tips and tricks for sharepoint 2010 - avoiding it pro blunders

37
#SUGDC #Blunders SharePoint 2010 Tips & Tricks of the Trade Avoiding Administrator Blunders Scott Hoag and Dan Usher

Upload: dan-usher

Post on 25-May-2015

576 views

Category:

Technology


2 download

TRANSCRIPT

Page 1: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

SharePoint 2010Tips & Tricks of the TradeAvoiding Administrator Blunders

Scott Hoag and Dan Usher

Page 2: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

who am I?

Infrastructure Consultant with Applied Information Sciences8 years of experience with the SharePoint platform from MCMS 2002 through 2013 todayA lowly developer…They let me build things…

Page 3: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

who’s that other guy?

Lead Associate at Booz Allen Hamilton8 years of experience with SharePoint going back to adventures with STS 2001 and SPS 2003 to the presentFollows the SharePoint Credo - ADIDASAll Day I Dream About SharePointEnjoys discussions about Claims AuthZ, SmartCard AuthN, Drumming Rudiments & the Big Bang TheoryFascinated by Radio Lab

DanUsher

usher

Page 4: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

Page 5: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

about you

Page 6: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

rules of the road

Phones silenced, phasers set to stun

Ask questions

Page 7: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

basic administrative blunders

Page 8: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

creating orphans

IIS reset solves all qualmsor so we’d like to think…

During backup of a site collectionThe backup is now invalid

During a restore of a site collectionThe restore will have portions of the site collection and associated webs restored (maybe)

Two kinds of orphansContent DatabaseConfiguration Database / Site Map

Page 9: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

permissions management

Removing groups with Full ControlRemoving yourself from groups that have Full ControlCreating new sites and groups instead of Permission Levels

Permissions…

Permissions!

Permissions!Permissions!Permissions!

Page 10: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

publish and approvepublish

I updated myMaster PagePage LayoutStyle Sheetor a number of other assets

And no one can see my changes!

Page 11: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

the recycle bin

The common misconceptionsThe (cold) truth

“Regardless of whether or not an item is sent to the users' Recycle Bin or to the Site Collection Recycle Bin, items are deleted automatically after the number of days that the server administrator specified in Central Administration.”

Manage the Recycle Bin of a site (Office.com)

Page 12: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

testing workflows as a deity

Declarative Workflows set to start when an item is created or changed will not execute when logged in as the System Account.Pro Tip: Email-enabled lists will not auto start workflows either, unless…

declarativeworkflowautostartonemailenabled (Property Reference)

> stsadm –o setproperty –pn declarativeworkflowautostartonemailenabled –pv true

Page 13: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

deleting the wrong item

I see a hidden Forms folder when using Explorer View. I think I should delete some things in it!

Page 14: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

web part fun…

The page is loading slowThe page web part gallery is confusingThe page is still loading slow

Closed web parts still load…

Page 15: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

server blunders

Page 16: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

tune your analytics

By default, you get 25 months(!!) of analytics dataMicrosoft’s guidance for capacity planning in regards to web analytics isn’t pretty.

Dataset Characteristics Value

SharePoint components 30k

Unique users 117k

Unique queries 68k

Unique assets 500k

Reporting DB data size? 200GB per day

Capacity requirements for the Web Analytics Shared Service in SharePoint Server 2010

73TB per year511TB for 7 years

Page 17: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

permissive file handling

Users are being prompted to download PDFsEnable permissive file handling for all files in Web Application in Central AdministrationSet specific mime types for a Web Application

> $webApp = Get-SPWebApplication("http://intranet.contoso.com")> $webApp.AllowedInlineDownloadMimeTypes.Add("application/pdf")> $webApp.Update()

Page 18: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

running in circles

You’re browsing your site from the server. Or you’re trying to get search to work. Or you’re trying to get a web service to work. Or you just want anything to work….HTTP 401.1 - Unauthorized: Logon Failed and you’ve got a FQDN on your siteKB896861 offers several options

DisableLoopbackCheck or BackConnectionHostNames

DisableLoopbackCheck & SharePoint: What every admin and developer should know

Page 19: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

pausing IIS

Bring up your SharePoint Products Configuration Wizard on the second screenChecking IIS to see your web applications temporarily paused

Page 20: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

lost passphrases

Passphrase is no longer known

Managed accounts and auto-password resetsDocument your farm

TechNetCodePlex

> $passphrase = ConvertTo-SecureString -asPlainText -Force> Set-SPPassPhrase -PassPhrase $passphrase -Confirm

