Questions tagged [security]

Security is the protection of information and property from theft.

Filter by
Sorted by
Tagged with
0
votes
1answer
375 views

SP2010 “NT AUTHORITY\Authenticated Users” group versus the SP2013 “Everyone” group?

In my test SharePoint 2010 instance, I notice SharePoint has a special group called NT AUTHORITY\Authenticated Users In my SharePoint 2013 instance, I notice I have a special group called Everyone ...
2
votes
0answers
155 views

SharePoint Online Access Requests for Users not in Directory

We have a requirement for users not in our O365 tenant to be able to submit an access request to our SharePoint Online site. Normally, if a user in a tenant doesn’t have access to a site, they will ...
1
vote
0answers
31 views

Intended Audience Header/Banner and Security Control

We are currently in SharePoint 2013 on-prem and soon to be in 2016 on-prem (we are not going to SharePoint online yet). Our goal is to provide a clear statement/header/banner of who should have ...
1
vote
2answers
58 views

How can a specific user be allowed to upload a file to a library, but not read that file?

A specific account will upload files from many different machines all over the internet to one folder in a SharePoint library. Content of the files is sensitive in nature, so if a malicious attacker ...
2
votes
2answers
569 views

Can you disable Delve for a particular site?

For example, the board site is making an executive nervous that another board person can see what they are doing in delve.
2
votes
3answers
9k views

How to disable “edit page” for members in Sharepoint?

I want to allow members to edit/create/delete/update list items, but when I allow permissions "edit", the edit page link is accessible to them: I've tried solutions, such as: Break inheritance and ...
2
votes
2answers
39 views

Security Update Application

Microsoft has released a Security Update which applies to SP2010/13/16. Description of the security update for SharePoint Server 2010: January 9, 2018 CVE-2018-0789 | Microsoft SharePoint Elevation ...
1
vote
2answers
290 views

security updates for SP 2013 farm

I am trying to update security updates for SP 2013. I tried to download one security update it has almost 52 items.How can I install these all items in one shot or quickly.Please suggest quickly.
1
vote
3answers
80 views

Boss needs SharePoint site only he can access (so not even administrator can)

I have a good one for ya today. Let me give you a quick backstory so you may understand these needs better. We had an employee who was a system administrator at my current company. Since he was a ...
1
vote
2answers
30 views

same web application there is any way to set farms authentication only to a specific site or site collection without extend or change host name

Hi i configured windos and Farms based authentication for web application,when i login to secured pages it redirect to login page and has options to select windows and farms authentication, but in ...
0
votes
2answers
974 views

Setting “NtfsDisable8dot3NameCreation” on Win Server 2012 running SharePoint 2013

I have a public SharePoint 2013 site with publishing feature as well as custom applications deployed. Recently we had a security audit on the server by and independent security analyst to identify ...
0
votes
1answer
211 views

Whitelist SharePoint Online Hosted App?

The scenario is this: We have a Web Service which is hosted in Intranet Network Plan is to expose Web Service to Internet so SharePoint Online Hosted App can access it Problem is security. If there ...
1
vote
1answer
31 views

Feed request Ip

In one of our Office365 Sharepoint pages, we are consuming a RSS Feed. The feed provider filters out the requests from unknown IP's. It looks like the Request IP occasionally changes, so the feed ...
1
vote
1answer
35 views

Lists that can only be opened by specific users

I want to use SharePoint 2007 or 2010 for our periodic access reviews. The current process is I have an excel sheet in the sharepoint and line managers open it to review the access of their staff. The ...
0
votes
1answer
872 views

User Account LockOut - SharePoint 2013

I have a control requirement: AC-7 Unsuccessful Logon Attempts The information system must define and enforce a limit on the number of consecutive invalid login attempts by a user. And it should: ...
0
votes
1answer
1k views

SharePoint List- Group Item/Row Level Security

I have a list of more than 4000 records for global sales team. I would like to set security permissions for viewing and editing according to the country column value. The issue is that I need to set ...
3
votes
1answer
66 views

A user seemingly modified a document after their account was deactivated

Our company uses Office 365. A user left and our IT team confirms that her account was disabled in June. There's a document in SharePoint showing that she created it in April (ok) and edited it in ...
0
votes
0answers
178 views

Location Based Access To SharePoint Online Site Collection

Currently, there is an IP address location restriction applied in Azure to prevent access to all of our O365 tenant. Access to our tenant from outside of our organisation is disabled based on an IP ...
1
vote
0answers
19 views

Is there any security concerns to enable http options?

