- OC Scanner is placed directly on the Sharepoint server.
- OC Scanner scan file is created on the OC Configurator server, with the appropriate credentials/IP/FQDN, and Scheduler details.
- User account that is running the scan has permissions on the Sharepoint server software itself.
- Setting the correct scan user permissions
- Login to the Sharepoint server, as an existing Sharepoint Administrator.
- Open the Sharepoint Management shell.
- On the Sharepoint Management shell execute the following Powershell script:
$allFarmWebApplications = Get-SPWebApplication
foreach($webApplication in $allFarmWebApplications)
{
$w = Get-SPWebApplication $webApplication.Url;
$w.GrantAccessToProcessIdentity("DOMAIN\\USER")
}
To execute the above script save it as a .ps1 file, switch to the folder containing the script, and execute ./ps-script.ps1 (example script name). The DOMAIN\USER part in the above script should be replaced by the user account which is running the scan. The given script will assign the correct Sharepoint permissions to the user account running the scan, so it can enumerate the Sharepoint users on the given server.