Ensure access to SharePointEmailws.asmx is limited to only the server farm account

MediaNivel 1Revisión manualsharepoint

Descripción

Restrict access to the Microsoft SharePoint Directory Management Service by securing the file associated with this service, which is SharePointEmailws.asmx. Only the SharePoint server farm account requires access. Manual review.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Open %CommonProgramFiles%\Microsoft Shared\Web Server Extensions\16\ISAPI\SharePointEmailws.asmx > Properties > Security (or run Get-Acl on it). Verify only WSS_RESTRICTED_WPG (the farm account) has Modify/Write access to the file.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Edit the file ACL so only WSS_RESTRICTED_WPG has modify access to SharePointEmailws.asmx; remove write/modify for other principals.

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: sharepointpermissions
Referencia: CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 1.1 Ensure access to SharePointEmailws.asmx is limited to only the server farm account