Ensure access to SharePointEmailws.asmx is limited to only the server farm account

中レベル 1手動レビューsharepoint

説明

Restrict access to the Microsoft SharePoint Directory Management Service by securing the file associated with this service, which is SharePointEmailws.asmx. Only the SharePoint server farm account requires access. Manual review.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Open %CommonProgramFiles%\Microsoft Shared\Web Server Extensions\16\ISAPI\SharePointEmailws.asmx > Properties > Security (or run Get-Acl on it). Verify only WSS_RESTRICTED_WPG (the farm account) has Modify/Write access to the file.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Edit the file ACL so only WSS_RESTRICTED_WPG has modify access to SharePointEmailws.asmx; remove write/modify for other principals.

プロパティ

オペレーティングシステム: すべて
タグ: sharepointpermissions
参照: CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 1.1 Ensure access to SharePointEmailws.asmx is limited to only the server farm account