1. Accessible content is available upon request. SharePoint on-premises – Best Practice Installation and Configuration @DHobmaier, MCSE SharePoint

2. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. dennis.hobmaier @avepoint.com Sr. Technical Solutions Professional http://www.hobmaier.net @DHobmaier Klagenfurt am Wörthersee, AT

3. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. Service Accounts SQL SharePoint Patching

4. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. SERVICE ACCOUNTS

5. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. SQL Server Dienst: SQL_Service SQL Server Admin: SQL_Admin SharePoint Admin und Setup: SP_Admin SharePoint Farm Service: SP_Farm Application Pool Konten Webanwendungen (z.B. Intranet): SP_WebApps MySite: SP_MySite Dienstanwendungen: SP_ServiceApps Standard Crawl Account: SP_Crawl UPS: SP_UserSync

6. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. SQL

7. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. Data: RAID 10 oder 5 Log: RAID 10 Temp DB: RAID 10 Auf eigenen Disk Pool / LUN Programmdateien: RAID 1, 5 oder 10

8. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. Cluster oder Always-On Availability Group? Benannte Instance SQL Collation: Latin1_General_CI_AS_KS_WS Kann später nicht geändert werden Wichtig für Temp-DB und Standard für neue Datenbanken Wirkt sich auf Sortierung / Views in SharePoint aus

9. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.

10. RAM: Min / Max Datenbankeinstellungen Default index fill factor: 80 Erweitert Max Degree of parallism = 1 GPO: Lock Pages in memory GPO: Perform volume maintenance tasks

11. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. Intial size Sinnvolle Anfangsgröße für jede Datenbank Anhand von erwartendem Inhalt, Beispiel Content Datenbank 50 GB Autogrow Performancekiller für SQL (bei Standard 10%) Sinnvolle Größe z.B. 128 MB Nicht von model vererbt Recovery Model Simple/Full Abhängig von der Backup Strategie Jeweils für Model und tempdb Model ist die Vorlage für jede neue Datenbank

12. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. Per Script vorher anlegen Small Medium Large Anzahl Datenbankdateien Je nach CPU Max. 8

13. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. SHAREPOINT

14. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. Alias verwenden System32\Cliconfg.exe Syswow64\cliconfg.exe DNS Name für SQL verwenden Mehrere Tiers verwenden, wie CONTENT, SEARCH, SERVICES (Skalierbarkeit) Sprache Englisch Bitte immer englisches Betriebssystem, engl. SharePoint = weniger Bugs, leichteres Troubleshooting

15. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. Voraussetzungen installieren PrerequisiteInstaller.exe Unbeaufsichtigte Installation über PrerequisiteInstaller.Arguments.txt SharePoint Binaries Setup.exe Config.xml SharePoint Konfiguration SharePoint Products and Configuration Wizard: psconfig.exe PowerShell Farm Konfiguration Farm Configuration Wizard PowerShell

16. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. Windows Server 2012 R2 - PowerShell Import-Module ServerManager Add-WindowsFeature Net-Framework-Features,Web-Server,Web-WebServer,Web-Common- Http,Web-Static-Content,Web-Default-Doc,Web-Dir-Browsing,Web-Http-Errors,Web-App- Dev,Web-Asp-Net,Web-Net-Ext,Web-ISAPI-Ext,Web-ISAPI-Filter,Web-Health,Web-Http- Logging,Web-Log-Libraries,Web-Request-Monitor,Web-Http-Tracing,Web-Security,Web-Basic- Auth,Web-Windows-Auth,Web-Filtering,Web-Digest-Auth,Web-Performance,Web-Stat- Compression,Web-Dyn-Compression,Web-Mgmt-Tools,Web-Mgmt-Console,Web-Mgmt- Compat,Web-Metabase,Application-Server,AS-Web-Support,AS-TCP-Port-Sharing,AS-WAS- Support, AS-HTTP-Activation,AS-TCP-Activation,AS-Named-Pipes,AS-Net-Framework,WAS,WAS- Process-Model,WAS-NET-Environment,WAS-Config-APIs,Web-Lgcy-Scripting,Windows-Identity- Foundation,Server-Media-Foundation,Xps-Viewer –Source D:\sources\sxs

17. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. Online per PrerequisiteInstaller.exe Offline per Skript $SharePoint2013Path = "c:\sharepoint2013bits" Start-Process "$SharePoint2013Path\PrerequisiteInstaller.exe" –ArgumentList "/SQLNCli:$SharePoint2013Path\PrerequisiteInstallerFiles\sqlncli.msi /IDFX:$SharePoint2013Path\PrerequisiteInstallerFiles\Windows6.1-KB974405-x64.msu /IDFX11:$SharePoint2013Path\PrerequisiteInstallerFiles\MicrosoftIdentityExtensions-64.msi /Sync:$SharePoint2013Path\PrerequisiteInstallerFiles\Synchronization.msi /AppFabric:$SharePoint2013Path\PrerequisiteInstallerFiles\WindowsServerAppFabricSetup_x64.ex e /KB2671763:$SharePoint2013Path\PrerequisiteInstallerFiles\AppFabric1.1-RTM-KB2671763-x64- ENU.exe /MSIPCClient:$SharePoint2013Path\PrerequisiteInstallerFiles\setup_msipc_x64.msi http://social.technet.microsoft.com/wiki/contents/articles/14582.sharepoint-2013-install- prerequisites-offline-or-manually-on-windows-server-2012-a-comprehensive- guide.aspx#Solutions_Offline_and_Manual_Prerequisite_Procedures http://social.technet.microsoft.com/wiki/contents/articles/14582.sharepoint-2013-install- prerequisites-offline-or-manually-on-windows-server-2012-a-comprehensive- guide.aspx#Solutions_Offline_and_Manual_Prerequisite_Procedures

18. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. Setup.exe AutoSPInstaller https://autospinstaller.codeplex.com/ UI für AutoSPInstaller http://autospinstaller.com/ Ehemals AutoSPInstallerGUI Farm Konfigurationsdatenbank – sauberen Namen vergeben, z.B. P_SP_Config P = Produktion SP = SharePoint Config = Konfigurationsdatenbank

19. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. Nicht als Single Role installieren Mit SP2016 MinRoles Nicht den Farm Configuration Wizard verwenden (Central Admin) Nur benötigte Dienste provisionieren Konfiguration per PowerShell Auf saubere Datenbanknamen achten

20. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. Disable Loopback New-ItemProperty HKLM:\System\CurrentControlSet\Control\Lsa -Name "DisableLoopbackCheck" -Value "1" -PropertyType DWORD Warmup Skript (bis 2008 R2) https://spbestwarmup.codeplex.com/ Auto Warmup IIS ab 2012 R2

21. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. PowerShell / Datenbanknamen und Topologie $spappPool = Get-SPServiceApplicationPool -ident "Service Applications" $search = New-SPEnterpriseSearchServiceApplication -Partitioned -Name "Search Service" -ApplicationPool $spappPool - Databasename "P_SP_Search_Admin" New-SPEnterpriseSearchServiceApplicationProxy -Partitioned -Name "Search Service Proxy" -SearchApplication $search $clone = $ServiceApplication.ActiveTopology.Clone() $SSI = Get-SPEnterpriseSearchServiceInstance -local New-SPEnterpriseSearchAdminComponent –SearchTopology $clone -SearchServiceInstance $SSI New-SPEnterpriseSearchContentProcessingComponent –SearchTopology $clone -SearchServiceInstance $SSI New-SPEnterpriseSearchAnalyticsProcessingComponent –SearchTopology $clone -SearchServiceInstance $SSI New-SPEnterpriseSearchCrawlComponent –SearchTopology $clone -SearchServiceInstance $SSI New-SPEnterpriseSearchIndexComponent –SearchTopology $clone -SearchServiceInstance $SSI -RootDirectory $IndexLocation New-SPEnterpriseSearchQueryProcessingComponent –SearchTopology $clone -SearchServiceInstance $SSI $clone.Activate() http://blogs.technet.com/b/praveenh/archive/2013/02/07/create-a-new-search-service-application-in-sharepoint-2013- using-powershell.aspx

22. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. User Profile Service MySite Managed Metadata Zentrale Metadaten Work Management Service E-Mail Benachrichtigung

23. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. Falls SharePoint per Setup.exe installiert Datenbanknamen ohne ID New-SPContentDatabase P__SP_AdminContent http://lab-sp2013-prod:8000http://lab-sp2013-prod:8000 Get-SPWebApplication -ident http://lab-sp2013-prod:8000 | Get-SPContentDatabasehttp://lab-sp2013-prod:8000 Get-SPSite -ContentDatabase | Move-SPSite -DestinationDatabase iisreset

24. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. Zugriff per DNS / FQDN Auf AAM achten, veröffentlichung Authentifizierung NTLM (Standard) Kerberos ADFS … Alles in eine Webanwendung Inkl. MySite Weniger Trusted Zone Host-Header Websitesammlungen Pro Website / Managed Path anlegen Abteilungen Projekte

25. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. Root Site Collection anlegen „/“ Search Center My Site Host Governance Quota Templates Berechtigungen

26. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. PATCHING

27. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. CU bei Bedarf installieren Abhängig von der Qualität des CU‘s Binaries auf allen Servern installieren Products and Configuration Wizard auf allen Servern ausführen WSUS: SharePoint ausnehmen Per Skript Sharepointupdates.com / Trevor Seward

28. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. FRAGEN?

29. ©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc. Ahsante thank you