Security is the protection of information and property from theft.

learn more… | top users | synonyms

0
votes
0answers
27 views

Using Rest API for the anonymously accessible SharePoint website having _vti_bin blocked

When learning how to Secure anonymously accessible SharePoint website, I went through this article in http://www.c-sharpcorner.com To increase security, one should enable lockdown mode and also ...
1
vote
2answers
48 views

spsecurity RunWithElevatedPrivileges

If you change the identity of the application pool, and the new account is not the System account, what account is used when calling SPSecurity.RunWithElevatedPrivileges?
3
votes
1answer
131 views

Sorry you dont have access to this page

I am currently experiencing a very unusual issue with a SharePoint 2013 on-premise. We have done performed a migration from SharePoint 2010 to SharePoint 2013 and when logged in as a user who is not a ...
0
votes
0answers
20 views

List Sharepoint groups powershell - missing groups

I am using this code to list all groups within a web app. When I look at results not all the groups are there. When I go to the root of the site - people and groups, the groups are there. Why are ...
3
votes
1answer
122 views

Security Error while doing REST update on the SP list

I am trying to make update with the usage of REST but I got an error: -2130575251, Microsoft.SharePoint.SPException. The security validation for this page is invalid and might be corrupted. ...
7
votes
2answers
4k views

ValidateFormDigest - when exactly does it need to be called?

Can someone explain to me exactly when and why I need to call SPUtility.ValidateFormDigest? Contrary to the spec, which says you need to call it before elevating privileges, I've had the following ...
2
votes
4answers
7k views

Are there any free security audit tool for SharePoint?

Are there any codeplex or 3rd party free tool for security tool? I need to run this on several sites and I dont have ample time to create a powershell script for this. Thanks in advance.
2
votes
1answer
66 views

SharePoint 2016 On Premises - “Share Everything in this Folder even with unique permissions”

On Office 365 SharePoint there is the option to add another group to a Document Library and then there is a tick box for "Share Everything in this Folder even with unique permissions". Does anyone ...
1
vote
0answers
36 views

WCF Authorization via SharePoint Security Model

Would like to implement authentication and authorization operations on non-SharePoint hosted cross-domain WCF service via SharePoint 2010 Security Model, which is Windows Authentication. So, a member ...
0
votes
2answers
86 views

Restricting access to contents in “_vti_bin” for both authenticated as well as anonymous users

As per a new security standard implemented by my organization I need to restrict access to the /_layouts/15/_vti_bin/lists.asmx for both authenticated as well as anonymous users. I am thinking of ...
0
votes
1answer
22 views

SharePoint List Custom Security Features

Is there a way to customize security features based on who created a list item? Examples: Managers should only be able to see those they have requested Directors should be able to see anyone that ...
2
votes
2answers
27 views

What's the purpose of deny all anonymous policy

When we configure anonymous policy for a web application, there is an option for "deny all". Why is that? We can just disable anonymous access, right? Why would we enable anonymous access and use a ...
0
votes
0answers
22 views

Access Issue for “Robots.txt” in SharePoint WCM site

I have enabled robots.txt on my SharePoint site by activating the Search Engine Sitemap Site Collection Feature as mentioned in this post. I also edited the robots.txt through "Search Engine Sitemap ...
4
votes
2answers
125 views

SharePoint 2013 - Unique permissions for claims

This is about SharePoint 2013 On-Premise environment. We've a scenario in which certain content is authored in source site collection and published to a target site collection via cross-site ...
0
votes
1answer
12 views

preventing existing users to login to a site collection in office365

I have an environment where I know that external users have access to some sites, and I want to trim this access for existing users. I need to verify if going to central administration and in the ...
1
vote
3answers
96 views

Allow only certain users access to a site

Is there a way to restrict, for example, an AD group access to a specific site out of the box? For example, I want to restrict access to users to Site A who are not US citizens. Is there a way OOTB or ...
4
votes
0answers
40 views

Connecting CRM Online to an external SharePoint Online

My customer wants to connect a Dynamics CRM Online account to an external Office 365 SharePoint account. Is this possible to do?
2
votes
2answers
7k views

