Security issue with SharePoint and outlook integration.
Hi, We don't want users to save confidential documents to their local machines and have found what appears to be a rather large security hole in the SharePoint 2007 and outlook 2007 integration. If you click Actions > Connect to Outlook from any document library this document library then appears in outlook under SharePoint Lists. If you then preview a document in outlook it is downloaded onto the local machine. This cached copy of the document is stored in a .pst called SharePoint Lists.pst which is in the following location %USERPROFILE%\Local Settings\Application Data\Microsoft\Outlook\SharePoint Lists.pst The issue is that this .pst can then be opened by anyone who has outlook and access to the hard drive from the machine. Picture the scenario. User has access to the Accounts are of SharePoint controled by the SharePoint security This user then previews a highly confidential set of documents via the outlook conector. This user then leaves their laptop on the train.... You can work out the rest. Does anyone have a solution for securing the Outlook and SharePoint out the box integration? Thanks David
January 21st, 2011 8:38am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics