Deploying SharePoint 2016

Transcription

1 Deploying SharePoint 2016 Best Practices for Installing, Configuring, and Maintaining SharePoint Server 2016 Vlad Catrinescu Trevor Seward

2 Deploying SharePoint 2016: Best Practices for Installing, Configuring, and Maintaining SharePoint Server 2016 Vlad Catrinescu Greenfield Park, Québec, Canada Trevor Seward Sultan, Washington, USA ISBN-13 (pbk): ISBN-13 (electronic): DOI / Library of Congress Control Number: Copyright 2016 by Vlad Catrinescu and Trevor Seward This work is subject to copyright. All rights are reserved by the Publisher, whether the whole or part of the material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation, broadcasting, reproduction on microfilms or in any other physical way, and transmission or information storage and retrieval, electronic adaptation, computer software, or by similar or dissimilar methodology now known or hereafter developed. Trademarked names, logos, and images may appear in this book. Rather than use a trademark symbol with every occurrence of a trademarked name, logo, or image we use the names, logos, and images only in an editorial fashion and to the benefit of the trademark owner, with no intention of infringement of the trademark. The use in this publication of trade names, trademarks, service marks, and similar terms, even if they are not identified as such, is not to be taken as an expression of opinion as to whether or not they are subject to proprietary rights. While the advice and information in this book are believed to be true and accurate at the date of publication, neither the authors nor the editors nor the publisher can accept any legal responsibility for any errors or omissions that may be made. The publisher makes no warranty, express or implied, with respect to the material contained herein. Managing Director: Welmoed Spahr Acquisitions Editor: Gwenan Spearing Technical Reviewer: Thomas Vochten Editorial Board: Steve Anglin, Pramila Balan, Laura Berendson, Aaron Black, Louise Corrigan, Jonathan Gennick, Todd Green, Robert Hutchinson, Celestin Suresh John, Nikhil Karkal, James Markham, Susan McDermott, Matthew Moodie, Natalie Pao, Gwenan Spearing Coordinating Editor: Nancy Chen Copy Editor: Brendan Frost Compositor: SPi Global Indexer: SPi Global Cover Image: Courtesy of Freepik Distributed to the book trade worldwide by Springer Science+Business Media New York, 233 Spring Street, 6th Floor, New York, NY Phone SPRINGER, fax (201) , orders-ny@springersbm.com, or visit Apress Media, LLC is a California LLC and the sole member (owner) is Springer Science + Business Media Finance Inc (SSBM Finance Inc). SSBM Finance Inc is a Delaware corporation. For information on translations, please rights@apress.com, or visit Apress and friends of ED books may be purchased in bulk for academic, corporate, or promotional use. ebook versions and licenses are also available for most titles. For more information, reference our Special Bulk Sales ebook Licensing web page at Any source code or other supplementary materials referenced by the author in this text are available to readers at For detailed information about how to locate your book s source code, go to Readers can also access source code at SpringerLink in the Supplementary Material section for each chapter. Printed on acid-free paper

3 To my lovely wife Leana, and my kids, Victoria and Jameson. Thank you for all of your love, guidance, and support over the years as I followed my passions! Trevor This book is dedicated to my parents, Mircea and Iuliana, who have been an inspiration to me and believed in me, even when I didn't. Thank you for your support, without which none of my success would be possible! Vlad

4 Contents at a Glance About the Authors...xix About the Technical Reviewer...xxi Acknowledgments...xxiii Introduction...xxv Chapter 1:Introduction to SharePoint Chapter 2: Designing a Physical Architecture Chapter 3: Installing SharePoint Server Chapter 4: Configuring Authentication and Security Chapter 5: Configuring Add-ins Chapter 6: Configuring the Search Service Application Chapter 7: Configuring the User Profile Service Chapter 8: Configuring Productivity Service Applications Chapter 9: Configuring Office Online Server for SharePoint Chapter 10: Workflow Manager Chapter 11: SharePoint and Exchange Integration Chapter 12: Business Intelligence Service Applications Chapter 13: Creating Web Applications and Site Collections Chapter 14: Hybrid Scenarios Chapter 15: Migrating to SharePoint Server v

5 CONTENTS AT A GLANCE Chapter 16: Implementing High Availability and Disaster Recovery Chapter 17: Patching SharePoint Server Chapter 18: Monitoring and Maintaining a SharePoint 2016 Deployment Index vi

6 Contents About the Authors...xix About the Technical Reviewer...xxi Acknowledgments...xxiii Introduction...xxv Chapter 1:Introduction to SharePoint What s New in SharePoint Server MinRole... 3 Data Loss Prevention... 3 Durable Links... 4 Large File Support... 5 SMTP Encryption... 5 Zero Downtime Patching... 5 Project Server Integration... 6 List View Threshold... 6 Fast Site Collection Creation... 6 Recently Shared Items... 6 TLS 1.2 Encryption... 6 Hybrid Features in SharePoint Removed Features SharePoint Foundation User Profile Service Synchronization Excel Services in SharePoint Tags and Notes vii

