Ensure access to SharePointEmailws.asmx is limited to only the server farm account

MoyenneNiveau 1Revue manuellesharepoint

Description

Restrict access to the Microsoft SharePoint Directory Management Service by securing the file associated with this service, which is SharePointEmailws.asmx. Only the SharePoint server farm account requires access. Manual review.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Open %CommonProgramFiles%\Microsoft Shared\Web Server Extensions\16\ISAPI\SharePointEmailws.asmx > Properties > Security (or run Get-Acl on it). Verify only WSS_RESTRICTED_WPG (the farm account) has Modify/Write access to the file.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Edit the file ACL so only WSS_RESTRICTED_WPG has modify access to SharePointEmailws.asmx; remove write/modify for other principals.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: sharepointpermissions
Référence: CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 1.1 Ensure access to SharePointEmailws.asmx is limited to only the server farm account