Secure MOSS site : Lockdown

Dear Reader,

Thought i should blog this today. As we know MOSS 2007 replaces Microsoft Content Management System, the MOSS sites are exposed to internet with the help of publishing site templates. I have noticed in many sites that the other collaboration pages like Allitems.aspx, Dispforms.aspx and other forms are accessible when we browse the site as a anonymous user. Hope the developers are not aware of the Lockdown feature avalible in sharepoint MOSS 2007. If we enable this feature the anonymouse users cannot access these collabration related pages.

To enable this feature the following command needs to be executed:

stsadm -o activatefeature -url -filename ViewFormPagesLockDown\feature.xml

If you have tried any other alternative way to implement this feel free to write it down.

Hope this helps & create an awareness to make your MOSS site safe & secured.

Reference: technet.microsoft, blogs.msdn

Thanks
Fauzi

microsoft IE7 security patch

Hi...

Hope you are aware of the security flaw found in IE7 last week on December 16th.

BBC Link

Microsoft has released a security patch which could be downloaded and installed on the following link.

Security patch

This update addresses the vulnerability discussed in Microsoft Security Bulletin MS08-078 which was regarding the Security issues that has been identified which could allow an attacker to compromise a computer running Microsoft Internet Explorer Version 7 and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, please restart your computer.

Hope it helps

Regards
Fauzi ~ 4Z

Wish you Happy New Year 2009