements

Element Description


Optional element.

Adds a mapping between a security level name and the associated policy file to the collection of security policy mappings.

The security policy file can then be applied to an ASP.NET application by specifying the trust level name in the level attribute of the trust element.

Parent Elements

Element Description


Specifies the required root element in every configuration file that is used by the common language runtime and the .NET Framework applications.


Specifies the root element for the ASP.NET configuration settings in a configuration file and contains configuration elements that configure ASP.NET Web applications and control how the applications behave.

The securityPolicy element defines a collection of mappings between security policy files and the trust level names for the security policy files. You can extend the security system by providing your own named trustLevel element mapped to a file that is specified by the policyFile attribute.

For information about ASP.NET and policy files, see ASP.NET Trust Levels and Policy Files and Administering Security Policy.

The following code example shows how to specify the policy files that handle different trust levels.

    <trustLevel name="Full"   policyFile="internal"/>
    <trustLevel name="High"   policyFile="web_hightrust.config"/>
    <trustLevel name="Medium" policyFile="web_mediumtrust.config"/>      
    <trustLevel name="Low"    policyFile="web_lowtrust.config"/>
    <trustLevel name="Minimal" policyFile="web_minimaltrust.config"/>

Configuration section handler


Configuration member


Configurable locations


Root-level Web.config

Application-level Web.config


Microsoft Internet Information Services (IIS) version 5.0, 5.1, or 6.0

The .NET Framework version 1.0, 1.1, or 2.0

Microsoft Visual Studio 2003 or Visual Studio 2005