Solved

SharePoint 2010 - Isolating Search Results Based On Site Collections?

Posted on 2011-03-17
8
818 Views
Last Modified: 2012-06-21
Hello again, everyone.  I don't have much experience with managing Search, although I'm trying to get it under control and set everything up correctly.  

As a test, I have set up a content source and a crawl component to crawl/index a specific file share for my team (the "web team") in my organization.  However, I wanted to limit the search results with this information to only that site collection which is being searched.

So for instance, if my portal site's search (top level) is at http://tspg.sharepoint.com/search and I search for "managing alternate access mappings", it will pull up a document titled as "managing alternate access mappings.doc" that resides in the "web team" file share at \\127.0.0.1\webteam$.

What I want to do, is to hide search results from that file share UNLESS they are searching on the http://tspg.sharepoint.com/webteam/search site.  

Does this make any sense?  I need to have all content (file shares for records being stored off-server as well as sites within the farm) to be searchable, but there is some information that I would like to keep private as it could create problems if other teams got their hands on this information.

Has anyone configured this before, or is it even possible?
0
Comment
Question by:ThatSharepointGuy
  • 4
  • 3
8 Comments
 
LVL 31

Expert Comment

by:Jamie McAllister MVP
ID: 35158529
So couldn't you configure Search Scopes pointing to each site collection and configure the local search to search that scope?
0
 

Expert Comment

by:backpackerd00d
ID: 35158539
Have you got any experience with search scopes?  If so, you'll be able to create a search scope and make this available in your search mehanism.  A scope can be applied to a site collection, or a site level, or you can apply the scope in a search centre.

I believe Foundation is able to do this
0
 
LVL 6

Author Comment

by:ThatSharepointGuy
ID: 35169309
I have very little experience with Search, other than creating the Search Service Application and setting up crawl rules for when things need to be crawled.  I've never had the "need" to do it, as my administration points were mostly focused in other areas.  However, as I grow as a SharePoint administrator, I find that I want to learn more about the product and implement it on my end...it's just hard sometimes.

Right now I'm using SharePoint 2010 Enterprise (we don't have FAST, though)  but most of the options look similar to the 2007 version.

Basically all I wanted to do was to crawl a content source (private file share for the "web team" who manages all of the web servers for the customers) so that they can search it from their site.

However, I created that content source, and now you can search from anywhere...the Enterprise Search page at the top level of the server, and even in other site collections.  

Looking at the Search Scopes that you both mentioned, I created a Scope that says that it's a Content Source, and that Content Source is the "content_WebTeam" content source, and it it set to "Include".  
Then the rule for the scope says "ContentSource = content_WebTeam".

I noticed in the site collection search settings page that it allows you to set the drop downs to include these new content sources, so that you can search within them.  However, I can still go to a DIFFERENT site collection, type something that I know exists in the file share, and it will display there.

It all boils down to security...
Public Relations folks should be the only folks about to search the Public Relations file share from SharePoint.
Legal should only be able to search the Legal file share from SharePoint.

Neither of them should be able to get results from the other's share (so, Legal will never get hits from Public Relations, and Public Relations will never get a hit from Legal's documents)...yet I also want each of them to be able to search everything else in SharePoint.

I don't know if I'm explaining this correctly, though?  I tried reading online about it but really got a bit lost with some of it (a lot of my results on Google/Bingle were more towards "including a file share" in search, etc....not what I'm trying to actually do.

Is there something that I'm just not seeing?
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 31

Expert Comment

by:Jamie McAllister MVP
ID: 35169338
If it boils down to security, the different departments shouldn't have access to the other site collections. If that were the case the search results would automatically be security trimmed and they wouldn't see anything they weren't allowed to.
0
 
LVL 6

Author Comment

by:ThatSharepointGuy
ID: 35193670
JamieMcAllister,

The departments themselves don't have access to each others site collections.  However, if (for instance) the Public Relations folks have old documents on a file share that they occasionally need to access (\\fileserv\pr_share), and would like the ability to search within that share from their site collection at https://sharepoint.com/pr, they only want the results to show up on their site collection's search.

But with the way it is now, anyone on the server can search and have those documents show up.  So I can go to https://sharepoint.com/IT and do a search in the search bar on that site, and the documents form t he \\fileserve\pr_share share will show up there...and this is what we don't want.

I went digging around the net, reading about scopes, etc...but all i saw was really just how to add file shares to search (general search across the entire farm + other content sources) but nothing specific about locking down specific content sources so that their search results were ONLY RETURNED within a SPECIFIC site collection.

Even with the security trimming, my crawl account (sp.crawl.svc) has read access to the file share in order to crawl it...and anyone doing searches in the farm can read those documents in that \\fileserve\pr_share folder when pulled up within SharePoint.

So I'm obviously doing something wrong, or missing a point somewhere...I'm just not sure where I'm getting hung up at, exactly.

Without being able to isolate search results from file shares to specific site collections, I fear that the ability to add file shares as a content source is a pointless ability, with the exception that ALL documents in said file shares were meant for ALL eyes to see.

Any help that you, or anyone else, could give would be very appreciated.  Especially if someone had the resources to do a step-by-step test to see if they, too, can get this to work correctly.

0
 
LVL 31

Accepted Solution

by:
Jamie McAllister MVP earned 500 total points
ID: 35193895
I've seen the issue before where people are able to get results on a file share that they don't have access to. So they see the items in results but get a access denied when they click on there.

If the Scope that covered the file share were created at the Site Administration Level of https://sharepoint.com/pr that may give you what you need, as it wouldn't automatically be available in the other site collections?

http://technet.microsoft.com/en-us/library/ee792872.aspx

On the topic, I don't think you'll need the following, but I include just in case:

http://blogs.technet.com/b/vedant/archive/2009/04/07/hiding-contextual-search-scopes-in-sharepoint-using-javascript.aspx
0
 
LVL 6

Author Comment

by:ThatSharepointGuy
ID: 35346766
I'm still not able to limit search results to certain content sources to just one site collection.  I've tried everything suggested here and everything that I've found via Google-Fu, but nothing has worked...it may not even be possible.  I can set a search scope on a site collection so that it shows up in the search "drop down" box, and even make it the default...but doing a search on any other site collection in the farm will always return these results even though the scope for this content source is not set on the site collection doing the searching.

My apologies for letting it get to the "abandoned" stage.  I've been out of town and haven't been able to post back.  I'm going to go ahead and request closure of the question but will assign points to JamieMcAllister for his wonderful attempts at helping me figure it out.
0
 
LVL 6

Author Closing Comment

by:ThatSharepointGuy
ID: 35916257
I've given up on this for the moment being.  I haven't been able to limit search results of file shares to specific site collections, for the organizations that own each file share (ie - PR can only see the PR file share search results.  HR has a file share as well, but PR cannot see the search results for it, and HR cannot see PR's file share search results).

Marking JamieMcAllister as answerer because he did indeed further my learning on Search and scopes, etc.  Thanks!
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question