Microsoft Sharepoint Products and Technologies Resource Kit eBook

666 Part VII: Information Management in SharePoint Products and Technologies
Administrative Policies
In many organizations, we often find that there is poor communication between the
human resources department and the system administration people. Reasons for this
vary from company to company, but it is common for the system administrators to
be some of the last people to learn that a person has changed departments or has
left the company.
In SharePoint Portal Server 2003, when a user account is deleted in Active Directory,
that deletion is not implemented in the user profile database in SharePoint Portal
Server 2003. Even though the account is marked for deletion in the user profile database,
those accounts must still be deleted manually by a SharePoint administrator.
If you need to remove a user’s profile from the user profile database before it
is removed through a full import, you will need to propagate policies to this effect.
In this domain area, here are some issues to consider:
■ Worker status changes are sent to System Administrators in a timely fashion.
■ Users must inform System Administrators about changes in status.
■ Transfer of ownership of information after user leaves company.
■ Schedule of file deletion after user leaves company.
■ User notifications need to be cleaned up by the SharePoint Administrator.
Logging Events
One of the ways to troubleshoot any system is to have a robust logging system in
place that can help you troubleshoot problems should they arise. One area to log for
SharePoint Products and Technologies is the Internet Information Services (IIS) platform.
Because all of the client calls will come through IIS to the Windows SharePoint
Services filter, you can capture who is connecting, when they are connecting, and
which pages they are requesting. In addition, you can purchase third-party software
that will give you more vigorous reporting capabilities.
Logging is also a security concern because you can track attack vectors that
hackers might use to compromise your system. A robust logging system is essential
for good security, and those logging policies to be considered that relate to Share-
Point Products and Technologies include the following:
■ Logs are required for all application systems that host sensitive information.
■ Logs must support auditing requirements.
■ Logs must provide accountability and traceability during an audit.
■ Content of SharePoint Products and Technologies logs must include specified
information.