Organizations running on-premises SharePoint (Subscription Edition, 2019, and 2016) face immediate operational, legal, and reputational risk if unpatched or misconfigured.

Technical Overview

• CVE IDs: CVE-2025-53770 (primary RCE), CVE-2025-53771 (chained)
• Vulnerability Class: .NET ViewState Deserialization + Path Traversal
• Affected Platforms:
  • SharePoint Server Subscription Edition
  • SharePoint Server 2019
  • SharePoint Server 2016
• Attack Vector: Unauthenticated HTTP(S) request to ToolPane.aspx leveraging insecure ViewState + malicious path traversal to drop arbitrary code in server-side layouts.
• Payload: spinstall0.aspx web shell deployed for persistent control and exfiltration.

Technical Implications:

• Machine key compromise: Allows attackers to sign payloads that bypass authentication controls.
• Web shell persistence: Enables long-term command and control (C2) access.
• Post-exploitation lateral movement: Via NTLM relay, LDAP harvesting, or credential dumping.
• Detection challenges: Use of legitimate pages (ToolPane.aspx) and tampering with AMSI logging

Immediate Remediation Guide

1. Patch All Versions Immediately

• • Subscription Edition → KB 5002768
  • SharePoint 2019 → KB 5002754  AND  KB 5002753 
  • SharePoint 2016 →  KB 5002760 (language pack), KB 5002759 (core)

2. Rotate SharePoint Server ASP.NET machine keys

After applying the latest security updates above, it is critical that to rotate SharePoint server ASP.NET machine keys and restart IIS on all SharePoint servers.

To update the machine keys for a web application using PowerShell:

• Generate the machine key in PowerShell using Set-SPMachineKey
  
• Deploy the machine key to the farm in PowerShell using Update-SPMachineKey
  

3. IIS “iisreset” reset after the rotation has completed.

iisreset is required to ensure all SharePoint services immediately load the new machine keys from web.config and prevent use of old keys left in memory.

Why Machine Key Rotation matters

• Patching alone is not enough:  Attackers who have already stolen validation/decryption keys can continue creating malicious ViewState payloads.
• Microsoft guidance: The Microsoft Defender Vulnerability Management blog recommends rotating the machineKey twice, once before and once after applying patches to ensure complete protection.
• Double rotation: This practice helps eliminate lingering threats and prevents attackers from exploiting stolen cryptographic material.

Summary

• Exploit in-the-wild: The ToolShell exploit (CVE-2025-53770) is actively targeting on-premises SharePoint servers.
• Patches ongoing: Subscription Edition, 2019 and 2016 have patches available
• MachineKey rotation is critical: Machine key rotation is essential to invalidate stolen keys and stop persistent threats.
• Post Rotation: Always restart IIS on all SharePoint servers using iisreset.exe to apply changes immediately.

For comprehensive information, please refer to Microsoft’s official Common Vulnerabilities and Exposures (CVE) documentation for CVE-2025-53770 and related vulnerabilities

Disclaimer: Always back up your configuration (web.config and other) and test changes in a non-production environment before applying them to live systems.

→ Securing SharePoint Against Current and Future Threats

To protect your SharePoint deployment from this and future threats:

• Maintain Up-to-Date Systems: Ensure all SharePoint servers and related infrastructure are fully patched with the latest Microsoft security updates.
• Rotate Cryptographic Keys Regularly: Periodically rotate machine keys, especially following security incidents to reduce the risk of key compromise.
• Implement Comprehensive Logging and Monitoring: Enable detailed logging for SharePoint, including Antimalware Scan Interface (AMSI) and Windows Event Logs. Monitor for signs of tampering, suspicious activity.
• Apply Network and Access Controls: Restrict access to SharePoint administrative interfaces, especially the Central Administration site and other configuration pages by implementing network segmentation, VPNs, and firewall rules. Ensure that only authorized personnel can reach these sensitive areas by limiting access to trusted networks or through secure remote access solutions.
• Backup and Test Configurations: Regularly back up key configuration files (e.g., web.config, machine.config) and test patches and updates in a controlled staging environment prior to production deployment.

