2. SharePoint SpeedMetal [Admin 101](S5A-104)Admin – 200 Chris McNulty KMA Welcome to SharePoint Saturday—The Conference
3. Welcome to SharePoint Saturday—The Conference Thank you for being a part of the first SharePoint Saturday conference Please turn off all electronic devices or set them to vibrate. If you must take a phone call, please do so in the hall so as not to disturb others. Open wireless access is available at SSID: SPSTC2011 Feel free to “tweet and blog” during the session Thanks to our Diamond and Platinum Sponsors:
12. Out Of Scope Deep Dives (e.g. PowerShell, BI, Upgrade, SQL DBA) Development Customization Design & Architecture Power User (e.g. Library Customization, Designer Workflows, etc.) Office 365 Rules Move fast, PowerPoint is shared Questions – time permitting during session Any time after session – email etc. Objectives
13. The dilemma Architecture, Design & Planning Installation and Upgrade Post Installation Best Practices Service/Feature Placement Support Monitoring and Optimization Backup PowerShell Development Functions Optimization Patching SQL Maintenance Best Practices Agenda
34. Microsoft SharePoint 2010 Ribbon UI SharePoint Workspace SharePoint Mobile Office Client and Office Web App Integration Standards Support Business Connectivity Services InfoPath Form Services External Lists Workflow SharePoint Designer Visual Studio API Enhancements REST/ATOM/RSS Sites Tagging, Tag Cloud, Ratings Social Bookmarking Blogs and Wikis My Sites Activity Feeds Profiles and Expertise Org Browser Communities Composites PerformancePoint Services Excel Services Chart Web Part Visio Services Web Analytics SQL Server Integration PowerPivot Content Insights Enterprise Content Types Metadata and Navigation Document Sets Multi-stage Disposition Audio and Video Content Types Remote Blob Storage List Enhancements Search Social Relevance Phonetic Search Navigation FAST Integration Enhanced Pipeline
103. Sidebar on SQL Disk optimization RAID 1: Mirroring (Wastes disk) RAID 5: Parity Bit (write performance hit) RAID 10 Stripes across mirrors (costly) Physical location of data, log, temp and/or backup files. If virtualization or SAN technology doesn’t isolate the disks, not much performance gain, Performance optimization/fault tolerance by: RAID1 on boot disks RAID5 on data disks RAID10 on log disks No RAID, or RAID 5 on backup disks RBS reduces size (and count) of content databases but doesn’t reduce size of total storage IOPS, IOPS, IOPS! Psst…about SQL…
104. Classic Zones mapped Single URL for each authentication method: e.g. Default: Windows Forms (LDAP, SQL, ADAM) Generate an NTToken to represent SPUser Claims Unified URL Multiple sources (Windows, FBA, SSO) combine to generate a single SAML token to represent SPUser Authentication Architecture 27
105. Authentication ScenariosMixed Mode https://extranet.domain.com Extranet Zone Intranet Zone http://intranet FBA claims Windows claims Remote Employees Employees
106. Traditional Inexpensive Simple Only one firewall External traffic comes inside internal network Internet Topology – Edge Firewall
107. More complex Duplicative networks, backup, AD External traffic is reserved Larger server foot print (exposure) in perimeter Internal users need domain trusts Internal users access site across firewall Internet Topology – Perimeter
108. Most complex Intricate firewall rules App, AD and search roles optionally in perimeter Optional internal WFE or internal users always cross a firewall Crawl topologies important to avoid overtaxing the firewall Internet Topology – Split Back to Back
112. Indexed search contentOther Systems FAST (Search) Project Server / TFS BizTalk LoB/Dynamics Oracle (BCS) Notes (Search) Wikis and other indexed web sites Common Integration Touchpoints
114. SharePoint 2010 is a 64 bit only platform. Direct upgrades from 32 bit to 64 bit requires prep work. Windows Server 2008 or Windows Server 2008 R2 X64 SQL Server 2005 x64 SP3 CU3 Or SQL Server 2008 x64 SP1 CU2 Or SQL Server 2008 R2 Platform Basics
