SharePoint Insanity Demystified


Published on

After years of helping organizations around the world to deploy and implement SharePoint, Dan Holme has found that there are certain pain points that almost everyone encounters. Some are confusing concepts. Some are unfortunate decisions made based on misunderstanding Microsoft’s UI or documentation. Some are due to unnecessarily complex terminology. And some because there are things we might think that SharePoint should do, but can’t. In this session, Dan will share the most common and problematic scenarios, and their solutions, with the goal of saving you pain, time, and money. Think of this session as “Lessons Learned,” “Best Practices,” or “From the Field” on steroids. Whether you’re new to SharePoint or a seasoned veteran, in this grab-bag session there will be treasures for you!

This session is effectively a “grab bag” of small, hot topics that are underdocumented, over-hyped, or misunderstood by the community. I will vary the content of this session based on the other sessions that are being presented at the event, and based on the current “hot topics” in the SharePoint community.

Published in: Technology
  • Be the first to comment

  • Be the first to like this

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide
  • Secure store accounts
  • Confirm perms assigned in 2013During farm setup: dbcreator and securityadmin fixed server rolesCreating databses: db_owner fixed db role for all SharePoint databasesAdding servers to farm: Given permissions a new server automatically
  • TCP/IP v Named Pipes
  • Discuss the challenges of RTM guidance: what was “guidance” and what was “support”?CONDITIONS APPLYContent databases of up to 4 TB are supported when the following requirements are met:Disk sub-system performance:0.25 IOPs per GB minimum2.00 IOPs per GB recommended for optimal performanceTTFB of 20msArchitecture and tools must support performance expectations, future capacity, backup, restore, high availability, disaster recoveryDiscussion: Does anyone have more than a terabyte of data in their farm? Does anyone have a database larger than 200GB? Are there any negative performance impacts? Does anyone have 2GB / 1GB / 500MB files stored in SharePoint? How do they perform? How fast is your SharePoint farm growing? If you haven’t deployed SharePoint, how do you know how much storage you’ll need?
  • SharePoint Insanity Demystified

    1. 1. Resources
    2. 2. SQL Server service: SQL_Service, * SQL administrator: SQL_Admin SharePoint Administrator and Setup User: SP_Admin SharePoint Farm Service: SP_Farm Application pool accounts SP_WebApps SP_MySiteApp * SP_ServiceApps * Default content access (crawl) account: SP_Crawl, * User Profile Synchronization account: SP_UserSync Object cache accounts: SP_CacheSR, SP_CacheSU
    3. 3. SQL Database Engine service account: SQL_Service SQL service ownership account: SQL_Admin Resources SQL Agent service account: SQL_Agent
    4. 4. SharePoint Administrator and Setup User Used by a service admin to perform bit-level changes Unique, “generic” SharePoint administrative account Not your “normal” user or admin account
    5. 5. Domain user account Administrator SQL privileges PowerShell privileges
    6. 6. SharePoint Farm Service Used for highly privileged SharePoint services Domain user account SharePoint assigns permissions automatically
    7. 7. Extra privileges: UPS Before provisioning User Profile Synchronization Service 1. Add SP_Farm to local Administrators
    8. 8. Collab Intranet WSS_CONTENT_APPLICATION_POOLS role Extranet
    9. 9. Web and service application pool accounts Domain user accounts Register as managed accounts in the SharePoint farm Assigned as the application pool identity Permissions required depend on the web app or service application
    10. 10. My Site web application SP_MySiteApp Account for each application pool to isolate access
    11. 11. SharePoint Search default content access account Domain user account Requires read permission to indexed content sources Configure SP_Crawl before creating web apps Assign Read permission to all other indexed content sources Create additional content access accounts
    12. 12. SharePoint User Profile Synchronization Domain user account Requires Replicating Directory Changes permission on domain
    13. 13. Object cache accounts See Note: this is not the same as BLOB cache or remote BLOB store. This has to do with versions & drafts
    14. 14. Office Web Apps (2013) Secure Store
    15. 15. SharePoint Automation: SP_Automation Rights required to perform automated tasks
    16. 16. SharePoint Enterprise Administrator: SP_EnterpriseAdmin Least privilege not always possible SQL Administrator Local Administrators Farm Administrators Disabled until needed
    17. 17. Each farm… … needs its own “set” of accounts naming convention SP_Farm SP_Farm_Dev SP_Farm_Test Why?
    18. 18. Account permissions and security settings in SharePoint 2013 Configure object cache user accounts in SharePoint Server 2013
    19. 19. Import-CSV $filename | New-ADUser -Path $ou –PassThru | Set-ADAccountPassword -Reset –NewPassword (ConvertToSecureString –AsPlaintext $password –Force) -PassThru | Enable-ADAccount Write-Host "Complete"
    20. 20. What is a service account? The #1 problem with service accounts is…. PASSWORD CHANGES Service account password is changed Painful! Result… Admins set Password never expires
    21. 21. In a nutshell Register a managed account Use a managed account
    22. 22. Manual Password Change for a managed account Benefits Does not require any delegation in Active Directory CHANGE PASSWORD
    23. 23. Automatic Password Change for an individual managed account Benefits
    24. 24. Use them Configure automatic password management Know the limitations
    25. 25. SQL alias SQL Alias = today = tomorrow = next year Configure a SQL alias CLICONFG.exe on each SharePoint server in the farm Do not “Fake it out” with a DNS record Kerberos Consider “tiers” of aliases to support SQL scaling Content Databases: SQLSPCONTENT Search Databases: SQLSPSEARCH Service Application Databases: SQLSPSERVICES
    26. 26. workflows security SQL Content Database metadata “Document” BLOB Binary Large Object (BLOB)
    27. 27. Content Databases TempDB Model – Monitor – Measure – Modify
    28. 28. Content Database Site Collection Items per CDB *Conditions apply: Performance, DR, HA
    29. 29. Report Invite Manage
    30. 30. Scope Share Shared With Advanced Site or Site Settings List or Library Folder Document or Site Permissions
    31. 31. Scopes Assign permissions Review permissions Manage permissions Reinstate inheritance and remove unique permissions Requires Change Permission permission
    32. 32. Share sites or documents with external users Requires full control permission Share a site Share a document Guest links
    33. 33. Enable or disable external sharing Read the documentation! 2013 E: 2013 P: 2010:
    34. 34. Site Site Library W W W
    35. 35. @danholme