The post Critical SharePoint Zero-Day Exploit Targeting Enterprises appeared first on MachSol Blog.

People who prefer to do things on their own opt for the first option: DIY cloud management, Nevertheless, there comes many phases where expert opinion or assistance is required and that makes them take the second option: Hire a Cloud Expert.

What is a Managed Cloud Service Provider?

A managed cloud provider allows its customers to opt for IT services that they wish to manage on their own and the rest of the services are left to the Service Provider to be managed. Services like infrastructure management and application level support are included in a Managed cloud service. Engineers at Managed Cloud Providers’ team are able to cater for networking and storage requirements, operating systems issues, more complex scenarios like tools and apps that are run on top of the basic or complex infrastructure.

Services of a Managed Cloud Service Provider

There are many technical and non-technical services provided by a managed cloud provider like DNS management, Architecture guidance, System monitoring, alerting, and reporting, A single point of contact for support, Security and compliance management, Performance testing and tuning, Database administration, System administration and operations (Ops), Developer support and training, Proactive communications and 24×7 support, Backup and disaster recovery solutions.

NextGen V/s Conventional Managed Service Providers

Enterprises needs evolve with more cloud adoptions and the need for agility and flexibility in combination with cost-effective solutions is ever-growing. Traditional managed service providers are not able to keep up the pace with the growing trends of cloud computing space. This leads to an evolution of next generation cloud providers that offer migration support with updates on daily basis, offer customization services and multi-cloud technologies.

MachPanel Multi-Cloud Service Orchestration & Delivery Platform

MachPanel is a Multi-Cloud Service Orchestration & Delivery Platform that brings together the needs of the NextGen businesses in a user-friendly manner. With easy automation and end-to-end service delivery and lifecycle management, MachPanel is #1 choice of CSPs who opt for cloud business automation. It supports Multi-tenancy and Segregation for Hosted Microsoft Hyper-V 2019 & SharePoint 2019, Work Folders Hosting (Microsoft Sync Share) Integration, Advanced Exchange Database Management to support database administrative operations and Exchange RBAC role group management and a secure environment with Google Authenticator for 2 Factor authentications. It offers a Hybrid Cloud Marketplace and robust Reporting mechanism for better analysis.

Stick around for more updates on cloud computing space and get your hands on MachPanel to get your business scaled in the right direction.

Lets TalkRequest a Demo

The post An insight into features of a Managed Cloud Service, beneficial to your Cloud Business appeared first on MachSol Blog.

Before we compare the features let’s get this straight: Work Folders was introduced as a sync client for file server whereas OneDrive is the sync client for SharePoint. So, Work Folders accesses data on multiple devices from file server whereas OneDrive for business will provide access to data from multiple devices from SharePoint.

Work Folders

Work Folders module was introduced for storing and accessing work files on PCs, laptops and other devices. The concept emerged with the growing trend of bring your-own-device (BYOD) in cloud business space. Work Folders module help organizations manage and control their data on centrally managed file servers. There is also the option of setting up user device policies and lock screen passwords for multiple employees who bring their own devices.

Deployment of Work Folders

The deployment of Work Folders can be done on any number of file servers within your environment. Hence, Work Folders implementation can be scaled according to need and growth within the environment. There are three options for enterprises: single-site deployment; in which file server is hosted inside a site within customer infrastructure, multiple-site deployment; in which file servers are hosted in multiple locations and hosted deployment; in which sync servers are to be deployed over an IaaS solution.

Business Applications

It provides a decent way of accessing user’s work by providing a single point of access. It also allows for accessing files and work documents while the user is offline and performs sync whenever the system is next connected to Internet. File classification and folder quotas are the existing file server management techniques in order to manage user data. For the provision of a high availability solution, Failover Clustering with Work Folders is used.

OneDrive benefits for Business

As mentioned earlier, One Drive for business is the sync client for SharePoint. It makes sharing and collaboration easier for SharePoint users.

Deployment of OneDrive for Business

There are many OneDrive benefits for business. OneDrive apps can be deployed using System Center Configuration Manager for OneDrive sync client. The latest sync client can be used with SharePoint 2019 but not the earlier versions. Deployment can also be done using Intune. There is a separate option of Network Utilization planning which can be set in order to use the sync client efficiently.

