Questions tagged [security]

Security is the protection of information and property from theft.

Filter by
Sorted by
Tagged with
0
votes
1answer
1k views

Need script to list Groups by Team Site

I am trying to find PowerShell scripts that do the following: List all TeamSites. List all TeamSites, Groups that belong to that TeamSite with their permissions. List all TeamSites, Groups that ...
0
votes
1answer
16 views

mandatory tests with SPO/Forms

is there a way to create a mandatory security training with SPO/Forms? All users should be forced to go through a regular IT security training with a short test at the end. Is there a way/policy to ...
0
votes
1answer
23 views

How can I set up my site so it works like a post-box?

Hard to explain in one line, so full analogy: You go to the post box to send a paper letter. 30 other people do the same. I can put my letter in, but I can't get other people's letters out. Moreover, ...
0
votes
1answer
2k views

How can I secure _vti_pvt folders?

I am dealing with a security report from an external contractor, in which there is a finding labeled as a medium risk. It is titled IIS .cnf file leakage. This is somewhat confusing to me, since ...
0
votes
1answer
2k views

User Authentication in Sharepoint and OTP

Currently we have SharePoint installed in our production environment. We are only on intranet currently, but we would like to make our SP accessible from internet and web URLs. Currently for ...
3
votes
3answers
2k views

SharePoint 2010 - disable SSLv3 and TLS 1.0

I'm tasked to figure out how to disable SSLv3 and TLS 1.0 on SharePoint 2010 farm. After some reading, I came to the following conclusions: It is safe to disable SSLv3 on SharePoint servers, It is ...
6
votes
3answers
9k views

Opening document from Search results - This action couldn't be performed because Office doesn't recognize the command it was given

Hi I am trying to open an Office document by clicking on the search results document title, however an error box pops up saying: This action couldn't be performed because Office doesn't recognize the ...
0
votes
1answer
30 views

Can you set the permissions for a user when you share an SP site with them (as a member)?

Scenario: I create a new team site (without O365 group) from the Admin center. I added a few users to the Member group so they have edit permissions on the site. Current behaviour: These members are ...
6
votes
2answers
3k views

Error : Group cannot be found

I deleted Team Site Owners group from the top level team site in SharePoint Online and found that the people and groups link from the settings page is not working, throwing an error: Group cannot ...
0
votes
1answer
65 views

Which security patches should i install every month for SharePoint 2013

In SharePoint 2013 which security patches should i install every month and i don't want to install all Cumulative updates every month because of size also one reason. like for example Aug 2020 https://...
0
votes
1answer
23 views

SharePoint 2013 Public site how to test SQL Injection attacks vulnerability

Hi In SharePoint 2013 Public site how to test SQL Injection attacks ? In SharePoint 2013 web application i deployed some custom web parts,displaying data from custom lists to pages etc
3
votes
2answers
4k views

401 Unauthorized before authentication

Environment: SP2010 Enterprise, one server with separate SQL This just cropped up on a server that has been working flawlessly for months. I created an account for a new external user, but when they ...
2
votes
1answer
969 views

Get Sharepoint Permissions\Roles (custom) of a user from AD Group that is part of SP Group via CSOM

SharePoint 2013 + provider-hosted app. User is part of AD group. AD group is part of Sharepoint group. Sharepoint group has custom security permissions assigned. How do I check whether user has some ...
0
votes
1answer
11 views

How to grant access to all site data but disallow list modifications

I'm creating a SPO site that will serve as the backend for a PowerApp. Several lists will have item level permissions so that only users who created the data will be able to view it. The app will have ...
0
votes
0answers
36 views

Retrieve AIP Labels or Sensitivity Labels by eDiscovery on Sharepoint Server?

I had a question regarding DLP on Sharepoint Onpremise, like described here: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-sharepoint-onedrive-files?view=o365-worldwide ...
1
vote
1answer
2k views

Encrypt sharepoint online list columns

I'm somewhat proficient in development but have basic knowledge about SharePoint and Sharepoint Online. I would like to add an encryption thing to my Sharepoint Online list columns make it possible ...
0
votes
2answers
20 views

How to apply security patch in SharePoint 2010 without upgrading to cumulative update?

