Short example on how to authorize .NET application to run from central application distribution point on file server:

:: Run the script under user account that has Administrator rights on workstation of the user.
:: Obviously you must customize paths in the script. N:\ represents mapped network drive.
:::
SET PATH=C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727;%PATH%
caspol -pp off
caspol -m -ag Internet_Zone -url N:\MYAPP\* FullTrust -n "MyAPP" -d "Privilege to run MyAPP"
caspol -m -ag LocalIntranet_Zone -url N:\MYAPP\* FullTrust -n "MyAPP" -d "Privilege to run MyAPP"
caspol -m -ag Trusted_Zone -url N:\MYAPP\* FullTrust -n "MyAPP" -d "Privilege to run MyAPP"
:: END