A secondary site collection administrator must be defined when creating a new site collection.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-29373	SHPT-00-000197	SV-38149r1_rule	ECLP-1	Low

Description

If a site reaches its maximum size, users will be denied access until an administrator fixes the problem. Having a secondary administrator reduces the risk of having a Denial-of-Service on a site. If the site reaches its maximum size, the secondary administrator can fix the problem if the primary administrator is not available. In some situations, having a secondary site administrator could be inappropriate for reasons of control or confidentiality.

STIG	Date
SharePoint 2010 Security Technical Implementation Guide (STIG)	2011-12-20

Details

Check Text ( C-37519r1_chk )
1. Log on to SharePoint Central Administration as a member of the Farm Administration Group. 2. Click on “Application Management”. 3. Select “Site Collections” > Change Site Collections Administrator. 4. For each Site Collections, review Secondary Site Collection Administrator. 5. Mark as a finding if Secondary Site Collection Administrator is not defined.

Fix Text (F-32767r1_fix)
1. Log on to SharePoint Central Administration as a member of the Farm Administration Group. 2. Click on “Application Management”. 3. Select “Site Collections”> Change Site Collections Administrator. 4. For each site, define a Secondary Site Collection Administrator. 5. Select “OK”.