Microsoft releases security bulletin every month which also include SharePoint vulnerabilities. We have many sites running on my SharePoint 2010 instance, and if we apply cumulative update according ...
0
votes
1answer
67 views

How to mask a field like SSN or ID field?

Is there way to mask a field like social security number or ID field? I like mask field both in list view level, edit form and view form. Is it possible? Sharepoint 2013 (we have nintex form as well)
0
votes
1answer
9 views

Can't Create Session

I am trying to update a custom authentication page from SharePoint 2010 to 2013. It basically takes credentials from a CAC card and creates them a user account in FBA if they didn't already have one ...
0
votes
1answer
60 views

How to stop malicious files (XSS files) upload even for admin users who have full permissions to site collection

Hi In SharePoint how to stop malicious files (XSS files) upload even for admin users who have full permissions to site collection. For example, in a custom list or document library, no one can upload ...
0
votes
1answer
21 views

Can O365 Security and Compliance Alert Policies be limited to a single document library?

I've been trying to use the Alert Policies in the Office 365 Security and Compliance center to build an alert policy for a single high security document library. I want to get an alert for when people ...
0
votes
0answers
17 views

How can you protect against data-greedy users?

My department is responsible for providing reports using a variety of SharePoint lists. The problem I'm facing is that other departments are overstepping their boundaries by doing what amounts to a "...
1
vote
3answers
47 views

Sharepoint online item level permissions

I have a document library in which I have a folder called sharepoint and with in that folder it has some important data. Now I want to access the above folder and it content only to a specific group. ...
0
votes
0answers
113 views

CSS was ignored due to mime type mismatch

I am working on client side web part using JavaScript and CSS for customization. I have added custom css and JS into the page and I am getting the message on console of the browser i.e. CSS was ...
0
votes
1answer
753 views

Determine what user was deleted from a security group in the audit logs

I have configured the site collection audit settings to monitor permission changes. In the Audit log reports->Security settings I get an excel report with Security Group Member Delete events. The ...
0
votes
0answers
11 views

How to securize redirection with Azure AD in a WebPart?

I have developed a Sharepoint Webpart. The aim of this component is simple, authenticate the user in an external website that is embedded inside de Sharepoint. The external website uses Azure AD to ...
1
vote
1answer
40 views

Principle of least privilege on Office 365 OneDrive for Business

Does anyone know how to implement the principle of least privilege on OneDrive for Business on an Office 365 tenant? I would like to have a way for an automated process to be able to only upload to a ...
1
vote
1answer
52 views

Set default or Global Site Collection permissions in SharePoint Online

In SharePoint Server on-prem, we had WebApplication-level permission policies that could allow the administrator to setup certain users or groups to have a set of permissions on All site collections ...
1
vote
1answer
654 views

Why the security trimming doesn't apply?

It seems that the security trimming doesn't apply for the Quick Launch in SharePoint 2013. I've created 2 lists with broken role inheritance and assigned permissions to a different group for each ...
0
votes
1answer
29 views

Site Permissions Flyout Menu

I'm curious why site permissions load on some sites and not others. This particular one doesn't show anybody but on another site, it shows Owners, Members and Visitor group memberships
6
votes
3answers
9k views

The context has expired and can no longer be used. (Exception from HRESULT: 0x80090317)

I am facing this error all day long and I have not figured it out yet. I have tried: setting the date time zone in the web application to match that of the server set "security validation expires" to ...
0
votes
0answers
10 views

About Cross Site Request Forgery prevention on SharePoint 2016

We are using SP2016 on-premise. The Web Page Security Validation is turned on as default with Security validation expires = 30 minute. The SharePoint is installed on MyCompany.com intranet with NTLM ...
0
votes
1answer
141 views

SharePoint Online Site inherit security group from hubsite

Is there a PowerShell script/cmdlet (pnp/spo) to inherit securitysettings from hubsite? All sites linked to hubsite https://tenant.sharepoint.com/sites/marketing should have the same permission ...
0
votes
0answers
277 views

FormDigest control problems after September 10, 2019 Security Update

I've noticed some weird behaviour of Microsoft.SharePoint.WebControls.FormDigest control after last security update. Control is added to every page by setting following code in masterpage: <asp:...
0
votes
1answer
116 views

