Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders
- 1. Avoiding Administrator Blunders Scott Hoag and Dan Usher #SUGDC #Blunders
- 2. who am I? #SUGDC #Blunders
- 3. who’s that other guy? Dan Usher usher #SUGDC #Blunders
- 6. rules of the road #SUGDC #Blunders
- 9. permissions management Permissions… Permissions! Permissions! Permissions! Permissions! #SUGDC #Blunders
- 11. the recycle bin #SUGDC #Blunders Manage the Recycle Bin of a site
- 12. testing workflows as a deity > stsadm –o setproperty –pn declarativeworkflowautostartonemailenabled –pv true #SUGDC #Blunders declarativeworkflowautostartonemailenabled (Property
- 13. deleting the wrong item #SUGDC #Blunders
- 14. web part fun… #SUGDC #Blunders
- 15. #SUGDC #Blunders
- 16. tune your analytics Dataset Characteristics Value SharePoint components 30k Unique users 117k Unique queries 68k Unique assets 500k Reporting DB data size? 511TB per years 73TB per 7day 200GB for year #SUGDC #Blunders Capacity requirements for the Web Analytics Shared Service in SharePoint
- 17. permissive file handling > $webApp = Get-SPWebApplication("http://intranet.contoso.com") > $webApp.AllowedInlineDownloadMimeTypes.Add("application/pdf") > $webApp.Update() #SUGDC #Blunders
- 18. running in circles KB896861 #SUGDC #Blunders DisableLoopbackCheck & SharePoint: What every admin and developer should
- 20. lost passphrases > $passphrase = ConvertTo-SecureString -asPlainText -Force > Set-SPPassPhrase -PassPhrase $passphrase -Confirm TechNet CodePlex #SUGDC #Blunders
- 21. certificate revocation list <psuedocode> if (!server.HasInternetConnectivity()) { server.DisableCRLCheck(); } </psuedocode> SOFTWAREMicrosoftWindowsCurrentVersionWinTrustTrust ProvidersSoftware Publishing #SUGDC #Blunders Certificate Revocation List Check and SharePoint 2010 without an Internet
- 22. #SUGDC #Blunders
- 23. hardware and software requirements #SUGDC #Blunders
- 24. not enough service accounts #SUGDC #Blunders
- 25. primary service accounts Account Purpose Requirements SQL Server Runs SQL Server • Domain user account • No rights in SharePoint Setup Account Installs the bits and performs initial • Domain user account configuration • Member of Local Admins on each server in the farm • securityadmin and dbcreator on SQL instance Farm Account Used for configuring and managing • Domain account the farm and runs primary services • Additional rights are automatically (e.g. SPTimerV4) granted as part of installation (both server and SQL) #SUGDC #Blunders
- 26. other service accounts Account Purpose Requirements MySites Application Worker process identity for MySites • Domain user account Pool • Managed account Content Application Worker process identity for Content • Domain user account Pool web applications • Managed account Services Worker process identity for Service • Domain account Application Pool Application Pools • Managed account Search Service Process identity for SharePoint • Domain account Process Foundation (Help) search service • Managed account and SharePoint Search service Search Service Used to crawl content specified in • Domain account Default Content content sources Access User Profile Import Account used to import (and • Domain account Account optionally export) user data from an • Replicate Directory Changes in AD identity store #SUGDC #Blunders
- 27. still more service accounts Account Purpose Requirements Object Cache Processes items in the object cache • Domain user account Super User of a web application • Managed account • Full Control User Policy on target web application(s) Object Cache Processes items in the object cache • Domain user account Super Reader of a web application • Managed account • Full Read User Policy on target web application(s) #SUGDC #Blunders
- 28. running the farm configuration wizard #SUGDC #Blunders
- 30. #SUGDC #Blunders
- 31. sandboxed solutions… HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindows NTRPC HKEY_USERSAccountSIDSOFTWAREMicrosoftWindowsCurrentVersionWinTrustTrust ProvidersSoftwarePublishing #SUGDC #Blunders
- 32. managing managed paths #SUGDC #Blunders
- 33. trim your (audit) logs > stsadm -o trimauditlog –date 20120502 –databasename SP2010_Content_FEDSPUG #SUGDC #Blunders
- 34. trim your (audit) logs #SUGDC #Blunders
- 35. setting up Kerberos documentation #SUGDC #Blunders Configuring Kerberos Authentication for Microsoft SharePoint 2010 Products
- 37. find us @ciphertxt @usher dan@spdan.com scott.hoag@appliedis.com http://www.spdan.com http://www.psconfig.com #SUGDC #Blunders