Default SharePoint 2013 / 2010 System Pages Where You Should Take Care When You Go Online

There are a list of SharePoint System Pages which inherit view permission by default. If you are going to make a public SharePoint site, you might not want to access these pages by anonymous users or by Form Based Authentication User.

There are may ways to restrict the users access to these pages that I will explain later in a different post.

Below I’m listing down pages that are available in each site under layout mapping.

Site Collection and Site Level Recycle Bin Urls

/_layouts/15/AdminRecycleBin.aspx

/_layouts/15/RecycleBin.aspx

User, User Info, Site Permission related Urls

_layouts/15/permsetup.aspx

This is used to create default groups in SharePoint such as visitors, members and owners.

/_layouts/15/people.aspx?MembershipGroupId=0

All People Url, this can be even used to delete users from the site collection.

User Information Hidden List Urls

/_catalogs/users/detail.aspx

/_catalogs/users/simple.aspx

These lists are actually available from a previous version of SharePoint. These are hidden lists available in the SharePoint containing user information.

/_layouts/15/userdisp.aspx?id={UserID}&Force=True

This is used to view user information in the same page without redirecting to my site.

/_layouts/quiklnch.aspx

This is used to manage quick launch items in SharePoint.

/_layouts/15/AreaNavigationSettings.aspx

This is used to modify navigation setting in the site collection.

Workflow history hidden list

/Lists/Workflow%20History/AllItems.aspx

This is a hidden list for managing and viewing workflow history items.

Site usage page

/_layouts/15/usage.aspx

This is used to view the usage information. But nothing harmful.

Site content and structure pages

/_layouts/15/sitemanager.aspx

This will bring you site management page which is available from SharePoint 2007.

/_layouts/vsubwebs.aspx

List of hierachy pages:

/_layouts/15/settings.aspx

This is the site setting page that contains all administrative links.

/_layouts/15/viewlsts.aspx

This is used to view all site contents. Lists visibility if this page can be hidden using SharePoint designer.

Site and Site Collection feature management links

/_layouts/15/ManageFeatures.aspx
/_layouts/15/ManageFeatures.aspx?Scope=Site

These links are used to activate and deactivate features in site and site collection.

SharePoint Designer Settings

/_layouts/15/SharePointDesignerSettings.aspx

This is used to enable and disable SharePoint designer settings.

Look and Feel Urls

/_layouts/ChangeSiteMasterPage.aspx
This is used to change site collection master pages.

/_Layouts/AreaTemplateSettings.aspx

This is where user can change Page Layouts, Site Templates and other related settings.

/_catalogs/masterpage/Forms/AllItems.aspx

This is the main document library for updating and maintaining related files and master pages.