SharePoint Security Management - Lessons Learned
•
32 likes•14,846 views
When working with SharePoint On-Premises or on Office 365, we can't ignore our Security Management. Many things we do can lead to further problems or even worse security breaches. This is a session recording of a webinar recorded and available http://en.share-gate.com/blog/sharepoint-security-management-lessons-learned which includes tips and best practises concerning your SharePoint Security.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to SharePoint Security Management - Lessons Learned
Similar to SharePoint Security Management - Lessons Learned (20)
More from Benjamin Niaulin
More from Benjamin Niaulin (16)
Recently uploaded
Recently uploaded (20)
SharePoint Security Management - Lessons Learned
- 2. ! ! by Benjamin Niaulin, a SharePoint GEEK @bniaulin share-gate.com/blog
- 4. WHY ARE WE HERE TODAY?
- 5. A recent study by Emedia, covered in full by InfoSecurity magazine in February 2013, found that only about one-third of organizations with 25-5000 users employing SharePoint have security policies covering the platform. Even worse, just over one-fifth, or 22%, admitted that they don't have one and won't be making one.
- 7. I HAVE FULL CONTROL
- 8. BUT NOW I LOST CONTROL
- 9. “I SWEAR I DIDN’T DELETE THE LIBRARY BUT NOW IT’S GONE”
- 10. WHO HAS ACCESS TO WHAT?
- 11. “WE DON’T PUT SENSITIVE DATA IN SHAREPOINT! WE STORE THEM IN ANOTHER SYSTEM WHERE WE LIMIT ACCESS AND PASSWORD ENCRYPT THOSE OFFICE DOCS WHEN SHARING THEM VIA EMAIL.”
- 12. “UMMM…. I REMOVED MYSELF AS AN ADMINISTRATOR OF THE SITE”
- 13. “MY SHAREPOINT IS SO SLOW…”
- 14. HOW DO YOU MANAGE SECURITY ON SO MANY DIFFERENT THINGS? (SHAREPOINT, OFFICE 365, ONEDRIVE FOR BUSINESS)
- 15. SO HOW CAN WE GET STARTED AND LEARN FROM OUR PAST EXPERIENCE?
- 16. FIRST, GET TO KNOW SHAREPOINT
- 17. AND UNDERSTAND THAT NOT EVERYTHING CAN BE ASSIGNED SECURITY
- 18. SITES
- 19. LISTS/LIBRARIES FOLDERS / DOCUMENTS / ITEMS
- 20. NO YOU CANNOT PUT SECURITY ON YOUR SHAREPOINT VIEWS
- 21. AND IT’S THE SAME FOR YOUR COLUMNS AND CONTENT TYPES
- 22. BUT HOW DOES IT ALL WORK? INHERIT PERMISSIONS? BREAK INHERITANCE?
- 23. INHERITED PERMISSIONS SITE COLLECTIONS SITES CHILD SITES LISTS & LIBRARIES FOLDERS ITEMS & DOCUMENTS BY DEFAULT Image inspired by Bobby Chang - Planet Technologies
- 24. SITE COLLECTIONS SITES CHILD SITES LISTS & LIBRARIES FOLDERS ITEMS & DOCUMENTS BREAK INHERITANCE Image inspired by Bobby Chang - Planet Technologies
- 25. SITE COLLECTIONS SITES CHILD SITES LISTS & LIBRARIES FOLDERS ITEMS & DOCUMENTS BREAK INHERITANCE Image inspired by Bobby Chang - Planet Technologies LIMITED ACCESS
- 26. LIMI TED ACCESS FAMOUS WHY IS IT EVERYWHERE AND CAN YOU DELETE IT?
- 29. BUT BE CAREFUL WITH ASSIGNING PERMISSIONS EVERYWHERE
- 30. Permissions and Security Scopes • Every time permission inheritance is broken a new security scope is created • Security Scope is made of up principles: • Domain users/groups • SharePoint users/groups • Claims • Be aware of “Limited Access” • Limitations • Security Scopes (50K per list) • Size of Scope (5K per scope) Microsoft SharePoint Boundaries and Limits: http://technet.microsoft.com/en-‐us/library/cc262787.aspx © 2014 Protiviti Consulting Private Ltd. An Equal Opportunity Employer.
- 31. LESSON #1 DON’T GIVE FULL CONTROL TO EVERYONE
- 32. THEN HOW IS ACCESS GIVEN TO PEOPLE EXACTLY?
- 33. SP GROUPS VS AD GROUPS CHANGING MEMBERS OF SP GROUPS WILL LAUNCH A FULL CRAWL AT NEXT PASS TO CALCULATE ACLs MSDN Security guidance on SP Groups vs AD Groups
- 34. LESSON #2 ALWAYS USE AD GROUPS WHEN POSSIBLE
- 36. LESSON #3 NEVER GRANT PERMISSIONS DIRECTLY TO A USER
- 37. “HEY ANTONIO, CAN YOU TELL ME WHAT BENJAMIN HAS ACCESS TO IN OUR SHAREPOINT?”
- 38. …
- 39. OK… YOU CAN AT LEAST TELL ME ALL THE EXTERNAL USERS THAT HAVE ACCESS RIGHT? SIGH…
- 40. WHAT YOU WILL NEED IS Governance http://en.share-gate.com/blog/real-world-sharepoint-governance-plan
- 42. but keep it simple. it’s a set of rules and guidelines to help, no one is going to read that 27 page PDF
- 43. AND THE NEW “SHARE” WILL NOT MAKE IT EASY TO MANAGE AND CONTROL
- 44. THAT’S WHY SOME TRAINING IS IMPORTANT
- 45. REAL TRAINING! NOT A PAMPHLET IN-CLASS | SELF-SERVICE VIDEOS | DOCUMENTATION | PROVIDE A TRAINING KIT FOR NEW SITE OWNERS
- 46. MAYBE A GOOD TIME TO LEVERAGE OFFICE 365 VIDEO?
- 47. LESSON #4 HELP THEM UNDERSTAND WHY ITEM-LEVEL PERMISSION IS BAD
- 48. IN SHAREPOINT, YOU DON’T SEE WHAT YOU DON’T HAVE ACCESS TO
- 49. BUT YOU SEE EVERYTHING YOU HAVE ACCESS TO WITH SEARCH. PROPERLY PLAN THE ACCOUNTS YOU WILL USE TO INDEX SHAREPOINT AS WELL.
- 50. AND OF COURSE IT GOES BEYOND WHAT WE SAW TODAY
- 51. « Google the words ‘View All Site Content’ see what happens » -Sean Wallbridge ANONYMOUS ACCESS AND THE EXPOSURE RISKS WITH SHAREPOINT
- 52. DID YOU THINK OF RETENTION AND YOUR ARCHIVES? HOW IS SECURITY MAINTAINED?
- 53. KNOW ABOUT IRM AND RMS
- 54. BUT SECURITY GOES BEYOND SHAREPOINT
- 55. TIPS FROM ANTONIO MAIO Claims Server SQL Authentication
- 56. @BNIAULIN @ANTONIOMAIO2 THANK YOU!