115. 2007 Shared Services Provider has been broken up; each of its elements is now a Shared Service Application Mix and match them singly or in groups, to match farm’s needs. Crawl/index no longer a single server role In 2010, administration can be delegated Key targets: Enterprise search, metadata, user profiles Shared Service Applications
116. Internet Explorer 7/8/9, Firefox and Safari are all supported. Some support for Chrome IE6 is not supported Most other browsers are still supported for Internet configurations Office 2010 includes optimizations for the new platforms Offline Access 2007: used Outlook 2007 and Groove SharePoint Workspace 2010 integrates offline documents and lists Client/Browser Technology
117. SharePoint 2010 provides a server version of Office applications – Office Web Access, or “OWA”. In part, this enables simultaneous multiuser editing of Office documents: Excel in OWA, not client Word/PowerPoint on client only if file opened from a shared document library OneNote client or OWA Office Web Applications
119. Servers: Windows 2008 R2 X64 Enterprise Edition SQL Server 2008 R2 x64 Service Accounts spfarm(Farm acct; local admin on the SharePoint servers and either sa or dbcreate, dbowner and security admin on the SQL server.) svcsql (SQL Server service acct) sppool (IIS pool acct) spcrawl (Search accts) spadmin Interactive admin (install account; local, site collection and farm admin privileges) Install as SPAdmin Install Software Prerequisites - Checks for following elements: Application Server Role, Web Server (IIS) Role, Microsoft SQL Server 2008 Native Client, Hotfix for Microsoft Windows (KB976462), Windows Identity Foundation (KB974405), Microsoft Sync Framework Runtime v1.0 (x64), Microsoft Chart Controls for Microsoft .NET Framework 3.5, Microsoft Filter Pack 2.0, Microsoft SQL Server 2008 Analysis Services ADOMD.NET, Microsoft Server Speech Platform Runtime (x64), Microsoft Server Speech Recognition Language - TELE(en-US), SQL 2008 R2 Reporting Services SharePoint 2010 Add-in Installation - Prerequisites
120. Initial Product Key Type of installation - Always SERVER FARM Installation Type - Complete [Not Single Server] Accept default file locations – index files will stay on C:rogram Filesicrosoft Office Servers4.0ata At end NO Wizard Run OWA Setup Then, WIZARD! The wizard starts, and yes, it’s OK for IIS to reset during the wizard… Create a new farm Set farm account Pick configuration database, Passphrase, CentralAdmin Port (Conventions) Final confirm and let the wizard run Installation
121. Pros Easy All SSAs Configured Saves time and PowerShell hand tooling of SSAs Cons My Sites setup in same app and DB as primary Database Names are default, GUID happy Kills kittens (ask SharePoint 911!) What it does Sets up service acct for SSAs and other services (sppool) Sets up a port 80 web app with a My Sites Host sub-site collection in WSS_Content database Installation – Farm ConfigWizard?
122. Three paths In place Database upgrade Third party tools Process Pre-upgrade checker Visual Upgrade Resumable upgrade Progress reports Parallel DB upgrades Predictable Upgrade
124. SharePoint 2007 SP2 minimum, October 2009 CU best STSADM.exe –o preupgradecheck Documentation All servers and components in the farm, and whether the servers meet 64-bit hardware/OS requirements Alternate access mapping URLs A list of all site definitions, site templates, features, and language packs that are installed in the farm. Unsupported farm customizations (such as database schema modifications). Database or site orphans Missing or invalid configuration settings in the farm (missing Web.config file, invalid host names, invalid service accts). Whether the databases meet the requirements — for example, databases are set to read/write, and any databases stored in Windows Internal Database and larger than 4 GB. Pre-Upgrade Check
125. Switch-on new UI across site collections in a controlled manner Upgrade servers without changing the user interface Preview new UI Pre-release screenshots, subject to change IT Pro Investments – Visual Upgrade
126.
