Validate the My Site Host and individual My Sites are on a dedicated Web application and separate URL domain (SharePoint Server 2010)

 

Applies to: SharePoint Server 2010

Rule Name:   Validate the My Site Host and individual My Sites are on a dedicated Web application and separate URL domain

Summary:   For performance and manageability reasons, we recommend that the My Site host and individual My Sites be deployed in a dedicated Web application. The owner of each individual My Site is the site collection administrator for that My Site. Having a dedicated Web application for the My Site host and individual My Sites reduces the security risk that a My Site owner can introduce same-domain scripting attacks on other sites that are hosted on the same Web application.

Cause:   The My Site host and individual My Sites are deployed in the same Web application as the root site collection. If the User Profile Service was configured by using the Farm Configuration Wizard, this is how My Sites are set up.

Resolution:   Set up a dedicated Web application