.NET Code Access Security at the Enterprise Level

First, I'm not an AD Administrator. However, I have an important business
need to be able to learn and pass along information about configuring .NET
Code Access Security from Active Directory.

We want to be able to run a .NET application from a share (Intranet Zone)
and most importantly to administer the CAS security for this from the central
location of Active Directory instead of running caspol.exe on each
individual machine.

How can this best be accomplished?

Specific instructions would be most appreciated.

Thanks,

--
Mike McAllister