You need to ensure that anonymous users cannot view application-level pages

You configure a SharePoint Server 2010 Service Pack 1 (SP1) server farm. You have a site collection
named http://www.contoso.com based on the Team Site template that has anonymous access
enabled. You need to ensure that anonymous users cannot view application-level pages. What
should you do?

You configure a SharePoint Server 2010 Service Pack 1 (SP1) server farm. You have a site collection
named http://www.contoso.com based on the Team Site template that has anonymous access
enabled. You need to ensure that anonymous users cannot view application-level pages. What
should you do?

A.
From the SharePoint 2010 Management Shell, run the following cmdlet:
Disable-SPFeatureDocumentSet -Url “http://www.contoso.com”

B.
Add User1 to the Site Owners group.

C.
From the SharePoint 2010 Management Shell, run the following cmdlet:
Disable-SPFeatureViewFormPagesLockdown -Url “http://www.contoso.com”

D.
From the SharePoint 2010 Management Shell, run the following cmdlet:
Enable-SPFeatureViewFormPagesLockdown -Url http://www.contoso.com

E.
From the SharePoint 2010 Management Shell, run the following script:
$spWeb = Get-SPWeb “http://www.contoso.com/sales” $spWeb.BreakRoleInheritance($false)
$spWeb.Dispose( )

F.
From the SharePoint 2010 Management Shell, run the following script:
$spWeb = Get-SPWeb “http://www.contoso.com/sales” $spWeb.BreakRoleInheritance($true)
$spWeb.Dispose( )

G.
Add User1 as a site collection administrator.

H.
GrantDesign permissions to the Sales SharePoint user group.

Explanation:
If you’re developing an anonymously accessible SharePoint website, especially an internet-facing
one, you may have noticed that you’re SharePoint Forms pages are also accessible to anonymous
users. For example http://SERVER/_layouts/viewlsts.aspx, _vti_bin web services etc. Typically we
don’t want this, so how do you prevent anonymous users from accessing these pages? The following
steps will help you to do it. This feature is known as lock down feature which is by default enabled
for publishing sites.
To enable this feature
First remove all anonymous access from the site.
Then open command prompt and go to the folder C:\Program Files\Common Files\Microsoft
Shared\WebServer Extensions\14\BIN
First check whether the feature is activated or not; you can use the command below to check it
get-spfeature -site http://urlIf ViewFormPagesLockDown is listed, it’s enabled.
If not listed you have to enable it with the command below
To activate the Activate Feature:
stsadm -o activatefeature -url -filename ViewFormPagesLockDown\feature.xml
http://mackenzie-sharepoint.blogspot.co.uk/2011/12/sharepoint-2010-
viewformpageslockdown.html
http://sharepointlink.blogspot.co.uk/2010/05/anonymous-web-service-to-sharepoint.html



Leave a Reply 0

Your email address will not be published. Required fields are marked *