2. 2 Implementing and Administering Windows SharePoint Services 3.0
Implementing and Administering
Windows SharePoint Services 3.0
Objectives
After completing this lab, you will be able to:
Describe the changes to the Central Administration site.
Manage Microsoft® Windows® SharePoint® Services.
Create and manage SharePoint sites.
Configure permissions at the site, list, and item levels.
Configure security policies.
Scenario
You are the network administrator for Contoso, Ltd. The company has Windows SharePoint
Services version 2 deployed, but it is planning to deploy Windows SharePoint Services 3.0 to
provide enhanced collaboration between users in the company. In preparation for the migration, you
need to understand how to manage Windows SharePoint Services 3.0.
Lab Components
This lab includes three components:
Exercises—The exercises include detailed step-by-step instructions and are required. The
exercises cover the core information needed to meet the lab objectives.
Additional Tasks—The additional tasks are listed at the end of each exercise. You can perform
these tasks to extend your learning about the product. The additional tasks do not provide step-by-
step instructions, but the procedures are similar to the steps that you performed in the exercises.
The additional tasks are optional, but it is recommended that you complete them to gain a fuller
understanding of the product.
For Further Research—The For Further Research component is at the end of the lab and provides
additional exercises that you can perform if you have time. These exercises might include some of
the tasks that you performed earlier. The For Further Research exercises do not provide step-by-
step instructions, but they are similar to the required exercises. The For Further Research exercises
are optional.
3. Implementing and Administering Windows SharePoint Services 3.0 3
Computers
This lab uses three virtual machines performing the following roles:
3369A-3373A-SEA-DC1
• Domain controller
• Microsoft Exchange Server computer
3369A-3373A-SEA-SRV1
• Member server
• Server running Microsoft Windows SharePoint Services 3.0
3369A-3373A-SEA-CL1
• 2007 Microsoft Office system client
Estimated time to complete this lab: 90 minutes
Virtual Lab Console
This lab makes use of the Microsoft Virtual Lab Program, an application that allows you to run
multiple virtual machines online. During the lab, you will switch between different windows, each
containing a separate virtual machine running Microsoft Windows Server™ 2003 or Microsoft
Windows® XP.
Before you start the lab, familiarize yourself with the following basics of the Virtual Lab Console:
To switch the focus for your mouse and keyboard to the virtual machine, click inside the virtual
machine window.
To remove the focus from a virtual machine, move the mouse pointer outside the virtual machine
window.
To issue the CTRL+ALT+DELETE keyboard combination inside a virtual machine,
use RIGHT-ALT+DELETE instead. Virtual PC designates the RIGHT-ALT key as the Host key.
Select the machine you wish to perform tasks on by selecting it in “My Machines”
To Start the Lab
Before you can perform any of the lab exercises, you must log on to the computer. If an error
message warns you that the disk’s parent appears to have been modified, click OK to continue. This
error message appears when you move Virtual PC images between computers with different time-
zone settings.
Note These demonstrations have been developed using beta software. If a specific task results
in an error message or a time-out screen, try performing the task again. The task will most
likely be completed successfully at the second attempt.
4. 4 Implementing and Administering Windows SharePoint Services 3.0
Exercise 1: Central Administration Site Overview
As with earlier versions, Windows SharePoint Services 3.0 provides a Central Administration site
that can be used to configure server and application settings. However, Windows SharePoint
Services provides several key improvements to the Central Administration pages. This exercise
shows an overview of interface changes in the Central Administration pages.
Central Administration Site Overview
Tasks Detailed Steps
Setup steps only. Click on SEA-SRV1 under My Machines in the Virtual Lab
console
Log on to SEA-SRv1 by entering RIGHT-ALT+DEL as
Administrator with the password Pa$$w0rd.
Log on to SEA-CL1 as ContosoQin with the password
Pa$$w0rd.
1. Connect to the Central Administration Click Start, point Administrative Tools, and then click
site on SEA-SRV1. SharePoint 3.0 Central Administration.
