SharePoint

SharePoint is a web-based collaborative platform primarily used for building corporate intranets, document and content management, and file sharing. Developed by Microsoft, It is primarily used as part of the hosted service Microsoft 365, but it can also be hosted by an IT department or service provider, using an on premises version called "Server Edition". Launched in 2001,^[8] it was initially bundled with Windows Server as Windows SharePoint Server, then renamed to Microsoft Office SharePoint Server, and then finally renamed to SharePoint.

Microsoft SharePoint
Developer	Microsoft Corporation
Initial release	28 March 2001; 24 years ago (2001-03-28)
Stable release(s) [±]
Server SE 16.0.18526.20508 / 21 July 2025; 3 months ago (2025-07-21)[1] Server 2019 16.0.10417.20037 / 21 July 2025; 3 months ago (2025-07-21)[1] Server 2016 16.0.5513.1001 / 21 July 2025; 3 months ago (2025-07-21)[1] iOS 4.54.7 / 10 March 2025; 7 months ago (2025-03-10)[2] Android 3.39.61 / 6 June 2025; 4 months ago (2025-06-06)[3][4]
Operating system	Server:[5][6] Windows Server 2016 2019 2022 Client: Android iOS
Platform	x86-64
Available in	Arabic, Azerbaijani, Basque, Bosnian, Bulgarian, Catalan, Chinese, Croatian, Czech, Danish, Dari, Dutch, English, Estonian, Finnish, French, Galician, German, Greek, Hebrew, Hindi, Hungarian, Indonesian, Irish, Italian, Japanese, Kazakh, Korean, Latvian, Lithuanian, Macedonian, Malay, Norwegian, Polish, Portuguese, Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Swedish, Thai, Turkish, Ukrainian, Vietnamese and Welsh[7]
Type	Content management system
License	Proprietary software
Website	www.microsoft.com/microsoft-365/sharepoint/collaboration

According to Microsoft, as of December 2020^[update], SharePoint had over 200 million users.^[9]

Application

The most common uses of SharePoint include:

Enterprise content and document management

Main articles: Enterprise content management and document management

SharePoint allows storage, retrieval, searching, archiving, tracking, management, and reporting on electronic documents and records. Many of the functions in this product are designed around various legal, information management, and process requirements in organizations. SharePoint also provides search and "graph" functionality.^[10][11] SharePoint allows collaborative real-time editing^[12] and encrypted/information-rights-managed^[13] synchronization by providing the underlying technical infrastructure for Microsoft OneDrive.^[14]

SharePoint is often used to replace or supplement an existing corporate file server, and is typically coupled with an enterprise content management policy.^[15]

Intranet and social network

Main articles: Intranet portal and Social network

A SharePoint intranet or intranet portal is a way to centralize access to enterprise information and applications. It is a tool that helps an organization manage its internal communications, applications and information more easily. By providing the tools to capture and share explicit knowledge in an organisation, Microsoft claims organizational improvements in employee training, employee engagement, business process management, organizational communication, and crisis management.^[16][17] These capabilites are usually centered around "Communication sites" (previously, "Publishing sites").^[18]

Group collaboration

SharePoint contains team collaboration groupware capabilities, including: document / file management, project scheduling (integrated with Outlook and Project), and other information tracking.^[19] This capability is centred around "team sites". Team sites are created whenever a Microsoft Teams team is created, but they are also created independently of these, and have been a feature of SharePoint since 2001.

File hosting service (personal cloud)

Main articles: Personal cloud and File hosting service

SharePoint sites are the hosting infrastructure for OneDrive For Business, which allows storage and synchronization of an individual's personal work documents, as well as public/private file sharing of those documents.

Custom web applications (SharePoint Server edition)

Historically, SharePoint's Server Edition's custom development capabilities provided an additional layer of services that allowed for rapid prototyping of integrated (typically line-of-business) web applications.^[20] SharePoint provided developers with integration into corporate directories and data sources through standards such as REST/OData/OAuth. Enterprise application developers used SharePoint's security and information management capabilities across a variety of development platforms and scenarios.

Configuration, integration, and customization

Web-based configuration

SharePoint is primarily configured through a web browser. Capabilities for the management of a SharePoint site are "security trimmed", meaning that editing capabilities simply appear in place when permissions are granted. A "Site Collection Administrator" has the highest level of permission to manage an individual SharePoint sites.

Admin Center

An administration center for configuring organisation-wide settings is usually available to SharePoint Administrators, who are responsible for managing the underlying infrastructure.

In the cloud, this is called the "SharePoint Admin Center". Features include:

• Tenant-wide policy controls around sharing/permissions, access control, apps, APIs, and security controls.
• Tenant-wide configuration of content services: search, managed metadata, content types, and other governance.
• Tenant-wide health and security reports, service health checks, migration features, and hybrid configuration.

In Server edition, This is called the "central administration site", and it contains significantly more features are available for the administration and health of the SharePoint server farm. Because they are not operated as a shared resource, Features like the search crawler are more controllable and configurable.

Command line tools

Microsoft SharePoint's Server and SharePoint Online have multiple command line or PowerShell utilities available to ease administration.

• Microsoft also provides an official PowerShell module for cloud, as well as for Server Edition. These are supported only on Windows.
• The open source PnP PowerShell is managed by Microsoft, and is widely used in cloud hosted environments. It is available on PowerShell for Windows, Mac and Linux.
• A broader, cross-platform Microsoft 365 CLI (also open source) is also available.

Integrating with SharePoint

• The Microsoft Power Platform provides significant extensibility for SharePoint Online, especially Power Automate.
• Microsoft Graph provides an API endpoint for Microsoft 365 that is frequently used for SharePoint Online.
• SharePoint provides various APIs, including REST, ODATA, and object models.^[21]

Developing on SharePoint Online

• The SharePoint Framework (SPFx)^[22][23] provides a development model based on the TypeScript language. It is the only supported way to deeply customize the new modern experience user interface (UI), and is the only long-term supported cloud customization approach. It has been globally available since mid 2017.
• Legacy options such as sandboxed solutions or add-in model applications are reaching end-of-life in April 2026.

Developing on SharePoint Server Edition

• SharePoint Server Edition has very limited support for SPFx, using very old/limited versions of React and Node.^[24]
• The SharePoint "Add-in model" provides various types of external applications that offer the capability to show authenticated web-based applications through a variety of UI mechanisms. Apps may be either "SharePoint-hosted", or "Provider-hosted". Provider hosted apps may be developed using most back-end web technologies (e.g. ASP.NET, Node.js, PHP). Apps are served through a proxy in SharePoint, which requires some DNS/certificate manipulation in SharePoint Server edition. In the cloud, Microsoft announced the retirement of the Add-in model in November 2023 with an end-of-life date set to April 2026).^[25]
• "Sand-boxed" plugins can be uploaded by any end-user who has been granted permission. These are security-restricted, and can be governed at multiple levels (including resource consumption management).
• Farm features are typically fully trusted code that need to be installed at a farm-level. These are considered deprecated for new development.
• Service applications: It is possible to integrate directly into the SharePoint SOA bus, at a farm level. This is no longer a recommended approach.

SharePoint Designer

Main article: SharePoint Designer

SharePoint Designer is a deprecated product that provided 'advanced editing' capabilities for HTML/ASPX pages, but remains the primary method of editing SharePoint's legacy workflows. A significant subset of HTML editing features were removed in Designer 2013, and the product is expected to be deprecated in 2016–7.^[26]

Security, administration & compliance

Cloud edition

Microsoft 365 provides legal compliance features through their Microsoft Purview product, Microsoft Intune Endpoint Management, and the SharePoint admin center, where retention policies and sharing policies can be administered by the SharePoint Administrator.^[27]

Some legacy features such as in-place retention can be configured without the additional cost of Purview.^[28]

Server edition

SharePoint's architecture enables a 'least-privileges' execution permission model.^[29]

SharePoint Central Administration (the CA) provides a complete centralized management interface for web and service applications in the SharePoint farm, including Active Directory account management for web and service applications. In the event of the failure of the CA, Windows PowerShell is typically used on the CA server to reconfigure the farm.