Business Applications

OneDrive is used for file sharing and handling. It connects files, lets you store the important work, and makes collaboration and sharing of files on multiple devices easier within the office space. All of the files are private by default. Sharing is even allowed to client outside of the company, depending on cloud business’s policy off course, through Office 365 while using OneDrive for Business.

To sum it all up, both the products are getting better with new releases. When making a choice between the two, it is important to know the back-end infrastructure of the two. It is necessary to understand both Work Folders and OneDrive for Business and go for the one which adds more value to your business.

MachPanel and Work Folders Module

The good news is: MachPanel now offers support for Work Folders and is it just exactly what your cloud business needs for better productivity and collaboration. MachPanel’s Work Folders module offers single server and clustered Work Folders deployments, Segregation among multiple customers’ work folders, showcasing, selling, packaging, and billing capabilities, all offerings for resellers, best-in-line automated provisioning, detailed management platform and easier Quota management. It also offers all the technical support like Config Sync from backend, detailed reports on usage and a unified portal for easier management.

Here’s your chance to avail the opportunity that comes with MachPanel Work Folders and discover what your cloud business can deliver with increasing revenue.

Lets TalkRequest a Demo

The post Work Folders and OneDrive: Which to opt in your Cloud Business? appeared first on MachSol Blog.

Select a Path

SharePoint 2019 migration is not that simple from a legacy version. At first, you would have to upgrade to a higher version eventually to 2019 like 2010 to 2013 to 2016 to 2019. However, things get simpler by using a third-party tool like MachPanel Automation tool for SharePoint migration. With MachPanel, the migrations become seamless and hassle free. This is the best migration path form SP 2010/2013/2016 to SharePoint 2019. The experts are at your side to perform the migration steps and provide post-migration support in case you need any guidance after the migration has occurred. For a successful SharePoint 2019 migration you must consider the following:

Plan: it is important to review the source platform (SharePoint 2013/2016) and destination platform (SharePoint 2019). The relevant configurations must be available in the destination platform.

Analysis of unnecessary items: before beginning the SharePoint 2019 migrations, it is a good practice to track down all the unnecessary contents that ate not needed in future. Frequent cleanup is a good practice, anyway

Run Pre-migration tests: it is best of you could run a mock migration, get the results of pre-migration test reviewed and repeat if not satisfied with results.

Create different batches of content for migration: it is beneficial if you classify major Site Collections into batches. Apart from this, you could also classify Sites and Lists, Metadata, Permissions, Content Types etc. for improved migration experience. This certainly avoids many failure points.

Steps

With that said, let’s move on to the major steps and best practices of migrating to SharePoint 2019 on-premise. If you are moving form SharePoint 2013 to SharePoint 2019 environment, you need to know the following steps that highlight the steps involved in a general SharePoint 2019 migration.

1. Upgrade to a temporary SharePoint 2016 farm

2. Upgrade to destination SharePoint 2019 environment

Upgrade to a temporary SharePoint 2016 farm

• SharePoint 2013 (final migration only): Select the web application and select the option Remove content database”
• Place Database in Read-only mode and create a backup of it.
• Now add the content database previously removed by selecting option “Add content database”. This will add DB in read-only mode.
• Create a copy and add Database backup file to temporary SP 2016 farm.
• Select “Remove content database” to unattached DB from any web application
• Restore database and Execute the series of PowerShell commands

ALSO READ
The best use of the Microsoft’s free SharePoint Migration Tool

Upgrade to destination SharePoint 2019 environment

• SharePoint 2016: Select the web application and select the option Remove content database”
• Place Database in Read-write mode and create a backup of it.
• Now add the content database previously removed by selecting option “Add content database”. This will add DB in read-only mode.
• Create a copy of Database file form SP 2016 farm and add Database backup file to destination SP 2019 farm.
• Select “Remove content database” to unattached DB from any web application
• Restore database and execute the series of PowerShell commands as farm administrator.