How to repair “The server farm account should not be used for other services. ”

I'm looking for a solution to this in my 2013 farm. TITLE The server farm account should not be used for other services. EXPLAINATION spadmin, the account used for the SharePoint timer service and ...
0
votes
0answers
17 views

Validate context from SharePoint site to hosted provider

I'm developing a Provider-Hosted SharePoint App that provides sensitive data. Is there any best way to validate that the access from SharePoint comes from corrent SharePoint? The validation method ...
1
vote
0answers
35 views

How to list up sites you have permission to

We have a SharePoint 2013 on-prem environment. We are using both sites and site collections as project rooms. On the front page of our intranet I need to list up all sites and site collections which a ...
0
votes
0answers
6 views

2013: security logs do not show data after site creation

The reporting is activated and some reports do work. For the security one it only shows some automated actions at the site creations but no logging of people being added or people being deleted. What ...
1
vote
1answer
30 views

Sharepoint 365 - How to provide access to a service account?

my organisation has recently upgraded their Sharepoint to 365. Previous versions of Sharepoint had the facility to grant access to a service account (EMEA\xxx...), however it appears 365 can only ...
1
vote
3answers
2k views

I want a literal 'Read/view Only' library - no save, download or print functionality

I have a number of documents that I want to be literally 'Read Only' in a Library (ideally view in the browser). This means that I want to disable the 'Save As', download and print functionality to ...
0
votes
0answers
29 views

Office 365 SharePoint - Individual File Sharing

I have been debating with my internal team whether to allow the end user to share individual files or not and have also been talking about the potential problem which may arise due to giving each file ...
2
votes
0answers
31 views

SQL usermapping for Farm-account: dbo vs itself

On my SharePoint farm (in SQL) the farm-account is sometimes mapped as user (itself) to a SharePoint database and sometimes the farm-account is mapped as dbo to a database. On all databases the farm-...
0
votes
0answers
37 views

Security Exception while trying to start User Profile Synchronization through Web Part

I am new to SharePoint. I have setup SharePoint using least privilege principle and I am trying to start incremental user profile synchronisation through a web part(it works fine when manually doing ...
0
votes
1answer
18 views

Sharepoint designer security

Is it reasonable to allow sharepoint designer access to the production environment as opposed to doing all SP Workflow activities on a Dev environment then packaging them up?
0
votes
2answers
1k views

Cryptographic Exception

I have been having this error in SharePoint show up often: An unhandled exception occurred and the process was terminated. Application ID: /LM/W3SVC/1640420947/ROOT Process ID: 5788 ...
2
votes
3answers
69 views

Disable SPGroup in SharePoint 2013

I know we can create SPGroup and also delete it. But is it possible to disable it? I want this, because, I want to re-enable it later. I don't want to delete and re-create it, because, there could be ...
1
vote
0answers
26 views

How can I have end-users visualizing different dimensions from the same Powerpivot on same excel file?

I need help to understand if it is possible to have end-users visualizing different dimensions from the same excel file published in Sharepoint 2013. I have a data warehouse in SQL Server 2012 and I ...
0
votes
2answers
200 views

Relation between an FBA Role and SharePoint Group

I have worked with FBA Membership using SQL. Once we add a Membership User, we can create an equivalent SPUser in SharePoint. But I am not sure how I can establish that kind of a relationship ...
1
vote
0answers
26 views

Sharepoint Active Directory Users/Groups

I'm currently testing some things in SharePoint (Trial/Developer mode). Current setup: SharePoint 2013 Server Domain Controller with 2008 R2 (Active Directory). I've configured the SharePoint option ...
0
votes
1answer
92 views

web.DoesUserHavePermissions returns true, though user gets access denied page

I've seen this question a couple times, but yet to find a scenario or answer which helps me. I am building up a cross-site navigation menu, and when building the menu I look at each site and want to ...
0
votes
0answers
35 views

Security Trimming, Shared Folders, Limited Access and Possible Workarounds

I'd like to have both security trimming and shared folders within my site collection. This is seemingly impossible, as to allow shared folders you need to turn off Limited Access Lock Down. I was ...
0
votes
0answers
20 views

User account limited access to site settings and unable to access some subsites

The account in question is supposed to be an administrative type account, having access to all things. The account has been configured in the User Policy for the Web Application for Full Control ...
2
votes
1answer
807 views

In what Security Zone should SharePoint Online (Office 365) be added?