2. Examine the three default pages that a. On the Central Administration home page, point out the three
are included on the Central links on the top links bar.
Administration site. b. Click Operations.
c. Click Application Management.
d. Click Home.
3. Examine the settings available on the a. On the Central Administration home page, click Incoming
Central Administration home page. E-Mail Settings.
4. Review the Incoming E-Mail setting, b. On the Administrative Tasks: Incoming E-Mail Settings
and then mark the task as completed. page, click Configure Incoming E-Mail Settings.
c. Scroll to the bottom of the page, and then click Cancel.
d. On the Operations page, click Home.
e. On the Central Administration home page, click Incoming
E-Mail Settings.
f. On the Administrative Tasks: Incoming E-Mail Settings
page, click Edit Item.
g. In the Status section, click Completed, and then click OK.
5. View the event logs on each of the a. On the Central Administration home page, point out the
servers listed in the Farm Topology Farm Topology section. Next to SEA-SRV1, click View.
section. b. Click Home.
5. Implementing and Administering Windows SharePoint Services 3.0 5
Exercise 2: Configuring Windows SharePoint Services
The Operations page on the Windows SharePoint Services Central Administration site includes all
of the settings that are applied to the Windows SharePoint Services server or farm. The Application
Management page on the Windows SharePoint Services Central Administration site includes all of
the settings that are applied to the Windows SharePoint Services applications. In Windows
SharePoint Services, the term application has replaced the term virtual server, so you will see that
many of the settings on this page are similar to the virtual server settings in earlier versions of
Windows SharePoint Services. This exercise shows some of the administrative tasks that will be
performed on the Operations page and the Application Management page.
Configuring Windows SharePoint Services
Tasks Detailed Steps
1. Connect to the Operations page of the On the Central Administration home page, click
Central Administration site. Operations.
2. Examine the incoming e-mail settings. a. On the Operations page, click Incoming E-Mail
Settings.
b. On the Incoming E-Mail Settings page, point out the
Enable sites on this server to receive e-mail option.
c. Point out the E-Mail Drop Folder setting and the
Incoming E-Mail Server Display Address setting.
d. Click Cancel.
3. Examine the status of running timer jobs, a. In the Global Configuration section, click Status of
and also view the timer job definitions. running timer jobs.
b. On the site breadcrumb, click Operations.
c. In the Global Configuration section, click Timer job
definitions.
d. On the site breadcrumb, click Operations.
4. On the Operations page, configure the a. In the Global Configuration section, click Quiesce
option to quiesce the farm. When you Farm.
quiesce the farm, all of the servers in the b. On the Quiesce Farm page, in the The farm should be
farm will stop accepting connections for fully quiesced after this long (Time in Minutes) box,
long-running jobs. For example, if you are type 10.
using Microsoft Office InfoPath® forms on
a SharePoint site, a quiesced farm will not c. Click Cancel.
accept new connections for users to start
filling out forms, but it will allow users to
complete forms that they have already
started filling out. By quiescing the farm,
you can slowly shut down that farm for
maintenance and decrease the disruption
for users.
6. 6 Implementing and Administering Windows SharePoint Services 3.0
(continued)
Configuring Windows SharePoint Services
Tasks Detailed Steps
5. Configure server logging and reporting on a. Under Logging and Reporting, click Usage analysis
the Operations page. processing.
b. On the Usage Analysis Processing page, in the Logging
Settings section, click Enable logging.
c. In the Number of log files to create box, type 4.
d. In the Processing Settings section, click Enable usage
analysis processing.
e. Change the End time to 2 am.
f. Click OK.
g. Under Logging and Reporting, click Diagnostic
logging.
h. On the Diagnostic Logging page, in the Event
Throttling section, click Warning in the Least critical
event to report to the event log list.
i. Click Medium in the Least critical event to report to
the trace log list.
j. Scroll to the bottom of the page, and then click OK.
6. On the Operations page, perform a backup a. In the Backup and Restore section, click Perform a
of the server running Windows SharePoint backup.
