locked
How do you block anonymous user access to layout pages and allitems list views on an external-facing MOSS website? RRS feed

  • Question

  • I have an external facing MOSS 2007 web application.  Anonymous access is enabled for the Internet zone in Central Admin for this web application.

    The issue here is that we have a request from management to block anonymous users from accessing the layouts pages (such as _layouts/viewlsts.aspx) if they happen to guess the URL for this page.  They also don't want anonymous users looking at the Allitems.aspx view for document libraries within the site. 

    What is the best way to approach these issues that won't block administrators of the site from being able to easily access the same layout pages? 

    Tuesday, August 30, 2011 7:28 PM

Answers

All replies

  • Turn on the ViewFormPagesLockdown feature that's exactly what it was designed for.  You will need to disable/re-enable anonymous access after activating the feature to get it ti take effect.  Take a look at the following article:

    http://technet.microsoft.com/en-us/library/cc263468(office.12).aspx#section6


    Paul Stork SharePoint Server MVP Chief SharePoint
    Architect: Sharesquared Blog: http://dontpapanic.com/blog
    Twitter: Follow @pstork
    • Proposed as answer by Rashu,Rahul Thursday, September 1, 2011 2:16 AM
    • Marked as answer by Rock Wang– MSFT Monday, September 5, 2011 3:03 AM
    Tuesday, August 30, 2011 7:54 PM
  • Hi,

     

    Did you resolve your issue? If you have any questions, feel free to reply to the forum.

     

    Thanks,

    Rock Wang

    Forum Support

    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    Regards, Rock Wang Microsoft Online Community Support
    Thursday, September 1, 2011 2:14 AM
  • Yes, Paul's answer worked.  Thank you.

    Wednesday, September 14, 2011 12:06 AM