How to remove RoleAssignments from SPListItem/SPFolder correctly in SharePoint

In the library, I have ParentFolder which contains SubFolder. I have broken role inheritance in both ParentFolder and SubFolder (via a web interface). But when I remove role assignment for the user ...
0
votes
1answer
137 views

Custom web part unable to call custom web API

I'm unable to get my custom web part to connect to my custom Web API. Ultimately, my goal is to secure the API using Azure AD and then call that API from my web part. In the local workbench, I'm ...
1
vote
0answers
91 views

Why http PUT can upload file successfully to SharePoint?

We are using SP2016 on-premise. In order to handle security test I prepared a PowerShell script to test upload with PUT/POST. $Digest = $response.getcontextwebinformation.FormDigestValue $headers = ...
2
votes
1answer
111 views

Can SharePoint 2010 support validateRequest=“true”?

By default, web application web.configs have validateRequest="false". Changing it to true breaks SharePoint significantly, based on my own trials. People Pickers don't work, half the form pages don't ...
0
votes
1answer
30 views

SharePoint 2016 Online Information List out of sync

Help! I'm adding users to SP Security Groups but they aren't updating on the Information List so users keep getting the Request Access page when then click on a link. First and most important how ...
2
votes
1answer
202 views

What exactly “manage trust” in CA is doing? (on-premise)

I have experience on setting up SP2010, 2013 and 2016. In order to install SSL cert and to support https to browse SharePoint, beside install the cert in IIS, usually we need to import the certificate ...
2
votes
2answers
50 views

When opening a file, a warning 'insecure or coming from untrusted source' appears

I inherited SharePoint without knowing anything about it and it crashed hard a few weeks ago but we were able to restore most functionality and this is the only thing that is left. When I open any ...
0
votes
2answers
83 views

Sharepoint 2013 limited access

quick question - we have a bunch of libraries from A to Z with broken permissions and dedicated SP groups to them only. The only issue we've got is with one particular library - all the other groups ...
7
votes
2answers
22k views

How do I disable “Get a Link” & “Share”

My department is exploring SharePoint as an alternative to fileshares. Typically we create documents, then email links to the document. it seems there are many types of links, which is confusing and ...
1
vote
2answers
2k views

Remove user/group from everyone group SharePoint online

Is there a way to exclude a user or group from the 'everyone' security group in SP Online? The reason I ask is we have blog site which everyone needs to be able to contribute to, simple - but we ...
1
vote
0answers
109 views

Excessive Vulnerability Count in Yeoman SharePoint Generator

When I run yo @microsoft/sharepoint and pick standard options for a SharePoint Online WebPart with No JavaScript framework, NPM shows 1956 vulnerabilities with 140 of them being high priority. I ...
0
votes
0answers
200 views

Location Based Access To SharePoint Online Site Collection

Currently, there is an IP address location restriction applied in Azure to prevent access to all of our O365 tenant. Access to our tenant from outside of our organisation is disabled based on an IP ...
1
vote
2answers
973 views

Not able to break permission using SharePoint 2013 Designer Workflow

I'm unable to break permission using SharePoint 2013 Designer Workflow, it throws this error: {"error":{"code":"-2147024891, System.UnauthorizedAccessException","...
0
votes
2answers
843 views

“The server farm account should not be used for other services”, but isn't in any group

I have 2 accounts setup form my SharePoint Server (SPAdmin and SPServices). SPAdmin is in the local server's administration group and is the Farm Admin. I am running SharePoint 2013 Enterprise. In ...
3
votes
4answers
3k views

How do I find out what a group has permission to?

I'm cleaning up a farm that has loads of junk groups on it. Is there an easy way to tell if any of these groups have been assigned access to anything? The intention is to delete groups that have ...
0
votes
0answers
171 views

Can I disable “Allow double escaping” on a SharePoint web site?

We're working on hardening our SharePoint server, and STIG V-76825 IISW-SI-000229 mandates that "Double encoded URL requests must be prohibited by any IIS 8.5 website". Basically, editing the Request ...

1
2 3 4 5
13