Microsoft SharePoint 2010 Unleashed

Security Consideration for SharePoint Extranet Solutions

Security is a complex topic that must be balanced with business requirements and goals. Any system that must be accessed externally will always be more vulnerable than the system within an intranet environment. Security also has its trade-offs, such as usability, supportability, security, and complexity. Each of these affect the others, and has to be weighed by the business and its requirements and goals to establish the proper security model for their specific scenario. The following list should be considered when building extranet solutions in SharePoint:

• Use the “least privilege” accounts and security approach. This approach reduces the security risk when any account is compromised ...