I was wondering in what Security Zone SharePoint Online (Office 365) should be added? I'm not sure if the Office 365 site(s) belong in the security zone Trusted Sites Zone or in Local Intranet Zone. ...
2
votes
4answers
2k views

SharePoint 2010 Insights (PerformancePoint): '401 Unauthorized' error on invoking 'Run Dashboard designer'

Environment: SharePoint 2010 on Windows 2008 R2 Standard + SQL Server 2008 R2 I am trying to setup the BI infrastructure Lab as outlined in this article: http://technet.microsoft.com/en-us/library/...
0
votes
1answer
50 views

Unable to connect to SQL on aspnet_regsql.exe

I have a standalone environment, and I am trying to configure FBA on my local machine, I ran aspnet_regsql.exe, and it said it's unable to connect to SQL. The account am using is the sp_admin ...
3
votes
2answers
100 views

Item Level Security Question

Good Afternoon, Seeking advice for setting security on a custom SP2013 list. All users need to be able to create a new item in the list. Users should not see items created by others. So far, I set ...
0
votes
0answers
170 views

Getting an Access Denied when clicking on the Documents link in MySite

When I click on the Documents, Tasks, or Documents link in the left nav in MySite I get an access denied error (go to 'mysite/_layouts/15/AccessDenied.aspx?Source=http%3A%2F%2Fmysite%2FShared%...
1
vote
2answers
1k views

How can I learn how to create a delegation engine? [closed]

One of the last places I worked at had a delegation engine in SharePoint, a SharePoint List that specified the SharePoint groups that would be sought for approval for a workflow based on that ...
1
vote
1answer
2k views

Exception occurred while connecting to wcf endpoint

I get very strange exception: "exception occured while connecting to wcf endpoint. Access denied" Only when I go to any Document Library. I have logged as Administrator and I have added "...
0
votes
1answer
28 views

Admin access when the admin password has changed in AD

I have a demo/test (luckily) build of Sharepoint 2013 running on a server in-house. When I set it up it asked me to allocate a domain user as the admin, I use my own domain admin account (from Active ...
0
votes
0answers
18 views

How to add security to sharepoint custom WCF service

I've made a custom wcf service under sharepoint 2013, but if i call the service directly (no auth no security=, it work... any suggestions to make the service secured? Thank you very much for any ...
6
votes
5answers
11k views

Get name of Farm account using Powershell

How can I get the name of the Farm account ? I can see it listed in Get-SPManagedAccount, but do not see any properties on the SPManagedAccount objects to be able to dynamically filter by and ...
1
vote
1answer
113 views

SharePoint 2013 - user automatically logged in with other user's credentials - how is that possible?

We recently had the following problem with SharePoint 2013: User A suddenly was logged in on his computer with the name of another user (user B). Both use Windows 7 and Google chrome as browser. ...
1
vote
3answers
8k views

How to get user security group name through javascript

I use the following code in javascript to display name of logged in user. SP.SOD.executeFunc('sp.js', 'SP.ClientContext', getUserData); Is there a code that will also tell me security group of ...
0
votes
0answers
75 views

SharePoint 2013 - Verify Active Directory security group membership in Master Page javascript

I desire to add some JavaScript that will verify the current users AD security group membership. If a member of group 'A' the logic will redirect one way. If not in group 'A', but in group 'B' the ...
0
votes
1answer
18 views

Site Analytics also for non Site Owners possible?

Is it possible to make the Popularity and Search Reports accessible to contributors and not only owners?
0
votes
1answer
319 views

Remove user/group from everyone group SharePoint online

Is there a way to exclude a user or group from the 'everyone' security group in SP Online? The reason I ask is we have blog site which everyone needs to be able to contribute to, simple - but we ...