With .NET 3.5 SP1, .NET assemblies running from UNC shares have full permissions.
See Brad Abrams's Allow .exes to be run off a network shares for workaround and discussions, and finally the follow up .NET 3.5 SP1 allows managed code to be launched from a network share.