Microsoft's massive investment into Cloud technologies are enough to make anyone stop and wonder if the Cloud is something they should be focusing on for SharePoint. During this class we will examine Microsoft's Cloud Strategy from an ITPro's perspective and understand how a hybrid scenario can be structured to maximize the On Premises, Infrastructure as a Service, & Cloud capabilities.
Join Rackspace’s Microsoft MVP, Jason Himmelstein, as he explains the new landscape and how companies both large and small can take advantage of all the features that Office 365, Azure, and most specifically SharePoint 2016 bring to the table. We will deep dive into deployment planning and implementation across the hybrid stack. We will also discuss the management of the SharePoint platform across all tiers. We will walk through the concepts behind the new world of Identity Management, take you through implementing Azure Active Directory Connect and explain the benefits & differences between it and ADFS. We will even discuss how the hybrid space changes management of Exchange in your organization & what topology implications this has. At the end of this session you will have a better understanding of how to manage your Hybrid SharePoint estate, using your onPrem Identities synced to Azure, be confidently enjoying all of the benefits of the Hybrid Microsoft World.
1. SharePoint Admin in a Hybrid World
Jason Himmelstein, Microsoft MVP
Office 365 Advisory Services Manager
@sharepointlhorn
http://www.sharepointlonghorn.com
20. www.rackspace.com
• User Experience first, IT needs second
• Features first, Administration second
• Users do not care where things live, they just want the tools that they want to
do their work with as little impact as possible
20
What does this all mean?
www.rackspace.com
21. www.rackspace.com
–A little bit here, a little bit there
–Location of data needs to be invisible to the user
–Security concerns are paramount, but Users want one user name & password
–The ability to have both onPrem & Cloud solutions is imperative
What does the future look like?
25. www.rackspace.com
Physical Architecture - Scaled Farm Architecture
Load Balancer
SQL
Cluster
SQL Server SQL Server
Application Servers Application Servers
Web Front Ends Web Front Ends
Web Front Ends
Intranet User
Remote BLOB Store
Search Topology
Heartbeat
26. www.rackspace.com
Physical Architecture - Large Farm Architecture
Farm 2 Farm 3
Patch Web Server/
Central Admin/Crawl
Target
App Server - OWA/XLSApp Server - OWA/XLS App Server - OWA/XLS App Server - PP/PPS App Server - PP/PPS App Server - PP/PPS
Patch Web Server/
Central Admin/Crawl
Target
App Server - OWA/XLS App Server - PP/PPS
Farm 2 Cluster 1 Farm 2 Cluster 2 Farm 3 Cluster 1
Server configuration – Large Farm
Farm 3 Cluster 2
No-CodeSolutionFarm
FullTrustSolutionFarm
SQLServers
OLTP SQL Cluster
Farm 1 Cluster
Farm 2 Cluster 1
Farm 2 Cluster 2
Farm 3 Cluster 1
Farm 3 Cluster 2
2 App Servers
Web Servers Web Servers Query Server
Index Server
MySites
CrossFarmServices
SharePointSearch
Farm 1
SQL Cluster
SQL Cluster
Search SQL Cluster 1 Search SQL Cluster 2
Query Server
Index Server
Central Admin
Search SQL Cluster 1 Search SQL Cluster 2MySites SQL Cluster
SQL DataMart
SSAS Processing
SSRS Cluster
SQL Servers
Web Servers Web Servers Web Servers Web Servers Web Servers Web Servers Web Servers
App Server - PP/PPSApp Server - OWA/XLS App Server - OWA/XLS App Server - PP/PPS
App Server - OWA/XLS
SSAS Query Cluster
TFS Proxy Server TFS App Server TFS App ServerTFS Proxy Server
TFS
34. www.rackspace.com
ADFS Coexistence
Network Load Balancer
ADFS ADFS Azure AD Connect
ADFS Web
Application Proxy
ADFS Web
Application Proxy
AD DC AD DC
Corporate Firewall
Perimeter Firewall
Network Load Balancer
Azure
Active Directory
36. www.rackspace.com
SharePoint Hybrid Sites and search at a glance
Feature Non-hybrid Hybrid
OneDrive for Business
OneDrive for Business is available in Office 365 but there is no
link to it from SharePoint Server. If you've deployed MySites,
users may have a second OneDrive for Business in SharePoint
Server.
