Security is the protection of information and property from theft.

learn more… | top users | synonyms

0
votes
0answers
20 views

Enter New-SPUser without actually authenticating?

Our org has two AD forests (internal users, external users) with no trust between them. When I enter a user manually in SharePoint and I type the username into the people picker, it accepts the user ...
6
votes
1answer
60 views

Is the “Keep me signed in” in SharePoint Online a security flaw?

We are considering replacing our on-premise SharePoint intranet with SharePoint Online. I won't spell out the advantages, but I can see one big disadvantage - the "Keep me signed in"-button... Our ...
0
votes
1answer
731 views

Security Exception in SharePoint 2010 when executing

My SharePoint 2010 solution comprises of 2 Features. One feature uses the Flee library to do some mathematical calculations in some code behind. The solution has a number of class libraries that I ...
3
votes
1answer
323 views

RunWithElevatedPrivileges doesn't work in Webpart Constructor

With Sharepoint 2007 I am using RunWithElevatedPrivileges to write to the Event Log, but if I place the call inside the Webpart constructor, I get a "Request Failed" message. However, if I put this ...
0
votes
1answer
1k views

401 Unauthorized before authentication

Environment: SP2010 Enterprise, one server with separate SQL This just cropped up on a server that has been working flawlessly for months. I created an account for a new external user, but when they ...
1
vote
1answer
1k views

Exception occurred while connecting to wcf endpoint

I get very strange exception "exception occured while connecting to wcf endpoint .... access denied". only when I go to any Document Library. I logged on as Administrator and I have added "Full ...
1
vote
1answer
1k views

How to repair “The server farm account should not be used for other services. ”

I'm looking for a solution to this in my 2013 farm. TITLE The server farm account should not be used for other services. EXPLAINATION spadmin, the account used for the SharePoint timer service and ...
0
votes
0answers
8 views

Account on web application level no access to site

I have added an account (central admin > web application > policy for web application) to the list on all zones, with full control I now try to logon with that account on a site in a site ...
0
votes
1answer
71 views

Allow others to see picture, but deny access to mysite

We are sharing parts of our SharePoint 2013 enterprise site with our customers. Security-wise this can be managed pretty well, but I have one problem. Customers do see employee photo & names (next ...
0
votes
0answers
43 views

How to display custom ContentBySearchWebPart results without security trimming?

I have a custom web part extending the ContentBySearchWebPart class to list all communities that the user isn't member of. I need the results not to be security trimmed, meaning all authenticated ...
11
votes
4answers
4k views

Best way to Impersonate in SharePoint

So far, I am aware of below 3 ways of performing impersonation in a SharePoint web part or page : Using Win32 API [DllImport("advapi32.dll", SetLastError=true)] public static extern bool ...
0
votes
1answer
460 views

Cryptographic Exception

I have been having this error in SharePoint show up often: An unhandled exception occurred and the process was terminated. Application ID: /LM/W3SVC/1640420947/ROOT Process ID: 5788 ...
4
votes
1answer
2k views

“The XSS Auditor refused to execute a script in…” from Chrome when using <script> tag in content editor webpart

Embedding javascript in a content editor web part triggers XSS Auditor error in Chrome when editing any webpart on the page containing the content editor web part. Steps to reproduce 1 - Use newest ...
1
vote
1answer
2k views

Why does a workflow cancel with “access denied” for all but users with Full Control accesse?

I am working with an existing SharePoint deployment that has a convoluted security structure. After cleaning up permissions a bit, an approval workflow for absence requests is somehow not working for ...
1
vote
1answer
34 views

Total number of unique permissions per list

The http://technet.microsoft.com/en-us/library/cc262787.aspx specifies the total number of unique security scopes to 50.000/list, but recommended is 5.000/list. In a list, is it possible to find out ...
0
votes
1answer
407 views

I want a literal 'Read/view Only' library - no save, download or print functionality

I have a number of documents that I want to be literally 'Read Only' in a Library (ideally view in the browser). This means that I want to disable the 'Save As', download and print functionality to ...
0
votes
2answers
35 views