Services. b. On the Perform a Backup page, select the WSS_Content
check box, and then click Start Backup Process.
c. On the Start Backup page, in the Backup Location box,
type C:WSSBackup. Click OK.
d. On the Backup and Restore Status page, click View
History.
e. Under Central Administration, click Operations.
7. Configure a new alternative access a. In the Global Configuration section, click Alternate
mapping setting for the Windows access mappings.
SharePoint Services site. Configure b. Click Add Incoming URLS.
the new mapping as http://sea-
srv1.contoso.com. c. On the Add Incoming URLs page, beside Alternate
Access Mapping Collection, click No selection, and then
click Change Alternate Access Mapping Collection.
d. On the Select An Alternate Access Mapping Collection
page, click SharePoint (80).
e. Under Zone, click Internet
f. In the New default zone URL protocol, host and port
box, type http://sea-srv1.contoso.com.
g. Click Save.
h. Under Central Administration, click Home.
7. Implementing and Administering Windows SharePoint Services 3.0 7
(continued)
Configuring Windows SharePoint Services
Tasks Detailed Steps
8. Access the Application Management page On the Central Administration page, click Application
of the Central Administration site. Management.
9. Examine the workflow settings on the a. Under Workflow Management, click Workflow
server. settings.
b. On the Workflow Settings page, point out the options for
enabling and disabling user-defined workflows and for
enabling participants without site access to participate in
workflows.
c. Click Cancel.
10. In a later exercise, you will examine some Under Central Administration, click Home.
of the security and site management
options available on the Central
Administration site.
Additional Tasks
If time permits, examine the other configuration options on the Operations and Application
Management pages. Many of these tasks are similar to the tasks you performed when administering
Windows SharePoint Services 2.0.
8. 8 Implementing and Administering Windows SharePoint Services 3.0
Exercise 3: Creating and Managing SharePoint Sites
In many ways, creating and managing SharePoint sites has not changed in Windows SharePoint
Services. As a Windows SharePoint Services administrator, you will still create site collections and
configure the Web sites for users. In this exercise, you will see how to create a site collection in
Windows SharePoint Services and how to configure the site home page.
Creating and Managing SharePoint Sites
Tasks Detailed Steps
1. On the Central Administration site a. On the Central Administration site, click Application
create a new site collection named Management.
Research. Use the Team Site template. b. Under SharePoint Site Management, click Create site
collection.
c. On the Create Site Collection page, in the Title text box,
type Research.
d. On the Create Site Collection page, in the URL name text
box, type Research.
e. In the Primary Site Collection Administrator section, in the
User name text box, type ContosoQin.
f. In the Template Selection section, under Select a template,
ensure that Team Site is selected, and then click OK.
2. Try to log on as the administrator who a. On the Top-Level Site Successfully Created page, click
created the site. By default, the http://sea-srv1/sites /research.
administrator is denied permission to b. On the Error: Access Denied page, click Sign in as a
the site. different user.
3. Log on as Qin, who is the site owner. c. Log on as ContosoQin with the password Pa$$w0rd.
4. Review the configuration options a. On the Research Team site, click Site Actions, and then
available on the Research Team site click Site Settings.
Site Settings page. b. On the Site Settings page, click Home.
9. Implementing and Administering Windows SharePoint Services 3.0 9
(continued)
Creating and Managing SharePoint Sites
Tasks Detailed Steps
5. Add a Site Users Web Part to the a. On the Research Team site, click Site Actions, and then
Research team site. click Edit Page.
b. In the right column, click Add a web part.
c. At the bottom of the Add Web Parts to Right pane, click
Advanced Web Part gallery and options.
d. In the Add Web Parts dialog box, click Site Users and drag
and drop it between the Site Image and Links Web parts.
e. Close the Add Web Parts pane.
f. In the right column, drag the Site Users Web Part header bar
to the area under the Announcements Web Part in the left
column.
g. On the Site Users header, click the down arrow, and then
click Modify Shared Web Part.
h. In the Site Users pane, click Cancel.
i. On the Team Site home page, click Exit Edit Mode.