OneDrive links are provided in SharePoint Server which direct
users to OneDrive for Business in Office 365.
Site following
The followed sites list in Office 365 tracks followed SharePoint
Online sites. If you've deployed MySites, a second followed sites
list in SharePoint Server tracks followed SharePoint Server sites.
Followed sites from both locations are consolidated in the
SharePoint Online followed sites list. SharePoint Server links to the
followed sites list redirect users to the SharePoint Online followed
sites list.
Document following
If you've deployed MySites, the followed documents list in
SharePoint Server tracks followed SharePoint Server
documents.
Hybrid document following is not available. If you use hybrid
OneDrive for Business, the SharePoint Server followed documents
list will be hidden from users. (Note that if you configure hybrid
search and you have Delve, you can favorite SharePoint Server
documents.)
Profiles
Users have separate profiles in SharePoint Server and in Office
365.
Profiles exist in both locations, but SharePoint Server links to
users' profiles redirect profiles in Office 365.
Extensible app launcher (SharePoint Server 2016 only)
Users see a different app launcher in Office 365 and in
SharePoint Server.
There are still separate app launchers, but the SharePoint Server
app launcher includes several tiles from Office 365.
Search
Separate search indexes and search centers for SharePoint
Server and Office 365. Users must search from SharePoint
Server to find items stored there and they must search form
Office 365 to find items stored there.
Search results between the two locations are combined in one of
two ways. Cloud hybrid search crawls on-premises content and
indexes it in the search index in Office 365. Users can search the
Office 365 index from either location. Hybrid federated search
combines search results from each search index in a single search
center.
Referenced from https://support.office.com/en-us/article/SharePoint-hybrid-sites-and-search-5ff7e56a-7af2-4511-adec-1e043afe244e?ui=en-US&rs=en-US&ad=US
37. www.rackspace.com
• Several hybrid features are bundled together to help ease deployment. The two feature bundles are:
– Hybrid OneDrive for Business
– Hybrid sites features
• The following table shows which hybrid features are included with each option.
Hybrid Sites features and OneDrive for Business
Feature Hybrid OneDrive for Business Hybrid sites features
OneDrive for Business X X
Site following X
Profiles X X
Extensible app launcher X
Referenced from https://support.office.com/en-us/article/SharePoint-hybrid-sites-and-search-5ff7e56a-7af2-4511-adec-1e043afe244e?ui=en-US&rs=en-US&ad=US
38. www.rackspace.com
• Plan, Plan, Plan, Plan and then…
• Follow the Principle of Least Privilege
SharePoint onPrem installations
SharePoint Services SQL Services
sp_install sql_server
sp_farm sql_serverAgent
sp_webapp sql_olapservice
sp_serviceapps sql_reportserver
sp_search sql_dtsserver
sp_userprofile
sp_superuser
sp_superreader
NT 3.5 brings Server\Workstation model
Exchange 5.0 – Outlook Web Access
Exchange 5.5 – Microsoft Outlook
Exchange 2000 gets rid of its own directory service & starts using Active Directory
Exchange Instant Messenger Service is born
SharePoint is born
SharePoint becomes a real product as Microsoft SharePoint Portal Server 2003
Exchange breaks out Instant Messaging into Office Live Communications Server
Exchange added several basic filtering methods
Active Directory adds better Management capabilites
Microsoft Office SharePoint Server 2007
Exchange 2007 – shift to 64bit architecture
Windows Domains mature: Active Directory Domain Services & Active Directory Federation Services
Exchange 2010: change to topology (Mailbox Server, Client Access Server (CAS), Unified Messaging Server, Hub Transport Server, Edge Server roles)
SharePoint 2010: Introduction of "Service Applications" SOA model & MySites
Lync 2010
Domain Functional Level 2008 R2: Active Directory Rights Management Services & Active Directory Recycle Bin
Exchange 2013: public folders are now part of mailbox databases and high availability is achieved using Database Availability Groups (DAG).
SharePoint 2013: Service Applications & OneDrive (SkyDrive)
Lync 2013
Domain Functional Level 2012: Virtualize first & A new claims-based authorization platform that enhances, not replaces, the existing model
SharePoint 2016
Exchange 2016
Windows Server 2016
Azure Active Directory