7 CONTENTS Work Management Service Standalone Install Mode Next Steps Chapter 2: Designing a Physical Architecture SharePoint Server 2016 Farm Architecture Hardware and Software Requirements Virtualization Virtualization Limitations and Restrictions Network Requirements Network Load Balancers Service Accounts SharePoint Farm Topology Options Single Server Farm Three-Tier Farm Traditional Highly Available Farms MinRole Farms Zero Downtime MinRole Farms Zero Downtime Traditional Farms Traditional Service Application Topology Streamlined Service Application Topology Topology Service Hybrid Considerations SQL Server Architecture Performance High Availability and Disaster Recovery Load Generation/Load Testing Architecture in Action Business Intelligence Next Steps viii

8 CONTENTS Chapter 3: Installing SharePoint Server Active Directory Configuration Service Accounts BIOS and Windows Power Management Host-Based Antivirus Windows Server Configuration for SQL Server Network Adapter Configuration Storage Configuration Identity Configuration Failover Cluster Configuration SQL Server 2014 Installation SQL Server Installation SQL Server AlwaysOn Availability Group Configuration Kerberos Configuration Model Database MAXDOP Instant File Initialization SharePoint Server 2016 Installation Disable Insecure Transport Security Protocols Prerequisite Silent Installation SharePoint Server 2016 Configuration Central Administration SQL Kerberos Validation Adding SharePoint Servers Central Administration High Availability Service Auto Provision Outgoing Information Rights Management Managed Accounts Service Application Pool Diagnostic Logging ix

9 CONTENTS Claims to Windows Token Service Distributed Cache Service Service Applications State Service Usage and Health Data Collection Service Application App Management Service Secure Store Service Business Data Connectivity Service Managed Metadata Service SharePoint Enterprise Search Service User Profile Service Completing Service Application Setup Web Application Setup Root Site Collections Content Type Hub and Enterprise Search Center Configuration MySite Configuration User Profile User Import Virtual Machine Templates Next Steps Chapter 4: Configuring Authentication and Security Authentication Methods Basic NTLM Kerberos Security Assertion Markup Language Forms-Based Authentication Authorization Transport Security TLS IPsec Encryption Protocols x

10 CONTENTS Firewalls Windows Firewall Firewall Appliances Access Rules Next Steps Chapter 5: Configuring Add-ins SharePoint Add-in Architecture Overview Configuring DNS Configuring SharePoint Post Configuration Settings The App Catalog Creating an App Catalog Site Collection Configure Requests Next Steps Chapter 6: Configuring the Search Service Application SharePoint Search Service Application Architecture Search Service Application Limitations Creating a Search Service Application Creating a Search Service Application from Central Administration Creating a Search Service Application by Using PowerShell Modifying the Search Service Application Topology Configuring Search Settings Configuring the Default Content Access Account Creating Content Sources SharePoint Security and Search Performance Selecting the Search Center Analyzing Crawl Logs Resetting the Index Next Steps xi

11 CONTENTS Chapter 7: Configuring the User Profile Service Initial Configuration External Identity Manager Configuration Configuring Additional Import Properties Configuring Export Properties Custom Properties Audiences OneDrive for Business Next Steps Chapter 8: Configuring Productivity Service Applications Managed Metadata Service Application Business Data Connectivity Service Word Automation Services PowerPoint Automation Service Visio Graphics Service Machine Translation Services Access Services Access Services Next Steps Chapter 9: Configuring Office Online Server for SharePoint Office Online Server Architecture Overview Installing Office Online Server Creating the Office Online Server Farm SSL Configuration Connecting Office Online Server with SharePoint Office Online Server Maintenance Patching Office Online Server Next Steps xii

12 CONTENTS Chapter 10: Workflow Manager Initial Setup SSL Configuration SharePoint Server Workflow Manager Integration Testing Workflow Manager with SharePoint Designer Next Steps Chapter 11: SharePoint and Exchange Integration Site Mailbox Overview Configure SharePoint Server 2016 Site Mailbox Installing Exchange Web Services Managed API Establish OAuth Trust and Permissions on SharePoint Configure Exchange Server 2016 for Site Mailboxes Exchange Photo Synchronization Next Steps Chapter 12: Business Intelligence Service Applications SharePoint Server 2016 Business Intelligence Architecture Installing SSAS in PowerPivot Mode Configuring Office Online Server for BI Configuring PowerPivot Services Configuring SSRS Next Steps Chapter 13: Creating Web Applications and Site Collections SharePoint Web Architecture Web Applications Alternate Access Mappings Extending a Web Application Web Application User Policy Object Cache Accounts Content Databases xiii

