Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

What is the best solution for hiding login control on public facing WCM sites? Obviously putting the whole thing in a div would be straight forward but then, I don't see how people that will need access to the back-end can get it. i.e. editors, approvers etc. Is there a way to give them access through other means while not allowing visitors to see a login control?

share|improve this question
    
Is this Forms or NTLM authentication? –  Dave Wise Apr 12 '11 at 17:39
add comment

3 Answers

You can create an Authoring Site and extend this site and create a public website. Check out Publishing and Content Deployment

Check out this article as well. This is pretty old but you will get some ideas.

share|improve this answer
add comment

Some like to have two different sites, one for internet facing and one for internal admins etc.

It depends on how particular the users are.

For example, I just deployed a public facing site and just removed the login/welcome snippets.

All the admin needs to do is access a restricted page and they will be prompted for authentication. For example: http://yoursite/_layouts/settings.aspx

Hitting the above url will prompt for credentials.

I personally prefer this method, as it's a simple url to remember and eliminates the need to "hide" anything.

But that's just me and your clients may not like this, in which case you could consider the two-site option.

share|improve this answer
1  
You dont want a login on your public facing site toug, especially if you got two zones. All you want is 403 access denied! –  Anders Rask Apr 12 '11 at 18:37
    
You won't see the login prompt external to the network, this of course if you host the sharepoint server on site. –  Perplexed Apr 12 '11 at 20:18
    
well try and hit the /_layouts/authenticate.aspx page and see. If you dont expressively deny acceess to this page, you will get an NTLM or forms prompt. Not many are aware of this though... bit.ly/hgiho3 –  Anders Rask Apr 13 '11 at 5:49
    
Will check it out thanks! –  Perplexed Apr 13 '11 at 13:45
add comment

Removing the link to loginis hardly enough, instead focus on removing access to login.

Use UAG to deny all access to login and authenticate.

Also activate the ViewFormPagesLockDown feature to remove the permission to view form pages (also removes access to unprotected layout pages).

Alternatively SharePoint api gives access to remove anonymous access to Layouts virtusl directory on IIS

Edit: Also read the hardening articles on TechNet: http://technet.microsoft.com/en-US/library/f507f5d6-4c9d-4f98-909f-069c53b9a3f6.aspx

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.