SPSNJ
Dan Usher 
Senior Lead Engineer 
Booz Allen Hamilton 
usher_daniel@bah.com 
http://www.sharepointdan.com 
@binarybrewery
What about… 
Making an Internet site…
Maybe I could use it for… 
Point of sales…
http://bit.ly/1kROl1L 
http://bit.ly/1ksExqa
Good thing those are the only challenges… 
Right? 
Or maybe not…
Cloud 
Provider-hosted 
SharePoint 
Existing sites and 
services 
app web (optional) 
Dedicated server / hosting service 
REST + OAuth or 
client object models 
SharePoint-hosted 
SharePoint 
Existing sites and 
services 
app web
SourceSean McDonough@spmcdonough
Manage the Recycle Bin of a site(Office.com)
Capacity requirements for the Web Analytics Shared Service in SharePoint Server 2010
Dataset Characteristics 
Value 
SharePoint components 
30k 
Uniqueusers 
117k 
Unique queries 
68k 
Unique assets 
500k 
ReportingDB data size? 
200GB per day 
Capacity requirements for the Web Analytics Shared Service in SharePoint Server 2010
Dataset Characteristics 
Value 
SharePoint components 
30k 
Uniqueusers 
117k 
Unique queries 
68k 
Unique assets 
500k 
ReportingDB data size? 
73TB per year 
Capacity requirements for the Web Analytics Shared Service in SharePoint Server 2010
Dataset Characteristics 
Value 
SharePoint components 
30k 
Uniqueusers 
117k 
Unique queries 
68k 
Unique assets 
500k 
ReportingDB data size? 
511TB for 7 years 
Capacity requirements for the Web Analytics Shared Service in SharePoint Server 2010
> $webApp= Get-SPWebApplication("http://intranet.contoso.com") 
> $webApp.AllowedInlineDownloadMimeTypes.Add("application/pdf") 
> $webApp.Update()
KB896861 
DisableLoopbackCheck& SharePoint: What every admin and developer should know
TechNet 
CodePlex 
> $passphrase= ConvertTo-SecureString-asPlainText-Force 
> Set-SPPassPhrase-PassPhrase$passphrase-Confirm
<psuedocode> 
if (!server.HasInternetConnectivity()) { server.DisableCRLCheck(); } 
</psuedocode> 
Certificate Revocation List Check and SharePoint 2010 without an Internet Connection 
SOFTWAREMicrosoftWindowsCurrentVersionWinTrustTrust ProvidersSoftware Publishing
Account 
Purpose 
Requirements 
SQL Server 
Runs SQL Server 
•Domainuser account 
•Norights in SharePoint 
Setup Account 
Installsthe bits and performs initial configuration 
•Domain user account 
•Member of LocalAdmins on each server in the farm 
•securityadminand dbcreatoron SQL instance 
Farm Account 
Used for configuringand managing the farm and runs primary services (e.g.SPTimerV4) 
•Domain account 
•Additional rights are automaticallygranted as part of installation (both server and SQL)
Account 
Purpose 
Requirements 
MySitesApplicationPool 
Worker process identity for MySites 
•Domainuser account 
•Managed account 
ContentApplication Pool 
Worker processidentity for Content web applications 
•Domain user account 
•Managed account 
Services Application Pool 
Workerprocess identity for Service Application Pools 
•Domain account 
•Managedaccount 
Search ServiceProcess 
Process identityfor SharePoint Foundation (Help) search service and SharePoint Search service 
•Domain account 
•Managedaccount 
Search ServiceDefault Content Access 
Used to crawl contentspecified in content sources 
•Domain account 
User Profile ImportAccount 
Account used to import (and optionally export) user data from an identity store 
•Domainaccount 
•Replicate Directory Changes in AD
Account 
Purpose 
Requirements 
ObjectCache Super User 
Processesitems in the object cache of a web application 
•Domain useraccount 
•Managed account 
•Full Control User Policy on targetweb application(s) 
Object CacheSuper Reader 
Processesitems in the object cache of a web application 
•Domain user account 
•Managed account 
•FullRead User Policy on target web application(s)
dan@spdan.com 
@binarybrewery 
www.sharepointdan.com

2014 09-20 - SPSNJ - Worst Practices of SharePoint

  • 1.
