SharePoint - Best Practice

Werbung
SharePoint on-premises – Best Practice
Installation and Configuration
@DHobmaier, MCSE SharePoint
Accessible content is available upon request.
dennis.hobmaier
@avepoint.com
Klagenfurt am Wörthersee, AT
http://www.hobmaier.net
@DHobmaier
Sr. Technical
Solutions
Professional
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
•
•
•
•
Service Accounts
SQL
SharePoint
Patching
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
SERVICE ACCOUNTS
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
SQL Server Dienst: SQL_Service
SQL Server Admin: SQL_Admin
SharePoint Admin und Setup: SP_Admin
SharePoint Farm Service: SP_Farm
Application Pool Konten
•
•
•
•
•
•
•
•
Webanwendungen (z.B. Intranet): SP_WebApps
MySite: SP_MySite
Dienstanwendungen: SP_ServiceApps
• Standard Crawl Account: SP_Crawl
• UPS: SP_UserSync
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
SQL
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• Data: RAID 10 oder 5
• Log: RAID 10
• Temp DB: RAID 10
• Auf eigenen Disk Pool / LUN
• Programmdateien: RAID 1, 5 oder 10
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• Cluster oder Always-On Availability Group?
• Benannte Instance
• SQL Collation: Latin1_General_CI_AS_KS_WS
• Kann später nicht geändert werden
• Wichtig für Temp-DB und Standard für neue Datenbanken
• Wirkt sich auf Sortierung / Views in SharePoint aus
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• RAM: Min / Max
• Datenbankeinstellungen
• Default index fill factor: 80
• Erweitert
• Max Degree of parallism = 1
• GPO: Lock Pages in memory
• GPO: Perform volume maintenance tasks
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• Intial size
• Sinnvolle Anfangsgröße für jede Datenbank
• Anhand von erwartendem Inhalt, Beispiel Content Datenbank 50 GB
• Autogrow
• Performancekiller für SQL (bei Standard 10%)
• Sinnvolle Größe z.B. 128 MB
• Nicht von model vererbt
• Recovery Model Simple/Full
• Abhängig von der Backup Strategie
• Jeweils für Model und tempdb
• Model ist die Vorlage für jede neue Datenbank
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• Per Script vorher anlegen
•
•
•
Small
Medium
Large
• Anzahl Datenbankdateien
• Je nach CPU
• Max. 8
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
SHAREPOINT
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• Alias verwenden
•
•
•
•
System32\Cliconfg.exe
Syswow64\cliconfg.exe
DNS Name für SQL verwenden
Mehrere Tiers verwenden, wie CONTENT, SEARCH, SERVICES (Skalierbarkeit)
• Sprache Englisch
• Bitte immer englisches Betriebssystem, engl. SharePoint = weniger Bugs, leichteres
Troubleshooting
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• Voraussetzungen installieren
•
•
PrerequisiteInstaller.exe
Unbeaufsichtigte Installation über PrerequisiteInstaller.Arguments.txt
• SharePoint Binaries
•
•
Setup.exe
Config.xml
• SharePoint Konfiguration
•
•
SharePoint Products and Configuration Wizard: psconfig.exe
PowerShell
• Farm Konfiguration
•
•
Farm Configuration Wizard
PowerShell
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• Windows Server 2012 R2 - PowerShell
Import-Module ServerManager
Add-WindowsFeature Net-Framework-Features,Web-Server,Web-WebServer,Web-CommonHttp,Web-Static-Content,Web-Default-Doc,Web-Dir-Browsing,Web-Http-Errors,Web-AppDev,Web-Asp-Net,Web-Net-Ext,Web-ISAPI-Ext,Web-ISAPI-Filter,Web-Health,Web-HttpLogging,Web-Log-Libraries,Web-Request-Monitor,Web-Http-Tracing,Web-Security,Web-BasicAuth,Web-Windows-Auth,Web-Filtering,Web-Digest-Auth,Web-Performance,Web-StatCompression,Web-Dyn-Compression,Web-Mgmt-Tools,Web-Mgmt-Console,Web-MgmtCompat,Web-Metabase,Application-Server,AS-Web-Support,AS-TCP-Port-Sharing,AS-WASSupport, AS-HTTP-Activation,AS-TCP-Activation,AS-Named-Pipes,AS-Net-Framework,WAS,WASProcess-Model,WAS-NET-Environment,WAS-Config-APIs,Web-Lgcy-Scripting,Windows-IdentityFoundation,Server-Media-Foundation,Xps-Viewer –Source D:\sources\sxs
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• Online per PrerequisiteInstaller.exe
• Offline per Skript
$SharePoint2013Path = "c:\sharepoint2013bits"
Start-Process "$SharePoint2013Path\PrerequisiteInstaller.exe" –ArgumentList
"/SQLNCli:$SharePoint2013Path\PrerequisiteInstallerFiles\sqlncli.msi
/IDFX:$SharePoint2013Path\PrerequisiteInstallerFiles\Windows6.1-KB974405-x64.msu
/IDFX11:$SharePoint2013Path\PrerequisiteInstallerFiles\MicrosoftIdentityExtensions-64.msi
/Sync:$SharePoint2013Path\PrerequisiteInstallerFiles\Synchronization.msi
