Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Security is the protection of information and property from theft.

0
votes
1answer
27 views

Error in removing SharePoint Solution

I am trying to remove the user solution. I used site.Solutions.Remove(Solution) But I am getting error The security validation for this page is invalid. Click Back in your Web browser, ...
1
vote
0answers
22 views

Where / How is security information passed to SharePoint?

If I execute a query in SharePoint, my security information is passed along with the query. I'm using Developer Tools in I.E.(F12) and am trying to see where this information is passed. Can anyone ...
2
votes
1answer
31 views

Missing 'Strict-Transport-Security' header in sharepoint web application

we have SharePoint site deployed on the internet and when we scan some security settings we found below issue Missing 'Strict-Transport-Security' header Scanner discovered that the affected ...
1
vote
1answer
17 views

SharePoint and OpenPGP file encryption

If I have SharePoint on an azure cloud which can be accessed from any computer using a browser, is it possible to integrate client side PGP encryption so when files are uploaded, they are encrypted ...
2
votes
0answers
92 views

How to get the Data of PWA Settings Security entities? (Using CSOM or REST API)?

I want to get the Groups and Users from PWA settings-> Security tab using CSOM or REST API? How do i get it?
0
votes
1answer
111 views

O365 Security Groups don't appear to be working with SharePoint Online

Today in an effort to clean up our SharePoint permissions and centrally manage things a little more efficiently, we compared our Active Directory groups (OUs) to our groups in SharePoint. I created ...
1
vote
2answers
40 views

SP 2010 Office Web Apps question

I had a quick question. We are in the process of remediation vulnerabilities in our existing SP 2010 environment (Both Windows and SP) There are two updates below that we need to install for SP 2010 ...
2
votes
0answers
78 views

How to prevent Cross Site Scripting attack in sharepoint search

In SharePoint 2013 how to prevent cross-site scripting attack, I deployed a publishing portal to the internet users and its enabled Anonymous access and web application enabled claims mode ...
0
votes
1answer
54 views

SharePoint Web-services disabling automatically causing site down

SharePoint search host controller and SharePoint Server Search 15 disabling every time I enable it. Reason I found that recently I have changed service account password which is used for those two ...
1
vote
0answers
59 views

IRM group access, all users who currently have access on SharePoint

I have found an article whilst looking into applying IRM to SharePoint libraries here: https://docs.microsoft.com/en-us/azure/information-protection/office-apps-services-support Within the article, ...
3
votes
1answer
74 views

Make SharePoint list partly confidential

There is monthly confidential data I want to collect from my firm's subsidiaries through a SharePoint list, directly connected to my workfiles (Excel, Power Bi and related PPT). The existing ...
0
votes
0answers
13 views

Is it possible for a SharePoint Online app under 'Your Apps' to open a security hole?

We are considering adding a third party app and I'm not sure where to start with assessing whether or not this app might cause a security problem. By 'security problem,' I mean exposing user or ...
0
votes
1answer
22 views

Sharepoint security trimming and OneDrive for business

If I have library with 2 folders, and John Smith have access to only one folder - would both be visible for him, if he connects this lib with OneDrive for Business? Does security trimming work in ...
1
vote
0answers
45 views

SharePoint Windows logging - account was successfully logged on 4624 - why so frequent?

My company has a centralized logging platform for all servers. We recently noticed that the bulk of our events come from SharePoint servers for successful logon events. If I look at "Event Viewer" -> "...
0
votes
1answer
269 views

Why are SharePoint security updates failing through Windows update repeatedly, then succeeding?

We have several single-server SharePoint 2013 farms running on Windows 2008 R2. When we do monthly patching through Windows Update, non-SharePoint patches install successfully. However, all SharePoint ...
0
votes
1answer
135 views

SP2010 “NT AUTHORITY\Authenticated Users” group versus the SP2013 “Everyone” group?