Page 21: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

certificate revocation list

Slow (up to 60 seconds) execution of stsadm and Application Pool recycles

Enable outbound internet access to crl.microsoft.comHOSTS file redirectSet the State registry key for all users who will run a shell or application pool

Edit the machine.config for each server in your farm

<psuedocode>if (!server.HasInternetConnectivity()) {

server.DisableCRLCheck();}

</psuedocode>

Certificate Revocation List Check and SharePoint 2010 without an Internet Connection

SOFTWARE\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing

Page 22: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

installing SharePoint

Page 23: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

hardware and software requirements

Under-sizing the infrastructureVirtualizing on oversubscribed hardwareAttempting to use an IaaS cloud providerUnderestimating storage and IOPS requirements

Page 24: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

not enough service accounts

Excuses, excuses…We only need a Farm accountManaging passwords is hardWe don’t need our search to workThere’s a cookie on my Wookie!

Page 25: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

primary service accountsAccount Purpose Requirements

SQL Server Runs SQL Server • Domain user account• No rights in SharePoint

Setup Account Installs the bits and performs initial configuration

• Domain user account• Member of Local Admins on each

server in the farm• securityadmin and dbcreator on

SQL instance

Farm Account Used for configuring and managing the farm and runs primary services (e.g. SPTimerV4)

• Domain account• Additional rights are automatically

granted as part of installation (both server and SQL)

Page 26: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

other service accountsAccount Purpose Requirements

MySites Application Pool

Worker process identity for MySites

• Domain user account• Managed account

Content Application Pool

Worker process identity for Content web applications

• Domain user account• Managed account

Services Application Pool

Worker process identity for Service Application Pools

• Domain account• Managed account

Search Service Process

Process identity for SharePoint Foundation (Help) search service and SharePoint Search service

• Domain account• Managed account

Search Service Default Content Access

Used to crawl content specified in content sources

• Domain account

User Profile Import Account

Account used to import (and optionally export) user data from an identity store

• Domain account• Replicate Directory Changes in AD

Page 27: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

still more service accountsAccount Purpose Requirements

Object Cache Super User

Processes items in the object cache of a web application

• Domain user account• Managed account• Full Control User Policy on target

web application(s)

Object Cache Super Reader

Processes items in the object cache of a web application

• Domain user account• Managed account• Full Read User Policy on target web

application(s)

Page 28: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

running the farm configuration wizard

Don’t do it.Really, don’t do it. Your GUIDs will thank you!

Page 29: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

sql foibles

Not having a part time DBANot having a maintenance plan in placeNot having dedicated spindles for performanceNot using a domain account for your SQL server serviceSetting up a lot content databases in a mirrored environmentUsing Full Recovery when you don’t need toNot setting auto growth properlySetting quotas larger than disk sizeNot setting Max Degree of Parallelism properly in SP2013Modifying the stored procedures

Page 30: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

configuring SharePoint

Page 31: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

sandboxed solutions…“The sandboxed code execution request was refused because the Sandboxed Code Host Service was too busy to handle the request”

Your ports are blocked internally (TCP 32846)The UserCode Solutions service isn’t runningGPO Policy

RPC Endpoint Mapper Client AuthenticationRestrictions for Unauthenticated RPC clients

Registry Key Exists

Value set incorrectly for CRL checkHKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\RPC

HKEY_USERS\AccountSID\SOFTWARE\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\SoftwarePublishing

Page 32: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

managing managed paths

Don’t create managed paths for URIs that already exist!Both sites exist, but only 1 is accessible

Take care created managed paths with managed codeThere are limits

20 managed paths per web application

Page 33: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

trim your (audit) logs

MOSS 2007 audit trimming does not occur automatically

> stsadm -o trimauditlog –date 20120502 –databasename SP2010_Content_FEDSPUG

Page 34: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

trim your (audit) logs

SharePoint 2010 works a little better

Page 35: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

setting up Kerberos

Not reading the documentationNot knowing how to use ADSIEdit or setspnNot realizing that Kerberos usually dies at the boundaryNot understanding the Claims to Windows Token Service

Configuring Kerberos Authentication for Microsoft SharePoint 2010 Products

Page 36: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

questions

Page 37: Tips and Tricks for SharePoint 2010 - Avoiding IT Pro Blunders

#SUGDC #Blunders

find us

Scott HoagTwitter: @ciphertxtEmail: [email protected]: http://www.psconfig.com

Dan UsherTwitter: @usherEmail: [email protected]: http://www.spdan.com