Block or unblock a sandboxed solution (SharePoint Server 2010)

 

Applies to: SharePoint Foundation 2010, SharePoint Server 2010

A sandbox is a restricted execution environment that enables programs to access only certain resources and keeps problems that occur in the sandbox from affecting the rest of the server environment. Solutions that you deploy into a sandbox, which are known as sandboxed solutions, cannot use certain computer and network resources and cannot access content outside the site collection they are deployed in.

A farm administrator can block a sandboxed solution. A solution that is blocked does not run. Each sandboxed solution is identified by a hash result of the solution code. If the solution code is changed and redeployed, it will be seen as a new sandboxed solution and will be allowed to run even if the original is still blocked.

For more information about sandboxed solutions, see Sandboxed solutions overview (SharePoint Server 2010).

The Sandbox Solution framework provides a mechanism for executing user-provided code outside of the IIS worker process. The Sandbox Solution framework should not be used as a mechanism for enforcing security boundaries when executing user code. Sandbox Solutions are not supported as a security boundary with user code, especially code of unknown origin. We advise against executing Sandbox Solutions of unknown origins.

In this article:

  • Block a sandboxed solution

  • Unblock a sandboxed solution

Block a sandboxed solution

You might need to block a sandboxed solution if it exceeds its typical resource usage or if it poses a security risk. To block a sandboxed solution, use the following procedure.

To block a sandboxed solution by using Central Administration

  1. Verify that you have the following administrative credentials:

    • You must be a member of the Farm Administrators group on the computer that is running the SharePoint Central Administration Web site.
  2. On the home page of the Central Administration Web site, click System Settings.

  3. On the System Settings page, in the Farm Management section, click Manage user solutions.

  4. On the Sandboxed Solution Management page, in the Solution Restrictions section, in the File box, either type the full path of the file that contains the solution to block or use the Browse button to browse for the file to block.

  5. Optionally, type a message in the Message box. This message will be displayed when a user tries to use the solution.

  6. Click Block.

    The solution is added to the list in the Blocked Solutions box.

  7. To block additional solutions, repeat steps 4 through 6.

  8. Click OK.

Unblock a sandboxed solution

If the situation that caused a sandboxed solution to be blocked has changed and you want to unblock the solution, use the following procedure.

To unblock a sandboxed solution by using Central Administration

  1. Verify that you have the following administrative credentials:

    • You must be a member of the Farm Administrators group on the computer that is running the SharePoint Central Administration Web site.
  2. On the home page of the Central Administration Web site, click System Settings.

  3. On the System Settings page, in the Farm Management section, click Manage user solutions.

  4. On the Sandboxed Solution Management page, in the Solution Restrictions section, in the Blocked Solutions box, select the solution to unblock, and then click Remove.

  5. To unblock additional solutions, repeat step 4.

  6. Click OK.

See Also

Concepts

Sandboxed solutions overview (SharePoint Server 2010)
Plan sandboxed solutions (SharePoint Server 2010)
Enable sandboxed solutions on the farm (SharePoint Server 2010)
Configure load balancing for sandboxed solutions (SharePoint Server 2010)
Configure sandboxed solutions service tiers (SharePoint Server 2010)
Configure resource points for sandboxed solutions (SharePoint Server 2010)