Who sees a private list

If I set the option of "Read items that were created by the user", who other than the user can still view it? Where can I restrict the list of people who can still view it?
4
votes
4answers
6k views

Get name of Farm account using Powershell

How can I get the name of the Farm account ? I can see it listed in Get-SPManagedAccount, but do not see any properties on the SPManagedAccount objects to be able to dynamically filter by and ...
0
votes
0answers
12 views

add a statement reminding users the information inside the folder is for internal use only

I have file which needs to add a statement reminding users the information is for internal use only. Is adding this statement possible to read each time the file is opened? The file has a 100 ...
2
votes
1answer
56 views

SharePoint won’t report active directory domain user permissions inherited from active directory domain security groups nested in SharePoint groups?

For instance: ads\mdepnorm aka MDEP TSST Norman Testing is in SP-CONTRIBUTORS ADS security group: . The sp-contributors ADS group is in SharePoint group Intranet Members: . It follows that if I ...
1
vote
4answers
221 views

SharePoint user access not updating from AD Security Groups

I have a SharePoint site collection that has no direct user permissions set, we have a policy where users are added to a specific AD group to get access to different areas, your classic Role based ...
0
votes
0answers
6 views

Grant third party access to sharepoint ribbon without disclosing users

Dear smart people out there, I would like to grant a third party access to the SharePoint ribbon without disclosing the identity of our users. Is this possible? How?
0
votes
0answers
36 views

Data Refresh Account - Login Failure: the user has not been granted the requested logon type at this computer

I am trying to configure my Unattended Data Refresh Account and continue to get the following error with the account I am using: The data refresh for 'sqltestrefresh.xlsx' on Report Center - QA ...
1
vote
1answer
26 views

Managing Site Permissions

I am new to SharePoint and having some difficulty setting up the appropriate permissions. My organization uses a primary landing page that only a few have Owner/Full Control rights to, and then that ...
0
votes
1answer
36 views

Can Forms Based Authentication be Used on Site Collection?

Is it possible to use forms based authentication/.net security for a site collection? I can see where I can configure a web application for FBA, but not for a site collection, which in my case is a ...
1
vote
1answer
20 views

system security error when running Sharepoint 2010 Products Configuration Wizard

Background: A few months ago, my company had an issue which resulted in creating a new domain, and migrating all computers and servers to the new domain, including a Sharepoint 2010 installation. At ...
0
votes
0answers
115 views

Users denied access to certain site collection until an administrator opens it

We are having a problem with users getting "Access denied" errors when trying to access a certain site collection. These users all have the proper permissions to the site and have accessed it in the ...
2
votes
4answers
4k views

Are there any free security audit tool for SharePoint?

Are there any codeplex or 3rd party free tool for security tool? I need to run this on several sites and I dont have ample time to create a powershell script for this. Thanks in advance.
0
votes
1answer
82 views

when i changed the IIS application pool's and sharepoint services's Service Account i start receving the following error “403 FORBIDDEN”

For security reasons we wanted to chnage the service accounts username for all the IIS application pools and SharePoint service , so we created a new user named "Staging.user", and i define it as a ...
2
votes
0answers
1k views

IE warning - Microsoft Office Contact Retriever

When I open a SP 2010 page with IE 10 on Windows 8, I get this warning: Internet Explorer Security A website wants to open web content using this program on your computer: Name: ...
0
votes
0answers
19 views

get error when adding a user to a group site permissions - SharePoint 2010 on premises

I need some help here . Not sure if anyone as gone through this before. But when i try to add user to a group or to anything in sharepoint via site permissions i get an error and a coreelation id. I ...
1
vote
1answer
17 views

HR Libraries Scenario >> Employee libraries and security via AD

We have a scenario in 2013 where we are proposing a library per employee to hold HR documents. We'd have a dropoff library that would route the document to the proper library which is based off the ...
0
votes
2answers
126 views

Sharepoint 2013 web part does't impersonate current user, while SP 2010 does?