After a successful SP 2019 migration, the web application is displayed in the latest SharePoint 2019 environment and you are all set to explore the modern experience of SharePoint 2019 environment. For more details about migration, you can check out additional support from Microsoft.

Key points

It is important to highlight a few key points that you should know before you start the migration process.

• On-premises Migration will turn out to be half complex if you plan correctly, you can then restructure the content during migration.
• Post-migration support is essential: you should keep a check for anomalies once you are in the latest SharePoint 2019 environment.
• It is important to note that the intent of migrating to SharePoint 2019 is to aim for better business collaboration and better productivity for business.
• Another important aspect is to perform a good cost-benefit analysis on whether the pain of migration is worth it or not.
• Know the right Providers: Always make sure the providers provide a post-migration support so that you can turn to your provider if things go out of hand after the migration.

MachPanel Automation tool for Microsoft SharePoint

The aforementioned MachPanel automation tool for Microsoft SharePoint provides complete Orchestration for Hosted SharePoint Service Providers and Enterprises. It supports Multi-tenancy and Segregation for Microsoft SharePoint Server 2019, 2016 & 2013. By making use of this tool, the migration process becomes simple. Apart from this, turnkey solutions are offered for Microsoft SharePoint which improves business productivity by services like design and deployment, planning and migration, reliability and scalability. Management of on-premise SharePoint or sell fully segregated multi-tenant hosted SharePoint 2019 environment (and other environments like SharePoint 2010/2013/2016) isn’t a big deal with MachPanel.

Now you know it, Grab the opportunity for a successful SharePoint 2019 on-premise migration and get your hands on the latest SharePoint 2019 environment and MachPanel.

Lets TalkRequest a Demo

The post A guide to SharePoint 2019 environment on-premises Migration from legacy version appeared first on MachSol Blog.

This modern experience is based on SharePoint Framework which has brought in a lot of changes from the ‘classic’ platform. The major advancement has been in the basic structure where things are focused to be developed on client side rather the server side. In fact, from April 2019, Microsoft is restricting the possibility of running whole organization on classic mode for libraries and lists. However, lists that use features that are currently supported in the modern experience will be switched to classic, automatically.

However, SharePoint Modern Experience is flexible for now. If there are CSPs who can’t switch to the modern experience immediately, there many tools available to help them restrict users to classic experience like the SharePoint Modernization scanner.

1. SharePoint modernization scanner

With this tool, you can identify sites and lists having specific customizations that are not supported by the modern User interface. It is hence possible to identify the impact of the classic view and modern sites. CSPs wish to keep the currently running sites to classic view. Not all but a few of them for a better user experience, since the users wouldn’t have to switch amongst different modes of experience.

2. Disabling the modern experience is still possible

Apart from PowerShell scripts being used to enable and disable the SharePoint modern experience, there is always an option to “return to classic mode” on modern views of libraries and lists. Owners of Lists can configure a particular list to be run in classic mode for all of its users.

3. It wraps itself around O365

SharePoint modern experience and SharePoint Online integrates itself with Office 365 much easier. Moreover, updates from Microsoft Team sites can be integrated and hence SharePoint modern experience incorporates that all.

4. The modern pages

As mentioned above, there had been a need of an editor experience since many years, like a CMS. With modern pages under Modern SharePoint Experience, content editors are given more power to make use of this experience: publishing content with CMS similar to Word press. Less training is required for editors and the process is kept simple. In just 2 to three clicks, you are good to go!

5. The user experience in Modern SharePoint experience

Technically, the modern experience has got updates that mostly affect the administrators because more changes are provided at administrative settings. Not many changes have been introduced within the interface. Hence, this experience make it user friendly, since the users can still be provided the classic view where needed and they don’t have to switch back and forth between the two modes.

6. Modern and Classic Lists

With the SharePoint modern experience, there are many scenarios that have been modernized like the document sets. Apart from this, there are a few modern-only features introduced like the Microsoft Flow integration. Hence, it is obvious that Modernization is an on-going process. Generally, those features are upgraded earlier that have a higher impact or demand.