127. Developer Dashboard Empower developers and users Integrated Health Analyzer Runs when necessary Alerts anomalies Fixes when it can Web Analytics User usage Resource usage Proactive Issue Resolution
128. Logging, Monitoring, and AlertsKnow what is going on ULS Logs Windows Events Unified Logging Out-of-the-box reports Richer Web Analytics Open Schema SCOM Integration PLUS Developer Dashboard Health Analyzer Logging DB Page requests Feature Logging Health data
129. Monitoring SCOM Central Admin Health Analyzer Site Collection Web Analytics Developer Dashboard stsadm –o setproperty –pn developer-dashboard –pv OnDemand (Get-SPFarm).PerformanceMonitor.DeveloperDashboardLevel = "OnDemand" Troubleshooting Correlation ID – One GUID to rule them all! ULS Logs, Event Logs, Performance Monitor OR WSS_Logging DB Monitoring – General
130. Developer Dashboard Improve customized solutions with the Developer Dashboard SQL Queries Performance Memory Usage Data-Request Trace Pre-release screenshots, subject to change
131. Query Database Views Directly Requires Timer Jobs Enabled Diagnostic Data Provider: Trace Log Diagnostic Data Provider: Event Log ULS Configuration Matters Database will GROW! Aggregates from ALL Servers Sample: SELECT * FROM [WSS_Logging].[dbo].[ULSTraceLog] WHERE CorrelationID = '04377DAE-C2FD-4DBE-A57E-101B3005059E' Monitoring – WSS_Logging
132. Third Party Tools Recycle Bin Granular / Site Collection Backup (UI) *.bak file Restore-SPSite Unattached Recovery Browse unattached content database Account needs DB permissions Database need not be on the same server! No more granular than list or library! Browse Content Export Site or List Export as a CMP file PowerShell restore PS: Import-SPWeb http://msshome2010 –Path C:istRecovery.cmp SQL Backup SharePoint Backup (UI or script) Backup/Recovery
133. @echo off echo ================================================== echo Backup the farm echo ================================================== @SET stsadm="C:rogram Filesommon Filesicrosoft Sharedeb Server Extensions2INtsadm" rmdir /S /Q "spsql08pbackuparmold" ren "spsql08pbackuparm" "farmold" md "spsql08pbackuparm" %stsadm% -o backup -directory "spsql08pbackuparm" -backupmethod full echo complete STSADM Backup
138. Visual Studio 2010 Support Import solutions from SharePoint Designer, including Workflow Extensibility for SharePoint artifacts Support for SharePoint Sandboxed Solutions Workflow Designer Web PartDesigner Packaging Explorer Pre-release screenshots, subject to change
139. Project and Item Templates Templates for many SharePoint elements Support for sandboxed solutions Visual Designers Design web parts Build Business Data Connectivity (BDC) models Create Workflows Workflow Enhancements Site level workflows Templates for association & initiation forms Deploy/debug directly from IDE Visual Studio 2010 Support Templates and designers
140. Development Continuum Professional developer Business Analyst/Process Designer Designer/IW/Power User Import Create lists & libs Design Web Pages Web part hook-up Views & forms Declarative Workflows Custom Web Parts Code Workflows Event Receivers List Definitions Application Pages Design skeleton workflow processes View workflow visualizations Design data-backed business diagrams WSP Package Export
150. CA | Application Management Manage Quotas and Locks (Also where you can set a site collection read-only) Daily quota is 300 points includes AbnormalProcessTerminationCount, CPUExecutionTime, CriticalExceptionCount, InvocationCount, PercentProcessorTime, ProcessCPUCycles, ProcessHandleCount, ProcessIOBytes, ProcessThreadCount, ProcessVirtualBytes, SharePointDatabaseQueryCount, SharePointDatabaseQueryTime, UnhandledExceptionCount, UnresponsiveprocessCount Reconfigure values via PowerShell (unlikely) Examine them using: [Microsoft.SharePoint.Administration.SPUserCodeService]::Local.ResourceMeasures Development Support –Sandbox
156. IIS Bit Rate Throttling (Video) Part of IIS Media Services 2.0 or greater Download http://www.iis.net/download/BitRateThrottling Configured through IIS Manager Large File Upload Support: Central Admin: 600MB Upload Size IIS7 Connection Timeout 65536 seconds Web app web.config = change line to <httpRuntime maxRequestLength="2097151" executionTimeout="999999" /> in 14hiveemplateayoutseb.config, change above line to same Finally, as per http://support.microsoft.com/kb/944981/en-us add section to web.config to allow 600MB content length (it’s a new requirements in IIS7). <system.webServer> <security> <requestFiltering> <requestLimits maxAllowedContentLength="629145600"/> </requestFiltering> </security> Optimization
157. Disk-based BLOB Caching Local store for audio/video, PDF other frequent read only files Edit in Web.config (C:netpubwwrootssirtualdirectories..) <BlobCache location="" path="(gif|jpg|jpeg|jpe|jfif|bmp|dib|tif|tiff|ico|png|wdp|hdp|css|js|asf|avi|flv|m4v|mov|mp3|mp4|mpeg|mpg|rm|rmvb|wma|wmv)$" maxSize="10" enabled="false" /> Location = Local Disk Location maxSize = GB Enabled = true Different from RBS/EBS! Find Sean McDonough Optimization
159. Backups Local Disk – easy but storage intensive Agents – remote, requires extra software RBS Maintenance BLOB Orphans Log Sizing Full logged (default) generates huge t-logs Simple doesn’t but prevents point in time restore Maintenance Plans SQL Maintenance
