I’m currently writing a chapter (PowerShell for Microsoft SharePoint 2010 Administrators) about scripted installations in SharePoint 2010 using PowerShell. In 2010 there are a couple of cmdlets that does more or less the same thing as you do with psconfig when scripting installations today.

One of the cmdlets that needs to be used when scripting a 2010 farm using PowerShell is the Initialize-SPResourceSecurity This does the same as psconfig -cmd secureresources. A have used this hundreds of times and knows that it is, according to the technet command line reference  ”Performs SharePoint Products and Technologies resource security enforcement on the server. For example, security is enforced on files, folders, and registry keys”. Earlier I have been happy with that explanation since it’s quite obvious what it does right? But what does this really mean, what security is set and on what folders and files? It turns out that if you Google on it, everyone mentioning it says more or less the same as the sentence mentioned on Technet. This made me even more curios, and to find out you can actually run the command from the command line and get the result there or you can pipe it out to a txt file like this:

psconfig -cmd secureresources > c:\temp\secureresources.txt

The below is a copy of the result (Moss) and should give you a hint on what it actually does and what files, foldres and registry keys are affected.

Successfully secured resource ‘HKEY_LOCAL_MACHINE\Software\Microsoft\Office Server\12.0\LoadBalancerSettings’ of type ‘RegKey’ by granting security group ‘LocalService’ ‘Read’ permissions .

Successfully secured resource ‘E:\Microsoft Office servers\12.0\WebServices\Root’ of type ‘Directory’ by granting security group ‘Users’ ‘Read, Execute’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\Software\Microsoft\Office Server\12.0\LoadBalancerSettings’ of type ‘RegKey’ by granting security group ‘WSS_WPG’ ‘Read, Write’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS’ of type ‘RegKey’ by granting security group ‘WSS_ADMIN_WPG’ ‘Full Control’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\Software\Microsoft\Office Server\12.0\LauncherSettings’ of type ‘RegKey’ by granting security group ‘LocalSystem’ ‘Read’ permissions .

Successfully secured resource ‘E:\Microsoft Office servers\12.0\’ of type ‘Directory’ by granting security group ‘WSS_WPG’ ‘Read, Execute’ permissions .

Successfully secured resource ‘E:\Microsoft Office servers\12.0\WebServices\Root’ of type ‘Directory’ by granting security group ‘NetworkService’ ‘Read, Execute’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\Software\Microsoft\Shared Tools\Web Server Extensions\12.0\WSS\Diagnostics’ of type ‘RegKey’ by granting security group ‘WSS_WPG’ ‘Read, Write’ permissions .

Successfully secured resource ‘E:\Microsoft Office Servers\12.0\Data\’ of type ‘Directory’ by granting security group ‘WSS_ADMIN_WPG’ ‘Full Control’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\Software\Microsoft\Office Server\12.0\Diagnostics’ of type ‘RegKey’ by granting security group ‘WSS_WPG’ ‘Read, Write’ permissions .

Successfully secured resource ‘E:\Microsoft Office servers\12.0\’ of type ‘Directory’ by granting security group ‘Users’ ‘Read, Execute’ permissions .

Successfully secured resource ‘E:\Microsoft Office servers\12.0\WebServices’ of type ‘Directory’ by granting security group ‘WSS_WPG’ ‘Read’ permissions .

Successfully secured resource ‘HKEY_CLASSES_ROOT\APPID\{6002D29F-1366-4523-88C1-56D59BFEF8CB}’ of type ‘RegKey’ by granting security group ‘WSS_ADMIN_WPG’ ‘Full Control’ permissions .

Successfully secured resource ‘E:\Microsoft Office servers\12.0\Logs\’ of type ‘Directory’ by granting security group ‘WSS_ADMIN_WPG’ ‘Full Control’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\Software\Microsoft\Shared Tools\Web Server Extensions\12.0\Search’ of type ‘RegKey’ by granting security group ‘WSS_ADMIN_WPG’ ‘Full Control’ permissions .