Security and patching issues

Microsoft SharePoint Server Edition has a manual patching arrangement that is widely regarded as convoluted and complex.^[30] Over the years, it has been subject to numerous critical security vulnerabilities, which are frequently exploited in the wild.^[31] As a consequence, is no longer considered best practice to host SharePoint server edition with public facing internet access.

CVE-2025-53770

A zero-day attack targeting government agencies, universities, and businesses in the United States, China, and Europe using on-prem SharePoint servers started on 18 July 2025.^[32][33] The attackers exploited a weakness dubbed "ToolShell" (CVE-2025-53770) allowing them to take control of SharePoint servers and gaining Machine Keys.^[34] Those keys can then be used to install whatever an attacker wants, including back doors for future attacks.^[35] Microsoft issued updates for SharePoint Server Subscription Edition and SharePoint Server 2019 on 20 July 2025.^[34][36] A CISA alert was issued on 20 July 2025.^[37][38] Microsoft stated the exploit was used by Chinese state-sponsored advanced persistent threat groups dubbed Linen Typhoon, Violet Typhoon and Storm-2603 to breach servers of the National Nuclear Security Administration and other organizations.^[39][40][41]

Server edition architecture

SharePoint Server Edition can be scaled down to operate entirely from one developer machine, or scaled up to be managed across hundreds of machines.^[42]

Farms

A SharePoint farm is a logical grouping of SharePoint servers that share common resources.^[43] A farm typically operates stand-alone, but can also subscribe to functions from another farm, or provide functions to another farm. Each farm has its own central configuration database, which is managed through either a PowerShell interface, or a Central Administration website (which relies partly on PowerShell's infrastructure). Each server in the farm is able to directly interface with the central configuration database. Servers use this to configure services (e.g. IIS, windows features, database connections) to match the requirements of the farm, and to report server health issues, resource allocation issues, etc...

Web applications

Web applications (WAs) are top-level containers for content in a SharePoint farm. A web application is associated primarily with IIS configuration. A web application consists of a set of access mappings or URLs defined in the SharePoint central management console, which are replicated by SharePoint across every IIS Instance (e.g. Web Application Servers) configured in the farm.

Service applications

Service applications provide granular pieces of SharePoint functionality to other web and service applications in the farm. Examples of service applications include the User Profile Sync service, and the Search Indexing service. A service application can be turned off, exist on one server, or be load-balanced across many servers in a farm. Service Applications are designed to have independent functionality and independent security scopes.^[42]

Site collections

A site collection is a hierarchical group of 'SharePoint Sites'. Each web application must have at least one site collection. Site collections share common properties (detailed here), common subscriptions to service applications, and can be configured with unique host names.^[44] A site collection may have a distinct content databases, or may share a content database with other site collections in the same web application.^[42]

History

Origins

SharePoint evolved from projects codenamed "Office Server" and "Tahoe" during the Office XP development cycle.

"Office Server" evolved out of the FrontPage and Office Server Extensions and "Team Pages". It targeted simple, bottom-up collaboration.

"Tahoe", built on shared technology with Exchange and the "Digital Dashboard", targeted top-down portals, search and document management. The searching and indexing capabilities of SharePoint came from the "Tahoe" feature set. The search and indexing features were a combination of the index and crawling features from the Microsoft Site Server family of products and from the query language of Microsoft Index Server.^[45]

See also

• Enterprise portal
• List of collaborative software
• List of content management systems