SharePoint Security Concepts

Share point Security is a hard topic these days it is show that data needs to be protected. At the same time, this is very great oportunity. amount of data still remains largely unprotected. If we see this paragraph we might agree with me that it is quite complex to implement security strategies. The good news is though, "Security and SharePoint" doesn't equalent to everything possible nothing is imposible.

The Microsoft SharePoint manage in general, security configuration in SharePoint 2007 is handle by different team of people at different levels. IT administrators diclayer which authentication and security policies are in effect, in sharepoint 2007. as part of the all server farm configuration.

They also need to configure authorization for the farm's shared services. Separately then, site collection administrators and site owners manage the content authorization. Both are equally important, as the best security measures fail if a content administrator accidentally gives access to the wrong person. Therefore even audits and logs are important to monitor usage, and to detect any loopholes and mistakes in the overall configuration.

The Microsoft SharePoint Security is a more about Authentication and Encryption, there are some services they always check authentication. and there is no shortage of choices for both with SharePoint 2007. So, planning authentication is a mandatory first step! "Out of the box", SharePoint 2007 supports nine authentication methods.

NTLM it is simply the Windows authentication and Kerberos it is also authentication service are offered during installation, but I recommend to get started with NTLM, as Kerberos requires "special configuration by the domain administrator", while NTLM works without further hassle.

Source: http://www.finalcandidate.com/en/tandp/Pages/SharePointSecurityConcepts.aspx