Todd and Shane talk about SharePoint Administration Todd Klindt & Shane Young SharePoint911

Who is this Todd guy? WSS MVP since 2006 Speaker, writer, consultant, Aquarius, President of Shane Young fan club Personal Blog www.toddklindt.com/blog Company web site www.sharepoint911.com E-mail todd.klindt@rackspace.com Twitter me! @toddklindt Glad Shane doesn’t sign my paychecks

Who Am I? Shane Young SharePoint911, a Rackspace Company Microsoft Office SharePoint Server MVP Consultant, Trainer, Writer, & Speaker Shane.Young@Rackspace.com Blog http://msmvps.com/shane SharePoint Consulting http://www.sharepoint911.com http://twitter.com/shanescows Just had my first paid holiday in almost 7 years.

Session Agenda Talk about anything SharePoint admin you want Our plan? No death by PowerPoint, instead DEMOS!!!!!

SharePoint Containment Farm - SPFarm Servers - SPServer Web Front End, APP, SQL Web Applications - SPWebApplication Central Admin, SSP Admin, Content Databases – SPDatabase, SPContentDatabase Content, Config, Service Apps Site Collections - SPSite The Bag Webs - SPWeb Portal, Wikis, Blogs, Team, Doc, Workspaces, Search Center Lists Doc Lib, Pages, Events, Discussions, Surveys, etc… Items Files, calendar items, contacts, customers, images, custom

Installing SharePoint Correctly This means least privilege and no GUIDs Create farm with no GUID http://www.toddklindt.com/createfarm Create service applications by hand State and Usage require PowerShell (next slides) Use Central Admin GUI for others, set database name to no GUID Search has to be fixed after creation to remove GUID http://msmvps.com/blogs/shane/archive/2010/09/29/how-to-remove- the-guids-from-the-sharepoint-search-service-application- databases.aspx

State Service New-SPStateServiceApplication -Name "State Service Application" Get-SPStateServiceApplication| New- SPStateServiceApplicationProxy -defaultproxygroup Get-SPStateServiceApplication| New- SPStateServiceDatabase -Name "State_Service_DB" Get-spdatabase | where-object {$_.type -eq "Microsoft.Office.Server.Administration.StateDatabase"} | initialize-spstateservicedatabase

Usage Service New-SPUsageApplication -Name "Usage and Health Data Collection" $proxy = Get-SPServiceApplicationProxy | where {$_.TypeName -eq "Usage and Health Data Collection Proxy"} $proxy.Provision()

So you think you installed good? Todd show these cool people how you would drill in and audit their farm. (I am going to take a nap while you do.)

Kerberos Why? Key things to remember Because you want to do BI better Key things to remember Service Principal Names are a must Yes, they have to be 100% accurate DNS must be an A record Anonymous error messages are usually a red herring Fiddler is cool Constrained delegation is super cool, but even harder A new job isn’t a bad option, seriously lots of jobs out there Since Todd demonstrated (poorly) auditing I will demo setting up Kerberos

SQL Server Reporting Services Comes in two flavors Native (boring) SharePoint Integrated Works best with SQL 2008 R2 Can be made to work with SQL 2008 but requires major hoop jumping Requires Kerberos Authentication SQL 2012 will change a lot of this stuff but that is for another day We conveniently have a Kerberos farm sitting here so lets go ahead and configure SSRS in SharePoint Integrated mode.

Claims What are claims? <Insert great example about getting drunk here> They are new to 2010 but seem to be here to stay Not a fan of arbitrarily using them today in production but would encourage you to get up to speed on them. Remember if you flip the switch from Classic to Claims you have to fix all of your users.

Forms Based Authentication Done through claims based web applications Steps are similar as in 2007 except now there are 3 web.config files Web application Central admin STS Doesn’t seem to come up as much in 2010 as 2007. Not sure why. http://www.sharepointchick.com/archive/2010/05/07/confi guring-claims-and-forms-based-authentication-for-use- with-a.aspx Todd – Do you want to demonstrate setting this up?

User profiles Importing from Active Directory key profile information to make it available in SharePoint. Uses Forefront Identity Manager Permissions for sync account Local administrator Replicate Directory Changes Logon as a service http://technet.microsoft.com/en-us/library/ee721049.aspx

Search – Why don’t you use it more? So many possibilities Remember if Search isn’t working it is your fault. Search works! Not the products fault there are so many buttons to press!

Patching has the 411 SharePoint now understands things like Product build numbers Database schema

Now patching is flexible You can patch the bits and the database separately Databases can run within compatibility boundaries Patch the bits on Tuesday night and the databases over the weekend

More on patching You should be on SP1 at this point Tread lightly with Cumulative updates http://www.toddklindt.com/sp2010builds Only install if you have a problem and you can point to how the CU fixes it. They often introduce regressions.

Please fill out your evaluations And turn yourself around Thanks Please fill out your evaluations And turn yourself around

RACKSPACE® HOSTING | 5000 WALZEM ROAD | SAN ANTONIO, TX 78218 US SALES: 1-800-961-2888 | US SUPPORT: 1-800-961-4454 | WWW.RACKSPACE.COM RACKSPACE® HOSTING | © RACKSPACE US, INC. | RACKSPACE® AND FANATICAL SUPPORT® ARE SERVICE MARKS OF RACKSPACE US, INC. REGISTERED IN THE UNITED STATES AND OTHER COUNTRIES. | WWW.RACKSPACE.COM