Successfully secured resource ‘C:\WINDOWS\System32\drivers\etc\HOSTS’ of type ‘File’ by granting security group ‘WSS_ADMIN_WPG’ ‘Read, Write’ permissions .

Successfully secured resource ‘E:\Microsoft Office servers\12.0\Bin\’ of type ‘Directory’ by granting security group ‘LocalService’ ‘Read, Execute’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\Software\Microsoft\Office Server\12.0\LauncherSettings’ of type ‘RegKey’ by granting security group ‘WSS_ADMIN_WPG’ ‘Read, Write’ permissions .

Successfully secured resource ‘E:\Microsoft Office servers\12.0\Logs’ of type ‘Directory’ by granting security group ‘Users’ ‘Read, Execute, Write’ permissions .

Successfully secured resource ‘E:\Microsoft Office servers\12.0\Logs\’ of type ‘Directory’ by granting security group ‘WSS_WPG’ ‘Read, Write’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\Software\Microsoft\Shared Tools\Web Server Extensions\12.0\WSS\ComponentsToRegister’ of type ‘RegKey’ by granting security group ‘WSS_ADMIN_WPG’ ‘Read, Write’ permissions .

Successfully secured resource ‘E:\Microsoft Office Servers\12.0\Data\Office Server\’ of type ‘Directory’ by granting security group ‘WSS_ADMIN_WPG’ ‘Full Control’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\Software\Microsoft\Office Server\12.0\Search’ of type ‘RegKey’ by granting security group ‘WSS_ADMIN_WPG’ ‘Full Control’ permissions .

Successfully secured resource ‘HKEY_CLASSES_ROOT\APPID\{58F1D482-A132-4297-9B8A-F8E4E600CDF6}’ of type ‘RegKey’ by granting security group ‘WSS_ADMIN_WPG’ ‘Full Control’ permissions .

Successfully secured resource ‘E:\Microsoft Office servers\12.0\Bin’ of type ‘Directory’ by granting security group ‘Users’ ‘Read, Execute’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\Software\Microsoft\Office Server\12.0\Search\Setup’ of type ‘RegKey’ by granting security group ‘NetworkService’ ‘Read’ permissions .

Successfully secured resource ‘C:\WINDOWS\Tasks’ of type ‘Directory’ by granting security group ‘WSS_ADMIN_WPG’ ‘Full Control’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\Software\Microsoft\Office Server\12.0\LoadBalancerSettings’ of type ‘RegKey’ by granting security group ‘WSS_ADMIN_WPG’ ‘Read, Write’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\Software\Microsoft\Shared Tools\Web Server Extensions\12.0\Search’ of type ‘RegKey’ by granting security group ‘WSS_WPG’ ‘Read’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office Server\12.0′ of type ‘RegKey’ by granting security group ‘WSS_WPG’ ‘Read’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office Server\12.0′ of type ‘RegKey’ by granting security group ‘WSS_ADMIN_WPG’ ‘Full Control’ permissions .

Successfully secured resource ‘E:\Microsoft Office servers\12.0\WebServices’ of type ‘Directory’ by granting security group ‘WSS_ADMIN_WPG’ ‘Read, Write’ permissions .

Successfully secured resource ‘E:\Microsoft Office servers\12.0\’ of type ‘Directory’ by granting security group ‘WSS_ADMIN_WPG’ ‘Full Control’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\Registration\{90120000-110D-0000-1000-0000000FF1CE}’ of type ‘RegKey’ by granting security group ‘WSS_ADMIN_WPG’ ‘Read, Write’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\Software\Microsoft\Office Server\12.0\LauncherSettings’ of type ‘RegKey’ by granting security group ‘WSS_WPG’ ‘Read, Write’ permissions .

Successfully secured resource ‘HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office Server’ of type ‘RegKey’ by granting security group ‘WSS_ADMIN_WPG’ ‘Read’ permissions .

Thanks for the tip Andrija!



  1. [...] Post From SharePoint Security – Google Blog Search: A have used this hundreds of times and knows that it is, according to the technet command line [...]



Subscribe without commenting