I'm developing full trust web part deployed in GAC that access soap web service on localhost. Web service uses windows authentication. SP 2010 web part impersonates current user while SP 2013 sends ...
0
votes
0answers
45 views

Restricting List View Based on Document Library Permissions

I'm looking to restrict a user from accessing certain list data if they do not have access to a related document library and was hoping to get a couple opinions on the best way of doing such. Here's a ...
1
vote
2answers
795 views

Does breaking library/list security inheritance also break it's items inheritance?

We need to break inheritance on a document library. Some users of a site should have read only to document library 1 while some users should have contributor rights to document library 2 (both within ...
0
votes
0answers
122 views

Share a folder (break inheritance), access denied

I have a problem in Sharepoint 2013 which is reproducible. Create a document library on any site. Create a folder in this library. Break inheritance on this folder and add a user that doesn't have ...
0
votes
0answers
14 views

SharePoint data / document encryption options: experiences and recommendations

I'm evaluating the options to implement an encryption of the data / documents that are saved in SharePoint (2013). The important requirement is that SharePoint administrators (farm admins) are not ...
3
votes
1answer
5k views

How to enable access to subsite only to certain users or groups?

I created an intranet site based on Sharepoint Foundation 2010 which is based on mixed authentication (Windows and Form Based). It has a main site where all logged users have access and there are ...
0
votes
0answers
51 views

IE default security settings block any App scripts from running

I wrote a Sharepoint-hosted app for use by a single company. But in order for my javascript to execute on their local intranet, which uses Microsoft Windows Server 2008, I have to instruct them to ...
1
vote
1answer
824 views

Taxonomy.asmx returns sometimes 'No credentials are available in the security package'

I've created a WCF WebService which connects to the Taxonomy service from SharePoint with a 'Service Reference' in Visual Studio 2010 to the ...
10
votes
1answer
2k views

Manage trust/add certificate

I try to add a certificate under "central administration>security>manage trust" but I always get the following error: The Root Certificate that was just selected is invalid. This may be ...
0
votes
1answer
82 views

User Authentication in Sharepoint and OTP

Currently we have SharePoint installed in our production environment. We are only on intranet currently, but we would like to make our SP accessible from internet and web URLs. Currently for ...
1
vote
0answers
333 views

SPUtility.GetPrincipalsInGroup not working when claims authentication is enabled

Method SPUtility.GetPrincipalsInGroup can be used to resolve users that belongs to a AD Group. However, when claims authentication is enabled, this method doesn't work as expected. Is there another ...
3
votes
1answer
2k views

What permissions do I need for a user to see all entries in a list where typical users can see only their own submissions?

I have a list where users can create and see their own items, but not other users' items. I, being the site owner, can see all items. How can I give specific users within a Sharepoint Group the ...
0
votes
1answer
367 views

Event Receivers on Add/Remove Users

I need some design ideas for a requirement to audit when uses are added/removed from an object. I need to collect the user doing the add/remove, date time, and reason for adding. I need to do this to ...
0
votes
0answers
113 views

FBA Active Directory Security Groups Not Working SP 2013

So I have in active directory one security group, lets call it "Shrpt_Users". Within SharePoint I have granted this Active directory group read rights to my sub site: "Advertising". My user ...
0
votes
0answers
19 views

SharePoint Portal

I am completely new to the SharePoint development environment, though I have experience in VBA. I am attempting to create a SharePoint site that will allow several vendors to view an Excel ...
2
votes
4answers
4k views

How to Password Protect a SharePoint Object (Reassuring High Level Users That its secure)

Edit to clarify: The purpose of this isn't to replace SharePoint security or to add some extra super security or about trust in SharePoint, it is instead to consider something that is very much ...
0
votes
0answers
27 views

Users with no permissions can still see empty list views

I have a problem regarding security on lists. If I break role inheritance on lists and exclude users from having access to that specific list, the users are still able to navigate to the list and ...
0
votes
0answers
30 views

Folder permissions

I have a problem where I need to allow access to a folder to a select group of people where the folder is buried deep within a series of folders. For example Folder A (top level | ---->Folder ...