My recent vulnerability assessment report flagged the HTTP OPTIONS is enable as unsecure practice. However, developer told me that it is necessary to enable so that end user may use the MS Explorer ...
2
votes
1answer
107 views

Can SharePoint 2010 support validateRequest=“true”?

By default, web application web.configs have validateRequest="false". Changing it to true breaks SharePoint significantly, based on my own trials. People Pickers don't work, half the form pages don't ...
1
vote
0answers
159 views

Why are SP security updates showing as Missing/Required?

Let me preface by saying, I already ran the Get-SPProduct -local but I think it's because the security updates are not there. I have a couple questions regarding security updates and patching as this ...
0
votes
1answer
325 views

Should we disable client integration in internet site (anonymous access) due to WebDAV issue?

There is a link that MS advises to disable client integration feature to prevent cross site scripting "In the event there is a cross site scripting attack using WebDAV by contributors to a site, a ...
0
votes
2answers
1k views

How to create Security group In SharePoint 2013

In SharePoint Online we have group called Security group. Please see the image below. I have to create Security Group in SharePoint 2013 (On-premise). How can I create Security Group? What is ...
3
votes
0answers
18 views

Site Classifications and Better Security Control/Alerts

We are looking into using Site Classifications for our SharePoint environments. Classifications are great in that you can apply a global image/stamp/badge @ the top title section of the site and also ...
2
votes
1answer
323 views

JavaScript\REST check if current user belongs to SECURITY group

By security group I mean groups like "Everyone", "Everyone except external users", "All Users (windows)" and so on. In people picker these groups come with EntityType "SecGroup".
4
votes
1answer
80 views

Sharing folders on SharePoint and variance between “Shared with” and “Advanced”

Is there a reason that when I click on a folder in SharePoint that I can see a list of people that the folder is shared with that differs from the list I see when I click on Advanced? For example, I ...
-1
votes
1answer
143 views

Findings from Vulnerability Assessment & Penetration Testing

below Findings from Vulnerability Assessment & Penetration Testing, kindly help me anyone done this in SharePoint 2013 1- Cryptographic Padding Oracle This website is vulnerable to Oracle ...
3
votes
1answer
2k views

Security Implications of Deactivating Limited-access User Permission Lockdown Mode Feature

There is a site collection on my farm that is accessible outside of our network but does not allow anonymous access. Presently, we are experiencing some permissions issues where users need access to ...
6
votes
2answers
19k views

How do I disable “Get a Link” & “Share”

My department is exploring SharePoint as an alternative to fileshares. Typically we create documents, then email links to the document. it seems there are many types of links, which is confusing and ...
2
votes
2answers
662 views

Does SPFx have special access to REST endpoints?

In the latest SPFx video https://www.youtube.com/watch?v=6r6MqUDzKvI The SPFX Wizard explains how to add an escape function Quoting the SPFx Wizard: "Escape the value for any characters that ...
1
vote
1answer
326 views

Filter List based on permissions

I am compiling a list for a company in sharepoint. How can I set permissions on this based on department? For example, if we have Sales, Accounts, Stores etc. How can this be set so any employee in ...
1
vote
0answers
60 views

SharePoint PWA 2013 - Visitor Access Issue

so I am working with SharePoint 2013 Project Web App security and it's giving unexpected access issues. So in PWA security Manage Group settings, I added a new user to the Portfolio Viewers group, ...
2
votes
1answer
57 views

Security Issues with App-only policy

I have been working on a lot of applications with app-only policy and just wanted to make sure that I am not overlooking any security vulnerability. Below is a sample scenario for discussion: ...
0
votes
2answers
106 views