  • 4.
    Dan Usher SeniorLead Engineer Booz Allen Hamilton usher_daniel@bah.com http://www.sharepointdan.com @binarybrewery
  • 10.
    What about… Makingan Internet site…
  • 11.
    Maybe I coulduse it for… Point of sales…
  • 12.
  • 13.
    Good thing thoseare the only challenges… Right? Or maybe not…
  • 26.
    Cloud Provider-hosted SharePoint Existing sites and services app web (optional) Dedicated server / hosting service REST + OAuth or client object models SharePoint-hosted SharePoint Existing sites and services app web
  • 28.
  • 40.
    Manage the RecycleBin of a site(Office.com)
  • 44.
    Capacity requirements forthe Web Analytics Shared Service in SharePoint Server 2010
  • 45.
    Dataset Characteristics Value SharePoint components 30k Uniqueusers 117k Unique queries 68k Unique assets 500k ReportingDB data size? 200GB per day Capacity requirements for the Web Analytics Shared Service in SharePoint Server 2010
  • 46.
    Dataset Characteristics Value SharePoint components 30k Uniqueusers 117k Unique queries 68k Unique assets 500k ReportingDB data size? 73TB per year Capacity requirements for the Web Analytics Shared Service in SharePoint Server 2010
  • 47.
    Dataset Characteristics Value SharePoint components 30k Uniqueusers 117k Unique queries 68k Unique assets 500k ReportingDB data size? 511TB for 7 years Capacity requirements for the Web Analytics Shared Service in SharePoint Server 2010
  • 50.
    > $webApp= Get-SPWebApplication("http://intranet.contoso.com") > $webApp.AllowedInlineDownloadMimeTypes.Add("application/pdf") > $webApp.Update()
  • 56.
    KB896861 DisableLoopbackCheck& SharePoint:What every admin and developer should know
  • 58.
    TechNet CodePlex >$passphrase= ConvertTo-SecureString-asPlainText-Force > Set-SPPassPhrase-PassPhrase$passphrase-Confirm
  • 59.
    <psuedocode> if (!server.HasInternetConnectivity()){ server.DisableCRLCheck(); } </psuedocode> Certificate Revocation List Check and SharePoint 2010 without an Internet Connection SOFTWAREMicrosoftWindowsCurrentVersionWinTrustTrust ProvidersSoftware Publishing
  • 62.
    Account Purpose Requirements SQL Server Runs SQL Server •Domainuser account •Norights in SharePoint Setup Account Installsthe bits and performs initial configuration •Domain user account •Member of LocalAdmins on each server in the farm •securityadminand dbcreatoron SQL instance Farm Account Used for configuringand managing the farm and runs primary services (e.g.SPTimerV4) •Domain account •Additional rights are automaticallygranted as part of installation (both server and SQL)
  • 63.
    Account Purpose Requirements MySitesApplicationPool Worker process identity for MySites •Domainuser account •Managed account ContentApplication Pool Worker processidentity for Content web applications •Domain user account •Managed account Services Application Pool Workerprocess identity for Service Application Pools •Domain account •Managedaccount Search ServiceProcess Process identityfor SharePoint Foundation (Help) search service and SharePoint Search service •Domain account •Managedaccount Search ServiceDefault Content Access Used to crawl contentspecified in content sources •Domain account User Profile ImportAccount Account used to import (and optionally export) user data from an identity store •Domainaccount •Replicate Directory Changes in AD
  • 64.
    Account Purpose Requirements ObjectCache Super User Processesitems in the object cache of a web application •Domain useraccount •Managed account •Full Control User Policy on targetweb application(s) Object CacheSuper Reader Processesitems in the object cache of a web application •Domain user account •Managed account •FullRead User Policy on target web application(s)
  • 70.