In my test SharePoint 2010 instance, I notice SharePoint has a special group called NT AUTHORITY\Authenticated Users In my SharePoint 2013 instance, I notice I have a special group called Everyone ...
0
votes
0answers
65 views

Sharepoint PWA 2013 - Cannot add group

Good day. i have 3 tier sharepoint 2013 farm clean installation with project web app in projectserver security mode. as a farm and pwa site full admin i'm trying to add a new group (or category, doesn'...
0
votes
0answers
273 views

Invalid Client Secret Azure AD App Registration

I have created an app registration for SharePoint Online with the goal to connect to SharePoint Online via the app registration in Azure from an on-premises client. I created the app secret in Azure ...
2
votes
0answers
120 views

SharePoint Online Access Requests for Users not in Directory

We have a requirement for users not in our O365 tenant to be able to submit an access request to our SharePoint Online site. Normally, if a user in a tenant doesn’t have access to a site, they will ...
1
vote
0answers
26 views

Intended Audience Header/Banner and Security Control

We are currently in SharePoint 2013 on-prem and soon to be in 2016 on-prem (we are not going to SharePoint online yet). Our goal is to provide a clear statement/header/banner of who should have ...
1
vote
2answers
41 views

How can a specific user be allowed to upload a file to a library, but not read that file?

A specific account will upload files from many different machines all over the internet to one folder in a SharePoint library. Content of the files is sensitive in nature, so if a malicious attacker ...
2
votes
2answers
345 views

Can you disable Delve for a particular site?

For example, the board site is making an executive nervous that another board person can see what they are doing in delve.
2
votes
3answers
4k views

How to disable “edit page” for members in Sharepoint?

I want to allow members to edit/create/delete/update list items, but when I allow permissions "edit", the edit page link is accessible to them: I've tried solutions, such as: Break inheritance and ...
2
votes
2answers
34 views

Security Update Application

Microsoft has released a Security Update which applies to SP2010/13/16. Description of the security update for SharePoint Server 2010: January 9, 2018 CVE-2018-0789 | Microsoft SharePoint Elevation ...
1
vote
2answers
166 views

security updates for SP 2013 farm

I am trying to update security updates for SP 2013. I tried to download one security update it has almost 52 items.How can I install these all items in one shot or quickly.Please suggest quickly.
1
vote
3answers
68 views

Boss needs SharePoint site only he can access (so not even administrator can)

I have a good one for ya today. Let me give you a quick backstory so you may understand these needs better. We had an employee who was a system administrator at my current company. Since he was a ...
1
vote
2answers
29 views

same web application there is any way to set farms authentication only to a specific site or site collection without extend or change host name

Hi i configured windos and Farms based authentication for web application,when i login to secured pages it redirect to login page and has options to select windows and farms authentication, but in ...
0
votes
2answers
408 views

Setting “NtfsDisable8dot3NameCreation” on Win Server 2012 running SharePoint 2013

I have a public SharePoint 2013 site with publishing feature as well as custom applications deployed. Recently we had a security audit on the server by and independent security analyst to identify ...
0
votes
1answer
80 views

Whitelist SharePoint Online Hosted App?

The scenario is this: We have a Web Service which is hosted in Intranet Network Plan is to expose Web Service to Internet so SharePoint Online Hosted App can access it Problem is security. If there ...
1
vote
1answer
29 views

Feed request Ip

In one of our Office365 Sharepoint pages, we are consuming a RSS Feed. The feed provider filters out the requests from unknown IP's. It looks like the Request IP occasionally changes, so the feed ...
1
vote
1answer
35 views

Lists that can only be opened by specific users

I want to use SharePoint 2007 or 2010 for our periodic access reviews. The current process is I have an excel sheet in the sharepoint and line managers open it to review the access of their staff. The ...
0
votes
1answer
445 views

User Account LockOut - SharePoint 2013

I have a control requirement: AC-7 Unsuccessful Logon Attempts The information system must define and enforce a limit on the number of consecutive invalid login attempts by a user. And it should: ...
0
votes
1answer
479 views

SharePoint List- Group Item/Row Level Security

I have a list of more than 4000 records for global sales team. I would like to set security permissions for viewing and editing according to the country column value. The issue is that I need to set ...
3
votes
1answer
60 views

A user seemingly modified a document after their account was deactivated

Our company uses Office 365. A user left and our IT team confirms that her account was disabled in June. There's a document in SharePoint showing that she created it in April (ok) and edited it in ...
0
votes
0answers
94 views

Location Based Access To SharePoint Online Site Collection

Currently, there is an IP address location restriction applied in Azure to prevent access to all of our O365 tenant. Access to our tenant from outside of our organisation is disabled based on an IP ...
1
vote
0answers
19 views

Is there any security concerns to enable http options?