Is it safe to add Visitors users who should ONLY have Read permission on my sites, as Group Owners

I have a team site collection inside my sharepoint enterprise server 2013. now i have the built-in group named "Visitors" which have "Read" permission level. and i added multiple AD groups and single ...
0
votes
1answer
32 views

Restricting Menus on a Site Template

I have a workflow that creates a site based on a template. Is there a way to restrict menu options based on a security group? I have tried Audience Targeting which works fine since I just need to ...
1
vote
1answer
2k views

Encrypt sharepoint online list columns

I'm somewhat proficient in development but have basic knowledge about SharePoint and Sharepoint Online. I would like to add an encryption thing to my Sharepoint Online list columns make it possible ...
4
votes
1answer
535 views

How to save the list item with document for anonymous user?

we have internet portal and anonymous users can view and visit the site and we have one page that anonymous user can fill the form and upload small size of documents less than 500 KB and it will save ...
1
vote
0answers
46 views

FxCop Code analysis error for Provider Hosted App

I am running FxCop tool on my provider hosted app. But it is giving an error in web.config file like CA3116 DenyUnauthorizedUsers You are explicitly allowing all authenticated users for whom no ...
1
vote
0answers
277 views

Sharepoint 2016 shows wrong username. How i can investigate further?

We have a SharePoint 2016 Farm with Kerberos Authentication behind an Apache Reverse Proxy. This worked fine the last months. Now, when my colleague or I open SharePoint in the Internet Explorer the ...
0
votes
1answer
24 views

Document library permissions don't matter

I've created a document library inside a SharePoint Foundation 2013 site. I have broken inheritance to the folder and assigned a single user. However, everyone in the company can still access, modify,...
1
vote
0answers
50 views

SharePoint uses kerberos authentication communicate to AD and impact for changing password krbtgt Account

Hi Is SharePoint uses kerberos authentication communicate to AD,SQL Server or any other Microsoft products by default ? for product to product communication Microsoft using kerberos authentication by ...
0
votes
2answers
559 views

Custom group not visible in user.aspx page?

what is difference between people and groups and permissions in site settings? i created some custom groups from _layouts/15/groups.aspx page and these not showing in /_layouts/15/user.aspx page.
0
votes
1answer
6k views

Login failed for user Reason: Failed to open the explicitly specified database SharePoint config for farm admin user

I recently added a new user into farm administrators group from central administration website, and from SQL server I found below logs: Login failed for user 'xxxx\usr1'. Reason: Failed to open the ...
0
votes
1answer
20 views

InfoPath Security

here is dilemma, i have infopath form published in form library. This is for when new employees join the company. Manager needs to fill the form. Only managers have access to this library and no one ...
0
votes
3answers
3k views

How to get current User's group using Client object model C#

I want to get all group that current user is member in SharePoint server 2010 using Client Object Model C#. Anyone help me.
2
votes
3answers
515 views

Conflict results for users with “restricted read” permission inside my site collection

I have a team site collection inside my SharePoint 2013. Now some users have restricted read permission inside this site collection. Now from my previous experience with permission I realize that ...
1
vote
2answers
168 views

Server Local Administrators are Farm Administrator is required?

when we create new farm the server local administrators accounts users are farm administrators as BuilIN\Administrators -When i check local administrators there is Domain/Domain Admins Is if we ...
1
vote
1answer
274 views

Permissions to AD group does not work until refresh

I have an AD group "superusers" which has direct access to some list items in a list. Using Check Permissions show that even though the AD group is listed with access to the list item, it does not ...
1
vote
1answer
95 views

How can i prevent Members of a SharePoint Group to see other members of the same group?

How can i prevent Members of a SharePoint Group to see other members of the same group? The user should not see other members.
0
votes
2answers
799 views

“The server farm account should not be used for other services”, but isn't in any group

I have 2 accounts setup form my SharePoint Server (SPAdmin and SPServices). SPAdmin is in the local server's administration group and is the Farm Admin. I am running SharePoint 2013 Enterprise. In ...

1
2
3 4 5
12