MachPanel and Automation module for Microsoft SharePoint

MachPanel delivers the best SharePoint Management experience in the market. It is a globally trusted Multi-Cloud Service Orchestration & Delivery Platform (MSOP) that provides automation of lifecycle and end-to-end service delivery. For its SharePoint automation module, MachPanel provides groups management, site management, Automated DNS entries, Multiple Domain handling and many more options for a SharePoint experience. It is reliable and simplifies billing, provision and management with built-in multi-tenancy and segregation for latest SharePoint 2019 and all other versions for SharePoint Online and on-premise setup.

All these features of MachPanel can surely take your business to success. Get your hands on MachPanel for all your SharePoint Online and on-premises needs.

Lets TalkRequest a Demo

The post 6 things that make “SharePoint Modern experience” loved in the IT space appeared first on MachSol Blog.

Companies still tend to keep their data inbound and hence prefer to go for SharePoint on-premises. Microsoft has known it for a long time and now it has finally announced many benefits for on-premises users in the upcoming SharePoint version which were initially available for SharePoint Online or Hybrid users only. Yet again, migration has been made easy in SharePoint Server 2019 and so users from SharePoint 2010, 2013 or 2016 will be looking forward to upgrade to get the new feel on the UI improvements, the modern sites, integrated support for libraries and most importantly they are eager to get their hands on the improved support for their business processes with Microsoft Flow and Microsoft Power Apps. With Microsoft SharePoint 2019, customers will be able to handle mission-critical workloads in a much reliable manner. With enhanced support collaboration the feature for better automation of business processes is also introduced, making SharePoint 2019 tentatively the most compelling and collaborative experience for users.

All these business incentives make Service Providers eager to begin offering the latest SharePoint Release and facilitate their customers from the features in a profitable manner. Not only SharePoint manages businesses in a modern and automated fashion but the chances of businesses to flourish by availing SharePoint on premises features are much high.

Let’s have a look at the features of SharePoint Server 2019 (on- premises) that make Service Providers consider offering SharePoint as a hosted service.

What’s New in SharePoint Server 2019

NextGen OneDrive Sync

With this feature available for on-premises users, much of the work flow of users will get easier. For Example: Documents from Emails will directly be saved to the relevant folder in OneDrive on the basis of user preference making workflow less tedious. In simple, SharePoint server 2019 will bring OneDrive features to the on-premises world and this will also include the Sync Client as is in Office 365.

PowerApps integration

With PowerApps being made available for on premises users, they will be able to change the way incidents are managed. With pre-built templates that reduce development time of business apps, which also doesn’t require much coding knowledge, business apps will be available for multiple mobile platforms.

Microsoft Flow

This feature allows for creating a flow of tasks or actions across different Microsoft applications. This makes workflows between Microsoft programs smoother and easier. Availability of Microsoft Flow automates commonplace recurring tasks and saves time.

A different User Experience

UX and UI improvements have been necessary for a better user experience. The UX improvements in document libraries and navigation methods that have been proved successful in Microsoft Office 365 have been introduced in SharePoint 2019 too.

Team News

Collaboration between teams is improved by announcing news to all team members. With Microsoft Teams integration with SharePoint, working in a team and collaboration has become much easier by the feature of Announcement for users of web and mobile.

Communication sites

This feature is much needed for communication and sharing of knowledge between teams in a more engaging and compelling format. With this feature available for on-perm users, anyone can make beautifully crafted content for example wiki pages that look visually appealing.

ALSO READ
SharePoint Hybrid – The Solution to your Cloud Computing Problems

MachPanel and SharePoint

MachPanel is a multi-cloud service Orchestration and Delivery Platform that provides automation to your SharePoint Deployments securely. It is a trusted hosted solution that simplifies scalability. Its business automation flow makes processes and end-to-end management easier.

MachPanel gives you the benefit of managing users; perform site management, self-service tools, multiple hosted and dedicated platforms. With MachPanel, you can gain a competitive edge in the market and stay ahead of the line. MachSol offers a full set of services that facilitate Service providers and make deployments an easy task with its post-deployment support.  Since it ensures maximum uptime, MachPanel is a promising automation control panel having all the features of a trendy Control Panel in 2018.

The post Major announcements on SharePoint Server 2019 on-premises appeared first on MachSol Blog.