Additional Tasks
If time permits, examine the other configuration options on the Site Settings page for the Research
site. Many of the settings are similar to the options in earlier versions of Windows SharePoint
Services. For example, on this page, you can configure permissions and configure the site title,
description, and theme.
10. 10 Implementing and Administering Windows SharePoint Services 3.0
Exercise 4: Configuring Permissions at the Site, List, and Item
Levels
Windows SharePoint Services uses many of the same concepts and procedures for assigning
permissions that earlier versions use. However, Windows SharePoint Services provides some
additional features, particularly for assigning item-level security. In this exercise, you will see how
to configure security at the site, list, and item levels for Windows SharePoint Services.
Configuring Permissions at the Site, List, and Item Levels
Tasks Detailed Steps
1. Create a new subsite named Private a. On SEA-CL1, open Microsoft Internet Explorer and connect
under the Research top-level site. to http://sea-srv1/sites/research.
Create unique permissions for the b. On the Team Site home page, click Site Actions, and then
subsite. click Site Settings.
2. Add the ContosoResearch Private RO c. On the Site Settings page, under Site Administration, click
group to the site visitors group, and Sites and Workspaces.
add ContosoResearch Private
Contributor to the site members group. d. On the Sites and Workspaces page, click Create.
e. On the New SharePoint Site page, in the Title box, type
Private.
f. In the URL name box, type Private.
g. Under Permissions, click Use unique permissions, and then
click Create.
h. On the Set Up Groups for this Site page, in the Visitors to
this Site section, click Create a new Group.
i. In the Visitors to this Site section, click Browse.
j. On the Add People and Groups page, in the top text box,
type Research, and then click the search icon.
k. Under Account Name, click ContosoResearch Private
RO, and then click Add. Click OK.
l. In the Members of this Site section, click Browse.
m. On the Add People and Groups page, in the top text box,
type Research, and then click search icon.
n. Under Account Name, click ContosoResearch Private
Contributor, and then click Add. Click OK.
o. In the Owners of this Site section, click Use an existing
group, select Research Owners in the drop-down list, and
then click OK.
11. Implementing and Administering Windows SharePoint Services 3.0 11
(continued)
Configuring Permissions at the Site, List, and Item Levels
Tasks Detailed Steps
3. Modify the permissions on the a. On the Private home page, click Announcements.
Announcements list to remove all b. Click Settings, and then click List Settings.
permissions for the site visitors group.
c. On the Customize Announcements page, click Permissions
for this list.
d. On the Permissions: Announcements page, click Actions,
then click Edit User Permissions. In the Internet Explorer
dialog box, click OK.
e. On the Permissions page, select the Private Visitors check
box, click Actions, and then click Remove User
Permissions. In the Internet Explorer dialog box, click OK.
f. In the site breadcrumb, click Announcements.
4. Modify the permissions on an a. On the Announcements page, click the announcement in the
individual announcement so that only list.
Qin can view it. b. On the Announcements: Get Started with Windows
SharePoint Services! page, click Manage Permissions.
c. On the Permissions: Get Started with Windows SharePoint
Services! page, click Actions, and then click Edit
Permissions. In the Internet Explorer dialog box, click OK.
d. Select the check boxes for Private Visitors and Research
Owners.
e. Click Actions, click Remove User Permissions. In the
Internet Explorer dialog box, click OK.
f. In the site breadcrumb, click Private.
5. Test the effect of configuring security a. On the Private home page, click Welcome Qin Hong, and
at the site, list, and item levels. Sign then click Sign in as Different User.
on as the following users, and test the b. Sign in as ContosoGreg with the password Pa$$w0rd.
level of access for each user:
c. On the Access Denied page, click Sign in as a different
• Greg Weber, who is not a member user, and then sign in as ContosoCarlos with the password
of any site group for this site Pa$$w0rd.
