SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Anyone know of a good technical arch diagram or white paper article focused SharePoint security?

Mod's, I know this isn't a coding question so feel free to delete it if it violates the rules and I apologize if it does.

share|improve this question
This site is for anything SharePoint, not just coding questions. I think it just happens that more coders find this site than other SharePoint users, so more coding questions get posted. So the scope of your question (SharePoint Security) is a good candidate for here. – James Love Jul 8 '11 at 17:41

Spencer Harbar posts a lot of information on his blog regarding what he terms Platform Hygiene - suggests practices and techniques to keep your system from breaking. I assume some of this content will include security, so it's definitely worth a read.

share|improve this answer

I would start with Security and Authentication for SharePoint Foundation 2010.

SharePoint 2010 Security deserves a whole book in itself so I suggest you have a read through the documentation then come back if you have any specific queries.

share|improve this answer

It depends on what kind of information you need. If you want to know something about users, groups and permissions security, try this link

Or you need something about authentication, Kerberos/NTLM or data security?

share|improve this answer

SharePoint 2010 is huge platform. Before learning SharePoint security, you need to know the following:

  • SharePoint 2010 works on Windows Server 2008 Active Directory for production environment.
  • SharePoint 2010 Web application is hosted by IIS Web Server 7.0 or 7.5
  • SharePoint 2010 database is stored by SQL Server 2008

When it comes to SharePoint security, you should consider what you need to secure, such as Web application, Databases, User Information account...then you continue to consider authentications that SharePoint 2010 supports, such as Claim-based authentication or security solutions, which have been running on Active Directory.

I give you further resources:

Because I haven't been SharePoint Developer, thus I can just give you resources concerning infrastructure and basics of SharePoint 2010 security.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.