Security

This article lists SPDocKit security related questions.

Does SPDocKit make changes to the farm?

SPDocKit uses only Microsoft provided and supported SharePoint APIs and PowerShell to retrieve information about the structure of a SharePoint farm. During load operations nothing is being changed in the farm structure.

Our load process does not require access to SharePoint databases with the exception of the SharePoint logging database that we use to gather feature usage. Access to this database is an approach supported by Microsoft to retrieve information about usage. SharePoint administrators using SPDocKit can choose not to connect to this database during load operations.

Can a saved farm configuration be viewed by everyone?

As long as the folder where snapshots are stored is protected, no one will be able to open these files. The files are not encrypted. This is handled by Windows NTFS permissions.

Where are farm permissions stored?

Permissions are stored in the SPDocKit database. You should protect the database and allow only authorized users to be able to connect to it. This is handled by the SQL Server’s built-in security features.

If the Central Administration and the websites are running in SSL, will SPDocKit also use SSL?

We use APIs, not HTTPS, to retrieve information. The product can only run on a SharePoint server, so there is no server-to-server communication that can be intercepted.

Owing to security restrictions, clients aren't able to grant access to SharePoint production farms — is there a workaround?

Syskit has helped some of the largest organizations worldwide to work around this issue by installing SPDocKit on a testing or non-production server. This is the best solution if you are unable to access the SP production server/farm.

How does SPDocKit store passwords? Is storing passwords optional or mandatory?

SPDocKit can store your passwords and products keys in the farm documentation files. If you decide to enter these, you will be prompted to provide an additional password (master password) that will be used to encrypt these files with AES 256bit encryption. You will only be able to retrieve these passwords if you provide the master password again.

How to exclude the installation folder from antivirus scans?

This article explains how to exclude the installation folder from antivirus scans in the following SharePoint applications:

• Microsoft SharePoint Standard 2016

• Microsoft SharePoint Enterprise 2016

• Microsoft SharePoint Foundation 2013

• Microsoft SharePoint Standard 2013

• Microsoft SharePoint Enterprise 2013

• Microsoft SharePoint Foundation 2010

• Microsoft SharePoint Standard 2010

• Microsoft SharePoint Enterprise 2010

• Windows SharePoint Services 3.0

• Microsoft Office SharePoint Server – Standard 2007

• Microsoft Office SharePoint Server – Enteprise2007

This folder may have to be excluded from antivirus scans when you use file-level antivirus software in SharePoint. If this folder is not excluded, you may see unexpected behavior. For example, you may receive “access denied” error messages.

Please configure your antivirus software to exclude the following folder from antivirus scanning:

Drive:\Program Files\SysKit\SPDocKit

Please note! The placeholder Drive represents the letter of the drive on which you have your SharePoint application installed. Typically, this drive letter is C.

In case you have a policy that you mustn’t exclude the whole folder, please configure your antivirus software to exclude the following file from antivirus scanning:

SPDocKit Service.exe