Join Thomas Vochten (MVP) and Spencer Harbar (MCM, MVP) for an all-day interactive tutorial covering design, build and operational service management best practices for SharePoint Server on premises and hybrid deployments. An end to end deployment scenario will be presented, which will be built out in stages throughout the day. Additional coverage of key supporting technologies and the latest investments from Microsoft for SharePoint On Premises and Hybrid scenarios will also be included. Identity management Information security Critical farm deployment considerations Deployment approach and tooling Operational service management Designing for hybrid scenarios Hybrid configuration Troubleshooting and Tips and Tricks

3. •
•
•
•
•
•

4. •
•
•
•
•

5. Machine Purpose
DC01 Domain Controller &
Identity Synchronization
SQL01 SQL Server 2016 for SharePoint databases
SP01 SharePoint Server 2016 environment (standalone)
OOS01 Office Online Server 2016
CL01 Windows 10 client with Office 365 ProPlus
All servers are running Windows Server 2016 Datacenter
Latest updates dd April 2018

8. Innovation is cloud-first

9. •
•
•
•
•

10. •
•
•
•
•
•
•

11. •
•
•

13. •
•
•
•
•
•
•
•

14. SharePoint Online
InternetMicrosoft data center Intranet
Microsoft Office 365 tenant
SharePoint
• Search: Cloud Hybrid Search One-way outbound
• Hybrid OneDrive
• Hybrid Team Sites
SharePoint Server 2013/2016
Outbound
Inbound
Picture: © Microsoft

15. •
•
•
•
•

16. •
•
•

17. Local search results
onlyPrimary web app
SharePoint Online
InternetMicrosoft data center Intranet
Federated search
results Site collection
Office 365 tenant
SharePoint
SharePoint Online can query SharePoint Server
• Search:One-wayinbound
• Business Connectivity Services: Supported
• Duet Enterprise for SharePoint and SAP: Supported
SharePoint Server 2013/2016
SharePoint Server cannot query SharePoint Online
Inbound
On-premises SharePoint Server 2013 Enterprise Search portal: Local search results are available
SharePoint Online search portal: Local and remote search results are available
Perimeter
network
Customer network
Outbound
Reverse proxy

18. •
•
•
•
•
•

19. •
•
•
•
http://thvo.me/hybrid-in

20. •
•
•
•
•

22. Cloud Identity
Single identity in the cloud
Suitable for small
organizations with no
integration to on-premises
directories
Directory &
Password Sync*
Single identity
suitable for medium
and large organizations
without federation*
Federated Identity
Single federated identity
and credentials suitable
for medium and large
organizations
On Premises Identity
Domain based identity
solution suitable for all
organizations
Synchronized with
password or federated
identities
Internet routable AD
domain

28. •
•
•

30. •
•
•
•

31. Configuration Wizard
PowerShell
(Hybrid search only)
(All hybrid features)

32. •
•
•
•

33. •
•
•
•

34. Feature Identity Sync Single Sign On Trust creation Reverse Proxy
OneDrive Y O O N
Profiles Y O O N
Sites Y O Y N
Search Y O Y O
Trust is only needed for specific scenario’s

35. Table inspired by work by Nico Martens
Feature SP 2013 SP 2016
Federated hybrid search RTM RTM
Cloud hybrid search 01/2016 CU RTM
Hybrid app launcher 07/2016 CU RTM
Hybrid OneDrive & Profiles 09/2015 CU RTM
Hybrid Sites 07/2016 CU RTM
Hybrid Taxonomy 11/2016 CU FP1 (11/2016 CU)
Hybrid Content Types 06/2017 CU 06/2017 CU
Hybrid Auditing (preview) N/A FP1 (11/2016 CU)
Hybrid self service site
creation
03/2017 CU 11/2017 CU
MySite creation defaults to
OneDrive for Business
10/2017 CU N/A

36. You still need an on-premises
User Profile configuration!

37. •
•

38. •
•
•
•
•

46. Disclaimer: I (still) prefer PowerShell to create the search service application
http://thvo.me/sphybridonboarding

54. •
•
•
•
•
•

57. •
•

59. •
•

62. •
•

64. •
•
•

66. •
•

68. ClearSuiteLinksCache()

70. •
•

71. •
•
Taxonomy Groups Replication
Content Type Replication
•
Copy-SPTaxonomyGroups
Copy-SPContentTypes

72. Copy-SPTaxonomyGroups -LocalTermStoreName "Managed Metadata Service Application Proxy" `
-RemoteSiteUrl "https://thvobiz.sharepoint.com" `
-LocalSiteUrl "https://teams.thvobiz.net" `
-GroupNames "hybrid" `
-Credential $cred

73. •
•
•

74. •
•

77. •
•
•
•

82. •
•
•
•
•
•
•

83. •
•
•
•

84. New Cloud Hybrid SearchSP2013 Hybrid Search

85. •
•
•
•
•

86. Disables the normal ContentPlugin

96. •
•
•
•
•
•
•
•
•
•

101. SharePoint Online
+
On-Premises
Office 365 Tenant
SP-2013 Cloud SSA
Amsterdam
SP-2013 Cloud SSA
San Fransisco
SP-2013 Cloud SSA
Jakarta
SP-2016 Cloud SSA
….

102. IsExternalContent

103. {searchTerms} (IsExternalContent:1)
{searchTerms} ((IsExternalContent:1) AND Path:"file://archive")

104. •
{?{searchTerms} ContentClass=urn:content-class:SPSPeople
IsExternalcontent:1}
•
{?{searchTerms} ContentClass=urn:content-class:SPSPeople
IsExternalcontent:0}

105. $wa = Get-SPWebapplication “Your Webapp”
$wa.CrossDomainPhotosEnabled = $true
$wa.Update()

107. http://www.ableblue.com/blog/archive/2017/10/09/result-type-rules-and-display-templates-with-
sharepoint-hybrid-search/

110. •
•
•

112. SharePoint Server Search
Crawler:Azure Plugin

113. $ssa = Get-SPEnterpriseSearchServiceApplication
$ssa.SetProperty("EnableNoGetStatusFlight",1)
$ssa.Update()
Suspend-SPEnterpriseSearchServiceApplication $ssa
Restart all search services…
Resume-SPEnterpriseSearchServiceApplication $ssa
Slow upload?
Getting throttled by Azure?

114. •
•
http://thvo.me/srxcore

115. •
•
•
•
•
•
•

116. •
•
•
•
•
•

117. •
•
•
•

119. •
•

121. https://support.microsoft.com/kb/4010011

123. •
•

124. •
•

125. Install-Module MSOnline

126. $cred = Get-Credential
Connect-MSOLService -Credential $cred

127. On-Premises cmdlets:
Get-SPTrustedSecurityTokenIssuer
Get-SPTrustedRootAuthority
Azure cmdlets:
Get-MsolServicePrincipal

128. •
•
•
netsh winhttp import proxy source=ie
netsh winhttp set proxy proxy.company.net:8080

129. http://thvo.me/sphybridwiz

130. Important for things like starting the SharePoint Insights service in 2016 for hybrid auditing
or when something just doesn’t work…