In order to ensure the security of your production environment, it is recommended that you follow these guidelines when using the Sitecore administrative tools:
- As part of the deployment process, always disable the administrative tools.
- When you are not actively using the administrative tools, always disable them.
- It is crucial to never enable the administrative tools on the Content Delivery and xDB Processing roles. For these roles, you can safely delete the administrative tools folder, which can be found in the <webroot>\sitecore\admin\ folder and its subfolders.
- Only enable the administrative tools on Content Management roles that are not accessible through the internet.
Please note that the administrative tools are ASPX files with .aspx extensions, and they can be located in the <webroot>\sitecore\admin\ folder and its subfolders. Below is the snapshot listing all such files.
The Solution
The files mentioned above in the snapshot have the option to be renamed to .disabled manually, or alternatively, a basic Power Shell script can be developed for this purpose. This script is executable on the CD server through Power Shell ISE or can be integrated as a task in the release pipeline. Here it goes -
Get-ChildItem -Recurse -Filter *.aspx -Path "C:\inetpub\wwwroot\mysitecore\sitecore\admin" | rename-item -newname {$_.Name -replace '.aspx', '.aspx.disabled'}
Below snapshot explains how the script can be used in release pipeline -
Hope it helps you!
Comments
Post a Comment