160. Add PDF image support Add pdf16.gif to 14HiveEMPLATEMAGES [spare copy from http://www.adobe.com/misc/linking.html ] Add references to the images in 14HiveEMPLATEMLOCICON.XML <Mapping Key="pdf" Value="pdf16.gif"/> IISRESET Add PDF to file type in Search SSA Add Adobe 64 bit PDF iFilter: http://www.adobe.com/support/downloads/detail.jsp?ftpID=4025 Large File Upload Support: [Defined Later] Activity Feed Timer Job 14Hive = C:rogram Filesommon Filesicrosoft Sharedeb Server Extensions4 14Hivein on Environment Path Disable the loopback check In Registry Editor, locate and then click the following registry key: HKEY_LOCAL_MACHINEYSTEMurrentControlSetontrolsa Right-click Lsa, point to New, and then click DWORD Value. Type DisableLoopbackCheck, and then press ENTER. Set Value = 1, and then click OK. Quit Registry Editor, and then restart your computer. Make search service topology (crawl, index, query) redundant Post Installation Best Practices
162. Users Receive “Cannot Connect to Configuration Database” Web Page SharePoint farm account is locked out No one can upload anything but site is up Database disk volume is full – check transaction logs, backups In virtualized environment, host file systems may be full I can’t find a document I think I should see; Someone can’t see a file I just uploaded Security and permission variations Document “movement” (a/k/a ECM) try search by name or Document ID. Check ECM logs/audits Confirm permissions, and make sure document is checked in (Required properties may be missing) Troubleshooting – Top Support Questions
163. Repeated requests to re-enter Windows credentials Add to Local intranet zone, add site, custom level, automatic login with current user name and password (it’s the last thing in the item list) OR Trusted sites My workflow didn’t start Recycle timer service “FixSharePoint.exe” = IISReset & Timer Service Recycle I’m not seeing the right search results Confirm that crawls are running and complete by checking crawl logs; restart a full crawl if crawls finish OK I need a file back that I deleted Recycle Bin Recovery Use Backup & Restore Troubleshooting – More Support Questions
164. Bad web parts on page ?Contents=1 on end of URL HyperV & DiskPart From the run menu type "diskpart.exe" to enter the command line utility to resize disk partitions in Windows Server 2003. The command list volume will show you all the available volumes. Select your volume as shown below. select volume 1 corresponds to the "D" volume. Extend the volume with the extendcommand; the partition will be immediately extended under the Disk Management snap in. User Profile Sync DirSync permissions in AD are essential (Replicating Directory Changes ) PSCONFIG for a stuck wizard psconfig.exe -cmd upgrade -inplace b2b -wait 14HIVEin on PATH How big is that site collection anyway? Site Settings | Site Collection Analytics | Scroll down to Inventory and choose Storage Usage How do I make a bigger template? stsadm -o setproperty -propertyname max-template-document-size -propertyvalue size_in_bytes Save site as template To save any site as a template, just go to Site Actions | Site Settings | Save Site as template. This saves the site as a standard .WSP package in the Site Collection Solutions Gallery (/_catalogs/solutions/Forms/AllItems.aspx) Auditing In Central Admin | Security, configure Information Management Policy (/_admin/Policyfeatures.aspx). Make sure Auditing is Available At the Site Collection Audit Settings screen (in Site Collection Administration) select the events you want to audit Site Setting | Site Collection Administration | Audit Log Reports Service Account Management in Central Admin Security | Managed Service Accounts When all else fails – web.config!!!! Miscellaneous Tips and Tricks
166. SharePoint 2010 provides more opportunities, and more importance for reengaging users and sponsors about governance issues than before Major tools Sandbox code Query governors SharePoint Designer Now free (since 2008) Allowed or denied or restricted - PlaceholderMain Social tagging and ratings I like it/I hate it Ratings and adverse feedback ECM Records management - In place vs. Record Center Content Organizer etc. Who controls the lifecycle? Quotas Who gets a site? Governance
168. No SQL maintenance plans Default names for every database (WSS_CONTENT_12345abc…) No patching One environment for everything One acct for everything Single server install with SQL Express Runaway content database size Seven Deadly Sins
170. Security Applied via AD Groups and SharePoint Groups Review System Health Test Restore and Recovery Monthly Web Analytics Review – Usage, Storage, Search PowerShell instead of STSADM Governance Use ECM, MMS, Clients, Archiving and Training to Keep Content in SharePoint, reduce accidental duplication and keep searching and browsing fresh Seven SharePoint Virtues
185. From KMAWebinars, white papers and blogs at www.kma-llc.net From Me: SharePoint Saturday the Conference Saturday 9:30am S1A-101 - A decade of SharePoint Adoption Best Practices Saturday 11:30am S2B-104 - See Beyond The Numbers: Data Visualization & BI in SharePoint 2010 Saturday 3:00pm S4A-101 Playing Tag - Managed Metadata and Taxonomies in SharePoint 2010 New Jersey SharePoint User Group September 14 (Business Intelligence) SharePoint Saturday NH – September 24, 2011 (Business Intelligence) KMWorld DC October 2011 (IT) Resources
190. Thanks to Our Other Sponsors! Thanks to our Sponsors
191. Session Evaluation Please complete and turn in your Session Evaluation Form so we can improve future events. Survey can be filled out at: http://app.fluidsurveys.com/s/spstc2011-Fri-S5A-104 Presenter: Chris McNulty Session Name: SharePoint SpeedMetal [75 Minute Admin] Session No.: S5A-104
Notes de l'éditeur
Typical
Walkthrough examplesWe sometime work closely w business, sometimes ITSometimes IT has dedicated SP resourcingSample – Midwestern manufacturer – sponsor is a program manager (electronics) – core team includes C# developers for their product team, some knowledge of SQL, no other time
Let’s break down investments by workloads…SitesCommunitiesContentSearchInsightsComposites
IF YOU DON’T NEED IT – DON’T USE ITPLUS YOU CAN GIVE IT AWAY!
