[ { "Id": "515836", "ThreadId": "233140", "Html": "\r\n

I'm writing a PowerShell script which zips up log files. Everything seems to work OK until the call to Save, at which point I get this error:

\r\n

Exception calling "Save" with "1" argument(s): "Request for the permission of type 'System.Security.Permissions.FileIOPermission, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed."
\r\nAt U:\\scriptdev\\logarchiver\\logarchiver.ps1:27 char:15
\r\n+     $zipFile.Save <<<< ($zipFileName)
\r\n    + CategoryInfo          : NotSpecified: (:) [], MethodInvocationException
\r\n    + FullyQualifiedErrorId : DotNetMethodException

\r\n

The script works fine if I copy it to a folder on C: and run it from there. From what I can gather on Google, this is some sort of trust issue, but it seems like the utilities for setting trust ("gacutil" and "caspol") are unavailable/deprecated since .NET\r\n Framework 4? Any ideas how to solve this?

\r\n

Here's the script in question:

\r\n
\r\n
# Log Archiver\r\n# Checks to see if we have a month's worth of log files, then zips them up\r\n\r\n# Load DotNetZip Library\r\n$dotNetZip = Resolve-Path "Ionic.Zip.dll"\r\n[System.Reflection.Assembly]::LoadFrom($dotNetZip) | Out-Null\r\n\r\n# Get all log files in current folder, sorted by last write time\r\n$logFiles = Get-ChildItem | Where {$_.extension -eq ".log"} | Sort-Object LastWriteTime\r\n# Find date of earliest log file\r\n$earliestLog = $logFiles[0].LastWriteTime\r\n# Find current path\r\n$currentPath = Resolve-Path $logFiles[0].Name | Split-Path\r\n$monthAfterEarliest = $earliestLog.AddMonths(1)\r\n$currentDate = Get-Date "8/11/2010" # date is there for testing purposes, remove for live usage\r\n# Compare\r\nif ($currentDate -gt $monthAfterEarliest) {\r\n\t# logs need archiving\r\n\t$zipFileName = $currentPath + "\\logarchive-" + $currentDate.ToString("yyyy-MM-dd") + ".zip"\r\n\t$zipFile = New-Object Ionic.Zip.ZipFile\r\n\tforeach ($logFile in $logFiles) {\r\n\t\t$fileName = Resolve-Path $logFile.Name\r\n\t\t$zipFile.AddFile($fileName,"") | Out-Null\r\n\t}\r\n\t$zipFile.Save($zipFileName)\r\n\t$zipFile.Dispose()\r\n\t# zipping complete, delete log files\r\n\tforeach ($logFile in $logFiles) {\r\n\t\t$fileName = Resolve-Path $logFile.Name\r\n\t\tRemove-Item $fileName\r\n\t}\r\n}\r\n\r\n
\r\n
\r\n", "PostedDate": "2010-11-02T03:14:26.39-07:00", "UserRole": null, "MarkedAsAnswerDate": null }, { "Id": "518375", "ThreadId": "233140", "Html": "\r\n

As you pointed out, this is not an issue related to DotNetZip.

\r\n

This is a security issue, related to running powershell scripts from networked drives, if i understand correctly. 

\r\n

I think you would get a similar security exception if you ran a simple PS script from u:\\ that simply created a file on c:\\ , with no use of DotNetZip at all.  The error occurs when calling System.IO.File.Create() (or Open()), and it would\r\n occur when running the ps1 script from u:\\, regardless of whether you used a third party library. 

\r\n

The solution is to adjust the security for powershell scripts, or run the script locally.  I'm not an expert on powershell security, but I think\r\n\r\nthis blog post may be relevant.

\r\n", "PostedDate": "2010-11-07T06:42:58.393-08:00", "UserRole": null, "MarkedAsAnswerDate": null }, { "Id": "524243", "ThreadId": "233140", "Html": "\r\n

Thanks for the reply. I tried changing the Powershell security temporarily (I ran it from a batch file with -ExecutionPolicy Bypass) which resulted in a different error:

\r\n

out-lineoutput : Exception getting "formatValueList": "Microsoft.PowerShell.Commands.Internal.Format.FreeFormatEntry.formatValueList"
\r\n    + CategoryInfo          : NotSpecified: (:) [out-lineoutput], GetValueInvocationException
\r\n    + FullyQualifiedErrorId : CatchFromBaseAdapterGetValue,Microsoft.PowerShell.Commands.OutLineOutputCommand

\r\n

Googling this gives only one result: \r\nhttp://social.technet.microsoft.com/Forums/en/winserverpowershell/thread/dd5dcae2-1ccc-4be2-b986-61c069102ffb which curiously enough also relates to DotNetZip.

\r\n

However, for the moment I've been able to arrange things so the script can be run from a local location on a server.

\r\n", "PostedDate": "2010-11-19T01:58:27.147-08:00", "UserRole": null, "MarkedAsAnswerDate": null }, { "Id": "524285", "ThreadId": "233140", "Html": "\r\n

Wow, that error message is astoundingly opaque.

\r\n

I don't know what to make of it.

\r\n", "PostedDate": "2010-11-19T03:59:48.92-08:00", "UserRole": null, "MarkedAsAnswerDate": null } ]