Replicator. Installing and Configuring Replicator With Least Privilege P. March 09,

Transcription

1 Replicator Installing and Configuring Replicator With Least Privilege P March 09, info@metalogix.com

2 Copyright International GmbH, All rights reserved. No part or section of the contents of this material may be reproduced or transmitted in any form or by any means without the written permission of International GmbH. Replicator is a trademark of International GmbH. Windows SharePoint Services is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Other product and company names mentioned herein may be the trademarks of their respective owners. Technical Support For information about Technical support visit Technical support specialists can be reached by phone at The level of technical support provided depends upon the support package that you have purchased. Contact us to discuss your support requirements. info@metalogix.com

3 Contents Installing and Configuring Replicator with Least Privilege Permissions... 4 Requirements... 4 SQL Server Configuration...4 Creating Virtual Directories for Farm Account Users that are not Local Administrators info@metalogix.com

4 Installing and Configuring Replicator with Least Privilege Permissions Requirements You must meet the following requirements in order to be able to Install and Configure Replicator with a least privilege administrator account. Setup/Installer user should be a local administrator where Replicator is being installed. Setup/Installer user who is running the Replicator configuration wizard should have the following rights on SQL server: o No server level rights/roles should be assigned o Have SPDataAccess rights on the SharePoint configuration Database For SharePoint 2010, SPDataAccess does not exist, so the user will need db_owner role membership on the SharePoint configuration DataBase. When users enable a web application for replication, Replicator deploys its SharePoint solution to the web application and creates data folders and their corresponding virtual directories in IIS on each web frontend server. If the farm account is not a local administrator on servers in the farm, then Replicator may not be able to configure virtual directories. In this case, users may need to perform additional steps to configure the virtual directories. SQL Server Configuration This section will provide an overview of the steps required to configure your least privilege user to have the required rights on SQL server. 4

5 1. Open Microsoft SQL Server Management Studio. In the Object Explorer, expand the Security > Logins portion of the tree. 2. Double click on the user that will be installing and configuring Replicator. This will open the Login Properties window. 5

6 3. Select Server Roles from the left hand menu. On the Server Roles page, do not assign any server roles (the Public role is selected by default and cannot be deselected). 4. Select User Mapping from the left hand menu. Under the "Users mapped to this login" section, select your SharePoint Configuration database. This provides options in the "Database role membership" section on the bottom half of the window. Here select one of the following based on your version of SharePoint: SharePoint db_owner SharePoint db_owner SharePoint SPDataAccess SharePoint SPDataAccess 6

7 Creating Virtual Directories for Farm Account Users that are not Local Administrators This section will provide an overview of the steps required to create IIS virtual directories in case the farm account user is not a local administrator. 1. Start the Replicator Powershell Console on your machine. 2. Run the Set-ReplicatorWebAppConfig cmlet by entering the following command into the Replicator Powershell Console: PS> - Set-ReplicatorWebAppConfig -Url <WebAppUrl> -ConfigureWfe Where <WebAppUrl> is the Url identifying the web application you enabled for replication. The PowerShell command is available in your Replicator installation directory. For more information on the PowerShell command, see the Replicator Command-line Guide 3. Repeat these steps for each web application you are enabling for replication on each of your web front-end servers. Note: These additional steps are applicable to Single server farms as well, where the farm account is not the local administrator. After you enable all of your web applications for replication, you can continue configuring Replicator. 7