2 Microsoft Office SharePoint Server 2007: Administrative Architecture, Deployment, and Operations Fundamentals Shane Young, MVPTodd Klindt, MVP PresidentConsultant SharePoint911Solanite, Consulting Session Code:OFC362

3 Who Am I? Shane Young Owner of SharePoint911.com Microsoft Office SharePoint Server MVP Consultant, Trainer, Writer, & Speaker Blog SharePoint Consulting SharePoint Training

WSS MVP since 2006 Speaker, writer, consultant, Aquarius Personal Blog Company web site President of the Shane Young Fan Club on Facebook Who is this Todd guy?

5 Agenda Farm topologies Install roadblocks Accounts and permissions

6 Topologies SharePoint scales from a single server install all the way to very large farms of servers Uses assignment of roles to span multiple servers

7 Keep in mind Servers have roles Web Query, Index, Calculation DB Server Farms have relationships Authoring Publishing Dev, Test, Production SSP

8 SharePoint Containment Items Files, calendar items, contacts, customers, images, custom Lists Doc Lib, Pages, Events, Discussions, Surveys, etc… Sites Wikis, Blogs, Team, Doc, Mtg Site Collections Internet, Intranet Portal, Wikis, Blogs, Team, Doc, Mtg Databases Content, Config, SSP, Search Web Applications Central Admin, SSP Admin, Content Servers Web Front End, APP, SQL Farm

9 Web Front End Role Called WFE Provides the web interfaces for the users 1 to 8 servers with this role per farm Very little disk storage used Scaling seems to stop at 5 for collab

10 Index Role Crawls and indexes the content 1 Index per Server 1 Index per SSP Index Files = 5% - 12% of crawled content 1% - 5% typical if only crawling SharePoint Database Storage = 4 x Index Files 50 Million item limit per

11 Query Role Server that responds to user Search request Physical storage = 2.8 x Index No hard limit on number of servers Scale stops at 7

12 Excel Calculation Role In MOSS Enterprise farm this server does handles calculating Excel Workbooks Also called Application Server Rendering components live on WFEs Calculation engine moved to own server No limit to number of servers Sizing very complex

13 Topologies Spread the roles out across as many servers as you need and have at it. No restrictions

14 Single Server Farm

15 Small Farm

16 “Medium Farm” Considered Minimum High Availability Topology

17 A Possible Large Farm

32 bit vs. 64 bit Both supported and available Farm - Same role, same architecture This is the last 32bit version Use 64 bit if needed to support > 4GB of RAM Some 3 rd parties do not support 64bit

19 Assess Determine organization- specific data, enter into tool Recommend Inputs analyzed, best- fit topology Recommended Simulate Run Simulations- ”What If” analysis Report Report is Generated in Excel/Visio format (summary or detail) microsoft.com/technet/SolutionAccelerators

20 Don’t choose Basic! Unless you want to use SQL Express and Local System Account

21 Server Type Complete – Used 99.9% of the time. Installs all components and gives you complete configuration flexibility. Web Front End – Only installs web components of MOSS. Doesn’t give you the option of later hosting other roles. No Flexibility = bad. Stand-alone – Exact same as previous slide choosing basic. Refer to that slide if you are tempted to use.

22 Install Accounts First choice – 1 account for everything or account isolation (multi account) Account isolation has lots of challenges Second Choice – NTLM or Kerberos

23 Accounts you will need (MOSS) Setup User Account * – Used for running install and to admin server Server Farm Account * – Central Admin App Pool Account, Timer Service Account SSP App Pool Account SSP Service Account – All SSP services and jobs MOSS Search Account – Used by search service. Also become default content access account for search. You can change from the SSP level * Account needed for WSS

24 More accounts (MOSS) WSS Search Service Account * – Used by the help system crawler WSS Search Content Account * – Used to access the data by the help system crawler Application Pool Identities * – The account used to access the content databases for the web app. Also account for w3wp.exe * Account needed for WSS

25 NTLM vs. Kerberos Kerberos is generally preferred No double hop problem More secure Less authentication traffic Downside Requires extra work to setup Domain needs to be in order (Server time off by > 5 minutes and auth fails)

26 SetSPN.exe Used to define Service Principal Names (SPN) An SPN is a multi valued attribute stored in AD for users. Services just know how to use them to request a ticket Example SPN = HTTP/server.domain.com

27 Account Setup Before Install Single account install – Make account local admin on all boxes Secure multi account Install Setup Account – Domain User, Local admin on all servers you install MOSS on, SQL Server login with SecurityAdmin and dbcreator roles. All other accounts – Domain User. Setup/config will automatically grant necessary rights.

28

Tech·TalksTech·Ed Bloggers Live SimulcastsVirtual Labs Evaluation licenses, pre-released products, and MORE! Resources for IT Professionals

Complete an evaluation on CommNet and enter to win! 1 Year Subscription!

31 © 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.