A secondary site collection administrator must be defined when creating a new site collection.

From SharePoint 2010 Security Technical Implementation Guide (STIG)

Part of SRG-APP-000062-COL-000046

Associated with IA controls: ECLP-1

Associated with: CCI-000037

SV-38149r2_rule A secondary site collection administrator must be defined when creating a new site collection.

Vulnerability discussion

If a site reaches its maximum size, users will be denied access until an administrator fixes the problem. Having a secondary administrator reduces the risk of having a Denial-of-Service on a site. If the site reaches its maximum size, the secondary administrator can fix the problem if the primary administrator is not available. In some situations, having a secondary site administrator could be inappropriate for reasons of control or confidentiality.

Check content

This check should be marked not applicable if the farm is used only for the support of mySites. 1. In SharePoint Central Administration, click Application Management. 2. On the Application Management page, in the Site Collections list, click Change site collection administrators. 4. For each Site Collection, review Secondary Site Collection Administrator. 5. Mark as a finding if Secondary Site Collection Administrator is not defined unless the site collection is for mySites.

Fix text

1. In SharePoint Central Administration, click Application Management. 2. On the Application Management page, in the Site Collections list, click Change site collection administrators. 4. For each Site Collection, define a Secondary Site Collection Administrator unless the site collection is for mySites. 5. Select OK.

Pro Tips

Powered by sagemincer