/AppFabric:$SharePoint2013Path\PrerequisiteInstallerFiles\WindowsServerAppFabricSetup_x64.ex
e /KB2671763:$SharePoint2013Path\PrerequisiteInstallerFiles\AppFabric1.1-RTM-KB2671763-x64ENU.exe /MSIPCClient:$SharePoint2013Path\PrerequisiteInstallerFiles\setup_msipc_x64.msi
• http://social.technet.microsoft.com/wiki/contents/articles/14582.sharepoint-2013-installprerequisites-offline-or-manually-on-windows-server-2012-a-comprehensiveguide.aspx#Solutions_Offline_and_Manual_Prerequisite_Procedures
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• Setup.exe
• AutoSPInstaller
•
https://autospinstaller.codeplex.com/
• UI für AutoSPInstaller
•
•
http://autospinstaller.com/
Ehemals AutoSPInstallerGUI
• Farm Konfigurationsdatenbank – sauberen Namen
vergeben, z.B. P_SP_Config
•
•
•
P = Produktion
SP = SharePoint
Config = Konfigurationsdatenbank
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• Nicht als Single Role installieren
• Mit SP2016 MinRoles
• Nicht den Farm Configuration Wizard
verwenden (Central Admin)
• Nur benötigte Dienste provisionieren
• Konfiguration per PowerShell
• Auf saubere Datenbanknamen achten
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• Disable Loopback
•
New-ItemProperty HKLM:\System\CurrentControlSet\Control\Lsa
-Name "DisableLoopbackCheck" -Value "1" -PropertyType DWORD
• Warmup Skript (bis 2008 R2)
• https://spbestwarmup.codeplex.com/
• Auto Warmup IIS ab 2012 R2
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• PowerShell / Datenbanknamen und Topologie
$spappPool = Get-SPServiceApplicationPool -ident "Service Applications"
$search = New-SPEnterpriseSearchServiceApplication -Partitioned -Name "Search Service" -ApplicationPool $spappPool Databasename "P_SP_Search_Admin"
New-SPEnterpriseSearchServiceApplicationProxy -Partitioned -Name "Search Service Proxy" -SearchApplication $search
$clone = $ServiceApplication.ActiveTopology.Clone()
$SSI = Get-SPEnterpriseSearchServiceInstance -local
New-SPEnterpriseSearchAdminComponent –SearchTopology $clone -SearchServiceInstance $SSI
New-SPEnterpriseSearchContentProcessingComponent –SearchTopology $clone -SearchServiceInstance $SSI
New-SPEnterpriseSearchAnalyticsProcessingComponent –SearchTopology $clone -SearchServiceInstance $SSI
New-SPEnterpriseSearchCrawlComponent –SearchTopology $clone -SearchServiceInstance $SSI
New-SPEnterpriseSearchIndexComponent –SearchTopology $clone -SearchServiceInstance $SSI -RootDirectory
$IndexLocation
New-SPEnterpriseSearchQueryProcessingComponent –SearchTopology $clone -SearchServiceInstance $SSI
$clone.Activate()
• http://blogs.technet.com/b/praveenh/archive/2013/02/07/create-a-new-search-service-application-in-sharepoint2013-using-powershell.aspx
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• User Profile Service
• MySite
• Managed Metadata
• Zentrale Metadaten
• Work Management Service
• E-Mail Benachrichtigung
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• Falls SharePoint per Setup.exe installiert
• Datenbanknamen ohne ID
New-SPContentDatabase P__SP_AdminContent http://lab-sp2013-prod:8000
Get-SPWebApplication -ident http://lab-sp2013-prod:8000 | Get-SPContentDatabase
Get-SPSite -ContentDatabase <GUID> | Move-SPSite -DestinationDatabase <New GUID>
iisreset
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• Zugriff per DNS / FQDN
•
Auf AAM achten, veröffentlichung
• Authentifizierung
•
•
•
NTLM (Standard)
Kerberos
ADFS …
• Alles in eine Webanwendung
•
•
•
Inkl. MySite
Weniger Trusted Zone
Host-Header Websitesammlungen
• Pro Website / Managed Path anlegen
•
•
Abteilungen
Projekte
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
•
•
•
•
Root Site Collection anlegen „/“
Search Center
My Site Host
Governance
• Quota Templates
• Berechtigungen
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
PATCHING
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
• CU bei Bedarf installieren
• Abhängig von der Qualität des CU‘s
• Binaries auf allen Servern installieren
• Products and Configuration Wizard auf allen
Servern ausführen
• WSUS: SharePoint ausnehmen
• Per Skript
• Sharepointupdates.com / Trevor Seward
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
FRAGEN?
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
©AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.
Herunterladen
Random flashcards
Laser

2 Karten anel1973

lernen

2 Karten oauth2_google_6c83f364-3e0e-4aa6-949b-029a07d782fb

Literaturepochen

2 Karten oauth2_google_55780ed8-d9a3-433e-81ef-5cfc413e35b4

Erstellen Lernkarten