13 CONTENTS Site Collections Path-Based Site Collections Site Quotas Managed Paths Host Named Site Collections Fast Site Collection Creation Next Steps Chapter 14: Hybrid Scenarios What Is a Hybrid Deployment? Authentication and Authorization Architecture Overview Hybrid Search Options Hybrid Federated Search Overview Hybrid Cloud Search Overview Which Option Should You Choose? Prerequisites SharePoint Server Prerequisites Licensing Prerequisites Reverse Proxy Requirements Accounts Needed for Hybrid Configuration and Testing Domain User Requirements Certificate Requirements Software Hybrid Features Required Configurations Configure Server-to-Server Authentication Replacing the Default STS Certificate Upload the STS Certificate to SharePoint Online Add a Service Principal Name to Azure Active Directory Register the SharePoint Online Application Principal Set the Authentication Realm xiv

14 Contents Configure the On-Premises Proxy for Azure AD Hybrid OneDrive for Business Hybrid Sites Hybrid Federated Search One-Way Outbound Federated Search One-Way Inbound Federated Search Hybrid Cloud Search Setting Up the Cloud Search Service Application On-Boarding Process Crawling and Testing Searching from SharePoint On-Premises Customizing Your Search Results Hybrid Business Connectivity Services Creating an OData Source Creating an External Content Type File Creating a Secure Store Target Application Creating a CSO Configure External Content Type Files for Hybrid Uploading the External Content Type to SharePoint Online Testing the BDC Model Next Steps Chapter 15: Migrating to SharePoint Server Migration Path Migrating Service Applications Managed Metadata Service Application Search Service Application User Profile Service Application Add-ins xv

15 CONTENTS Migrating Content Migration Order Next Steps Chapter 16: Implementing High Availability and Disaster Recovery Unsupported Methods SQL Server High Availability SQL Clustering Database Mirroring AlwaysOn Availability Groups Disaster Recovery Database Mirroring Log Shipping AlwaysOn Availability Groups Initiating a Disaster Recovery Failover Cloud Disaster Recovery Next Steps Chapter 17: Patching SharePoint Server The Basics of Patching Upgrade Log Files Highly Available Upgrades Patching SQL Server Next Steps Chapter 18: Monitoring and Maintaining a SharePoint 2016 Deployment Monitoring IIS Logging ULS Logging Event Viewer IIS Manager Usage Logging xvi

16 CONTENTS Central Administration Health Analyzer Performance Monitor for SharePoint Performance Monitor for SQL Server System Center Operations Manager Index xvii

17 About the Authors Vlad Catrinescu is an Office Servers and Services MVP who lives in Montréal, Canada. Vlad works as an independent consultant specializing in SharePoint and SharePoint Online deployments as well as hybrid scenarios. As a Pluralsight Author, Microsoft Certified Trainer, and recognized international speaker, Vlad has helped thousands of users and IT Professionals across the globe to better understand and to get the most out of SharePoint. Trevor Seward is an Office Servers and Services MVP who resides in Washington State. He lives with his wife Leana, daughter Victoria, and son Jameson. Trevor has over a decade of experience with SharePoint administration and architecture, along with experience in Azure, Active Directory, virtualization, SQL Server, and other services that support SharePoint. xix

18 About the Technical Reviewer Thomas Vochten is a Microsoft MVP and SharePoint architect. He focuses on platform architecture, planning, deployment, availability, and operations whether on-premises or in the cloud. Thomas is a very active public speaker who travels the world to talk about implementing SharePoint and Office 365 and to prevent people from making the same expensive mistakes he did. He has a deep affection for SQL Server, teaches the occasional classroom full of IT professionals, and is getting around deploying hybrid SharePoint environments. Thomas works for Xylos, a consultancy company based in Belgium. xxi

19 Acknowledgments We would like to thank the SharePoint Product Group for producing this great platform, with a special thanks to the Program Group members in the SharePoint 2016 beta program for all of their help. xxiii

20 Introduction This book is written to be a reference for SharePoint Administrators and IT Professionals willing to learn how to deploy SharePoint Server 2016 in their organizations. This book is geared towards the intermediate to advanced crowd, and most of the configurations are done through PowerShell instead of the user interface. This book will start with an introduction to what is new and gone from SharePoint Server 2016 and cover the planning and installation of SharePoint Server 2016, as well as all the features such as SharePoint Add-ins, Business Intelligence, and connected systems such as Workflow Manager and Office Online Server. Other topics that you will learn about in this book are Hybrid SharePoint Deployments User Synchronization using Microsoft Identity Manager Integration between SharePoint and Exchange Server Migrating to SharePoint Server 2016 Implementing High Availability and Disaster Recovery Patching SharePoint Server 2016 and the Zero Downtime Patching concept xxv