These are the domain accounts that are generally needed in a standard SharePoint installation. These accounts are shown with suggested names; names can be adjusted to confirm to any corporate naming standard for service accounts. For example, you may wish to designate ALL service accounts with a sv- or svc- prefix. Similarly, you may want to designate “regions” with a suffix, such as –dev, -tst, or –prd. Likewise, if you have already established SQL service account conventions, those accounts are fine as well.
Keep?
No SQL maintenance plansAll gardens need weeding. SQL databases need tending too. Left on their own, content databases and config databases will generate runaway transaction logs. Combined with overzealous local backup retention plans and you’ll quickly fill up you storage. Take a little time to understand Full Recovery vs. Simple Recovery in SQL. Or, more importantly, use a maintenance plan to backup and truncate your logs – it’s not that hard.Default names for every databaseThe default database name for a SharePoint content database is “WSS_Content”, and if you take the defaults, all subsequent databases will take the default format WSS_Content_[really-long-GUID]. Don’t do this – down the road, during backup, restore or SQL maintenance operations you'll be constantly jumping into Central Admin to figure out which sites use “WSS_Content_abdc1234-1111-2222-878adf0e”. Much better to name the databases according to a person- friendly standard – “WSS-Content-HRPortal”, etc. Even if it’s obvious to you, it may not be obvious to your DBA or someone else who has to support it in the future. No patchingGiven my crazed obsession with SharePoint version numbers (see http://blogs.kma-llc.net/microknowledge/version-build-numbers/) this is not a stretch. Microsoft has made it as easy as possible to stay in sync with the latest patches, Service Packs and Cumulative Updates. Do you need to update your systems every two months? Probably not. Should you still be running the nearly four year old RTM version of SharePoint 2007? Definitely not.One environment for everythingDon’t build a development environment. Don’t build a test environment. Just make all changes live, in production. What could ever go wrong?One acct for everythingBig, big no-no here. If you don’t pay attention, you may be tempted to use one master account for the SQL service, for the installation, for the farm account, for search, for content access, and for the IIS pools. Then, when you administer the site, it’s always easy to work around security restrictions by handing out those account credentials to a wide group of people. Next thing you know, someone forgets the password and locks out the account. The great news is that you don’t need to build a monitoring system for this alert, because everyone and I mean everyone, will get the dreaded web page that reads:Cannot connect to configuration database.So don’t give out the admin accounts, and, especially, don’t reuse the farm account.Single server install with SQL ExpressIf you don’t pay close attention on the original installation sequence, you may pick a “standalone” single server installation. You’re starting with only one server for now, right? Unfortunately, you’ll wind up with a server that can’t be expanded, running SQL Express Edition. And limited to 4GB of content database size. Well, at least you’ll avoid the next problem:Runaway content database sizeMicrosoft recommends that SharePoint content databases stay below 100GB (200GB if it’s the only content DB in a SharePoint 2010 site collection). But SharePoint doesn’t stop you from adding more – it’s a recommendation for optimal user performance. However, I’ve seen too many installations that grew grew grew to 250GB, 500GB or more. Plan your content database sizes in advance of critical sizes. You can add databases and site collections to create more manageable units, or use Remote Blob Storage (RBS) to pull those file of attachments out of the databases and into external storage, reducing file sizes.