SharePoint Search Service Analytics and Gthsrvc Shares folders permissions

Question

SharePoint Search Service has some Analytics and Gthsrvc Shares folders and it has below certain permissions in Application Servers

Is these Shared Folders in production APP servers will be cause any security vulnerability because when any domain users access these shares appear (when entering the UNC path: \<SharePoint_servername> )

Answer 1

This is not a security concern. Only the users present in the local group WSS_WPG have access to the share. You should not adjust or change the shares in any way.

Answer 2

Hi @adil

Don’t worry, these Shared Folders will not cause any security vulnerability.

On the root of the Server (where the Analytics Processing Component is installed), a shared folder is created when search service is configure with the name Analytics_<GUID>.

This folder is used to store usage logs in SharePoint and then the data stored in the folder will be written to the table AnalyticsItemData of the (Search Service Application)AnalyticsReportingStoreDB<GUID>database.

The shared folder is necessary for storing the usage log data from different SharePoint servers and being written to database, so we should not hide the shares. Also, only the users present in the local group WSS_WPG have access to the share.

More information, please refer to this article SharePoint Usage report in SP 2013 is merged in Search Service Application.

Thanks,
Echo Du

===================

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.