Office SharePoint Server Security Guide

Abstract

This guide describes how security is implemented in Microsoft Office SharePoint Server 2007. The audiences for this guide include information architects, IT generalists, and program managers who are planning to make Office SharePoint Server 2007 sites accessible from the Internet.

This guide includes the following parts:

Part 1 — Plan site and content security

Part 1 of this guide describes the permissions that control access to your sites and the content in your sites. It also discusses security related to implementing Excel Services, search features, and Shared Services Providers (SSPs).

Part 2 — Plan for authentication

Part 2 of this guide describes the authentication methods that are supported by Office SharePoint Server 2007, discusses the authentication configuration settings that need to be planned for individual Web applications, and includes sample configuration settings for several common forms authentication and Web single sign-on (SSO) authentication providers.

Part 3 — Logical architecture design sample

Part 3 of this guide describes a secure logical architecture design that incorporates the most common types of sites and the most common classes of users. The design incorporates secure recommendations for authentication, SSPs, Internet Information Services (IIS) application pools, Web applications, zones, and zone policies.

Part 4 — Deploying Office SharePoint Server 2007 in a secure manner

Part 4 of this guide describes practical secure configurations for specific server roles. The guidance for each server role includes recommended secure settings for the network, the operating system, and the applications that are installed, including IIS, the Microsoft.NET Framework, and Microsoft SQL Server database software. Part 4 also addresses security requirements and recommendations for planning for security roles, for configuring administrative and service accounts, and for implementing SSO for access to external data systems.

 

For more information read the Office SharePoint Server Security Guide

 

del.icio.us tags: MOSS, Security, SharePoint, Microsoft, Office

Technorati tags: MOSS, Security, SharePoint, Microsoft, Office