My recent vulnerability assessment report flagged the HTTP OPTIONS is enable as unsecure practice. However, developer told me that it is necessary to enable so that end user may use the MS Explorer ...
2
votes
0answers
73 views

Can SharePoint 2010 support validateRequest=“true”?

By default, web application web.configs have validateRequest="false". Changing it to true breaks SharePoint significantly, based on my own trials. People Pickers don't work, half the form pages don't ...
0
votes
0answers
47 views

SharePoint Online: Require multiple security groups on document

Is there a way to assign multiple security groups to a document in SharePoint Online and limit access to only users in all security groups? We are migrating our SharePoint document repositories to ...
1
vote
0answers
103 views

Why are SP security updates showing as Missing/Required?

Let me preface by saying, I already ran the Get-SPProduct -local but I think it's because the security updates are not there. I have a couple questions regarding security updates and patching as this ...
0
votes
1answer
207 views

Should we disable client integration in internet site (anonymous access) due to WebDAV issue?

There is a link that MS advises to disable client integration feature to prevent cross site scripting "In the event there is a cross site scripting attack using WebDAV by contributors to a site, a ...
0
votes
1answer
626 views

How to create Security group In SharePoint 2013

In SharePoint Online we have group called Security group. Please see the image below. I have to create Security Group in SharePoint 2013 (On-premise). How can I create Security Group? What is ...
3
votes
0answers
15 views

Site Classifications and Better Security Control/Alerts

We are looking into using Site Classifications for our SharePoint environments. Classifications are great in that you can apply a global image/stamp/badge @ the top title section of the site and also ...
2
votes
1answer
286 views

JavaScript\REST check if current user belongs to SECURITY group

By security group I mean groups like "Everyone", "Everyone except external users", "All Users (windows)" and so on. In people picker these groups come with EntityType "SecGroup".
4
votes
1answer
74 views

Sharing folders on SharePoint and variance between “Shared with” and “Advanced”

Is there a reason that when I click on a folder in SharePoint that I can see a list of people that the folder is shared with that differs from the list I see when I click on Advanced? For example, I ...
-1
votes
1answer
117 views

Findings from Vulnerability Assessment & Penetration Testing

below Findings from Vulnerability Assessment & Penetration Testing, kindly help me anyone done this in SharePoint 2013 1- Cryptographic Padding Oracle This website is vulnerable to Oracle ...
3
votes
1answer
1k views

Security Implications of Deactivating Limited-access User Permission Lockdown Mode Feature

There is a site collection on my farm that is accessible outside of our network but does not allow anonymous access. Presently, we are experiencing some permissions issues where users need access to ...
1
vote
1answer
6k views

How do I disable “Get a Link” & “Share”

My department is exploring SharePoint as an alternative to fileshares. Typically we create documents, then email links to the document. it seems there are many types of links, which is confusing and ...
2
votes
2answers
368 views

Does SPFx have special access to REST endpoints?

In the latest SPFx video https://www.youtube.com/watch?v=6r6MqUDzKvI The SPFX Wizard explains how to add an escape function Quoting the SPFx Wizard: "Escape the value for any characters that are ...
1
vote
1answer
150 views

Filter List based on permissions

I am compiling a list for a company in sharepoint. How can I set permissions on this based on department? For example, if we have Sales, Accounts, Stores etc. How can this be set so any employee in ...
1
vote
0answers
55 views

SharePoint PWA 2013 - Visitor Access Issue

so I am working with SharePoint 2013 Project Web App security and it's giving unexpected access issues. So in PWA security Manage Group settings, I added a new user to the Portfolio Viewers group, ...