Ensure access to SharePointEmailws.asmx is limited to only the server farm account

MittelStufe 1Manuelle Prüfungsharepoint

Beschreibung

Restrict access to the Microsoft SharePoint Directory Management Service by securing the file associated with this service, which is SharePointEmailws.asmx. Only the SharePoint server farm account requires access. Manual review.

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Open %CommonProgramFiles%\Microsoft Shared\Web Server Extensions\16\ISAPI\SharePointEmailws.asmx > Properties > Security (or run Get-Acl on it). Verify only WSS_RESTRICTED_WPG (the farm account) has Modify/Write access to the file.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Edit the file ACL so only WSS_RESTRICTED_WPG has modify access to SharePointEmailws.asmx; remove write/modify for other principals.

Eigenschaften

Betriebssysteme: Beliebig
Tags: sharepointpermissions
Referenz: CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 1.1 Ensure access to SharePointEmailws.asmx is limited to only the server farm account