• Carlos Lacerda, who is a member d. On the Private home page, click Welcome Carlos Lacerda,
of the Research Private RO group and then click Sign in as Different User.
• Katarina Larsson, who is a e. Sign in as ContosoKatarina with the password
member of the Research Private P@$$w0rd.Click Add new announcement.
Contributor group
f. In the Announcements: New Item page, click Cancel.
g. Click Announcements, and confirm that no announcements
are listed.
h. Click Welcome Katarina Larsson, and then click Sign Out.
Completion step only. Close Internet Explorer.
12. 12 Implementing and Administering Windows SharePoint Services 3.0
Exercise 5: Configuring Security Policies
Windows SharePoint Services uses security policies to define the level of access that users have,
based on the zone from which they access the SharePoint site. With this option, you can configure
different permissions for the same user, depending on the URL used by the user to access the Web
site. In this exercise, you will see how to configure security policies in Windows SharePoint
Services.
Configuring Security Policies
Tasks Detailed Steps
1. On the Alternate Access Mappings a. On SEA-SRV1, click Start, point to Administrative Tools,
page of the Central Administration and then click SharePoint 3.0 Central Administration.
site, confirm that http://sea-srv1 and b. On the Central Administration page, click Operations.
http://sea-srv1.contoso.com are both
listed as Incoming URLs. c. Under Global Configuration, click Alternate access
mappings.
d. On the Alternate Access Mappings page, confirm that
http://sea-srv1 and http://sea-srv1.contoso.com are both
listed as Incoming URLs.
e. On the top navigation bar, click Application Management.
2. Create a new policy for the Windows a. On the Application Management page, in the Application
SharePoint Services application, and Security section, click Policy for Web Application.
apply it to all domain users when b. On the Policy for Web Application page, click Add Users.
connecting from the Internet zone. To
prevent users from changing any c. On the Add Users page, in the Select the Zone section,
content on the SharePoint site, select Internet, and then click Next.
configure the policy to deny users d. In the Users box, type ContosoDomain Users.
write access. e. In the Choose Permission section, click Deny Write – Has
3. Note that this feature is not fully no write access. Click Finish.
implemented in this beta version of the f. You will receive an error message when you click Finish.
software, so you receive an error That is because this feature is not fully functional in this
message when you try to add the user build of Windows SharePoint Services.
group. This will be functional in the
released version of Windows g. Close Internet Explorer.
SharePoint Services.
Completion step only. Shut down all virtual machines, and delete changes.
13. Implementing and Administering Windows SharePoint Services 3.0 13
For Further Research
Complete the following exercise to learn more about the new features in Windows SharePoint
Server 3.0.
Exercise 1: Creating a Project Meetings Web Site
1. Create a new user account in the Contoso.com domain using a test name. Assign a mailbox to
the user account. Create a new group in Active Directory® directory service named Project
Managers. Assign an e-mail address to the group account. Assign the test name to the Project
Managers group.
2. Create a new user account in the Contoso.com domain using a test name. Assign a mailbox to
the user account. Create a new group in Active Directory named Project Members. Assign an
e-mail address to the group account. Assign the test name to the Project Members group.
3. Create a new Windows SharePoint Services site under the IT top-level site. Use the following
parameters when configuring the site:
• Site Name: IT Projects
• URL: ITProjects
• User Permissions: Use unique permissions
• Template: Multipage Meeting Workspace
4. Add ContosoProject Members to the IT Projects Members group.
5. Add ContosoProject Managers to the IT Projects Owners group.
6. On WPG-CL1, log on as the user that you created as a project manager. On the IT Projects site,
add a Things to Bring Web Part to the right part of the page.
7. On the second page of the site, add a Calendar Web Part and a Project Tasks Web Part.
8. Create new items in the Objectives, Agenda, and Things To Bring sections.
9. Add the user that you created as a project member to the Attendees list.
10. Create a new recurring calendar item for a weekly status meeting.
11. Log off and log back on as the project member user. Access the IT Projects site, and review the
items created by the member of the project manager group.
