http://blogs.msdn.com/b/shawnfa/archive/2005/10/13/480210.aspxYesterday we looked at what host protection is and what it does. Today lets modify the ADMHost sample code so that it disables access to self affecting and external threading operations. We'll then attempt to run a bit of code that launches 10 threadsen-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)http://blogs.msdn.com/b/shawnfa/archive/2005/10/13/480210.aspx#556827Tue, 21 Mar 2006 21:16:30 GMT91d46819-8472-40ad-a661-2c78acb4018c:556827shawnfaHi Michael, <br> <br>As I mentioned in this post, HostProtection is actually not a security feature but a reliability feature. &nbsp;If you're trying to sandbox your addins, I recommend not using HostProtection, but instead using the AppDomain.CreateDomain overload which takes a permission set. <br> <br>Pass in a permission set which does not contain the ControlThread permission. &nbsp;Then, add your assemblies to the FullTrust list of that domain. &nbsp;This allows you to continue creating threads while preventing your addins from doing it. &nbsp;Note that you'll have to Assert ControlThread before you actually kick off a thread otherwise the demand will fail at the AppDomain boundary. <br> <br>-Shawn<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=556827" width="1" height="1">http://blogs.msdn.com/b/shawnfa/archive/2005/10/13/480210.aspx#555264Mon, 20 Mar 2006 06:11:24 GMT91d46819-8472-40ad-a661-2c78acb4018c:555264Michael BrayHello. &nbsp;I am looking for a way to prevent new AppDomains that I create from starting new threads (this is for a 'plugin' module that I'm playing with.) &nbsp;Doing this in a CLR host app is not an option for me because I want my hosting application to be able to create threads, just not the plugins. &nbsp;Can you suggest anything? <br> <br>-mdb<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=555264" width="1" height="1">http://blogs.msdn.com/b/shawnfa/archive/2005/10/13/480210.aspx#489277Sat, 05 Nov 2005 02:44:25 GMT91d46819-8472-40ad-a661-2c78acb4018c:489277shawnfaThanks Willy -- I've updated the code. <br> <br>-Shawn<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=489277" width="1" height="1">http://blogs.msdn.com/b/shawnfa/archive/2005/10/13/480210.aspx#481079Fri, 14 Oct 2005 18:02:56 GMT91d46819-8472-40ad-a661-2c78acb4018c:481079Willy DenoyetteSmall typo in updated raw_Start: <br> reinterpretcast&lt;void **&gt;(&amp;pHostProtectionManager)); <br>should be... <br>reinterpret_cast&lt;void **.... <br> <br>Willy. <br><div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=481079" width="1" height="1">