Jump to content

TheScarfedOne

Edu Supporters
 View Profile  See their activity

  • Posts

    1,543

  • Joined

 Content Type 

Blog Entries posted by TheScarfedOne

  1. TheScarfedOne
    Firstly - a little disclaimer. I am not the original author of this post, but I agree with the sentiment of it. Its all to easy to think that the Document Libraries are File Shares and treat them as such - particularly if you let your users use the Explorer View (grrrr!) Anyway - the honour of the original poster is the Sharepoint Legend that is Bil Simser. Google is your friend....
     

  2. TheScarfedOne
    So, time to rack up my blog writing a bit more! As you may have read, we have deployed (well still deploying) Windows 7 with Bitlocker as the encryption for all our Staff Laptops. We are using Toshiba Tecra A10s by the way.
     
    While we were testing, we came across some things that were a real pain. The first being that unless you are a local admin, you cannot change the Bitlocker pin. Problem - big problem. Under XP, we did used to have Staff as local admins - but used GPs and Software Restriction Policies to control it. We do want staff to be able to change their pins tho. Right, so how to sort it?
     
    Well, the manage-bde - changepin c: would work quite nicely; except that would need the CMD window, and its not very elegant. Ok, so we let them be local admins then? Well yes, that was fine until we found that it exposed our WPA2 key! Grrrr!
     
    So - into Visual Studio I went, and used the Bitlocker API and the results are in the attached zip. Its based on the one available on Codeplex - so credit there :-).
     
    Its a single compiled exe, which you should put in C:\Program Files. Ive only tested it on x86, so not sure what will happen on x64. Also, as I used the new version of Studio - you need .net FW 4 on the machine.
     
    As usual, use at your own risk. Works fine in my environment, its pretty basic in what it does - im working on catching the errors better. At the moment, it reports the API error code.
  3. TheScarfedOne
    Hello again everyone! Here is ther final part of my wee guide on getting SCCM, Windows 7 and Bitlocker all done together...! Sorry its taken a bit longer to get this updated, been busy on another project which I will blog about next
     
    6. Well - Part 5 from the last post really - explaining the "fancy stuff" that happens after the build and main software drop...
     
    The main thing going on here is the auto log in. This is needed to run a load of a load of first use stuff for my techies. So, what are we doing then?
     
    Autologin stuff - run SetupSNK to add our WPA2 protected WLAN, run SCCM Client Configuration Control Panel applet, run SCCM Client Run Advertised Programs Control Panel applet, and presents a CMD window showing Bitlocker Status and then presenting the change pin screen (we set a default as part of the scripting).
     
    Im fairly good with our code commenting, so just take a look at the attached vbs in a zip. This may need adjusting for your environment, so the usual warnings apply.
     
    Java Update Policy Settings -
    makes Java behave
     
    Microsoft HTML Help Settings -
    sets rights for HTML help files
     
    oRipa Screen Reorder Settings -
    sets the default save path for the screen recorder
     
    Shockwave 11 Auto update -
    makes Shockwave behave
     
    Daemon Tools Run -
    sets the environment for Daemon Tools
     
    gm6file Settings -
    sets file association for Gamemaker
     
    Explorer Settings -
    hides a load of the Windows 7 Library stuff which appears to the left of Explorer Windows
     
    Known Folder Settings -
    sets timeouts and reduces load times
     
    Deletions for Librarys and Folder Redirection -
    as it says on the tin. Win7 Folder redirection gets broken by an update. This fixes it!
     
    AutoRun Login Settings -
    does the Run Once autologin, SCCM Client, SCCM Run Adv. Progs, Bitlocker Status, Bitlocker Pin Change
     
    Coming next from me, a nice little Visual Studio application to allow end users to change their Bitlocker Pin Codes without them being a local admin!! If they are, you may have noticed they can get at some unwanted options - like Wireless options!!
  4. TheScarfedOne
    Hello again everyone! So, back again with Part 2 of my wee guide on getting SCCM, Windows 7 and Bitlocker all done together...
     
    3. Make sure you clear and or activate the TPM on your device.
    Sounds simple doesnt it... if the TPM isnt active on your machine, or if it is previously owned - your build will fail! You have been warned - and my techies know that they have to pay into the "fails" pot for any dense mitstakes - this being one!!
     
    We have Toshiba Tecra A10s - 160 of them to be precise. In those, the BIOS has the TPM enable/disable option, as well as clear the owner (only there when the TPM is enabled).
     
    4. Get ready to deploy the image you captured in Part 1 onto your device.
    Best place to get the info on this... well rather than writing it all here, Im just going to credit the resource that got me up and running.
     
    http://www.windows-noob.com
     
    Read, and re-read the guide to get it set up. DO NOT skip any steps. To keep you on the right track, again I have attached my Task Sequence. You will see it has all my software setout for deployment also. You might think this takes a long time - total time is actually 30mins.
     
    5. The "fancy stuff" - getting Bitlocker enabled and all the autorestarting stuff.
    Right, I need to explain what the actual sequence above does...
     
    1. Drops the image onto the machine
    2. Sets owner on the TPM
    3. Installs all the software
    4. Sets a load of Bitlocker related Reg keys (in case Group Policy is a bit slow)
    5. Enables the Bitlocker Protection
    6. Auto logs in and runs a load of first use stuff for my techies.
     
    The Reg stuff - force AD recovery keys, enable advanced pins (alphanumeric), sets minimum length, enables pin and tpm as authentication method.
     
    Autologin stuff - run SetupSNK to add our WPA2 protected WLAN, run SCCM Client Configuration Control Panel applet, run SCCM Client Run Advertised Programs Control Panel applet, and presents a CMD window showing Bitlocker Status and then presenting the change pin screen (we set a default as part of the scripting).
     
    Part 3 will deal with all the scripts and fandango used once the build has finished...
  5. TheScarfedOne
    Hello again everyone! Yep - Im still here, and after a little career break - back at it again. I spoke to quite a few people about Deploying Windows 7 (particularly including Bitlocker) on the EduGeek Stand at Bett (where I lurked with intent for most of the show)... so here is my complete guide to how it is done...
     
    1. Make sure you have got SCCM set up properly.
    Sounds simple doesnt it... well its often not quite as simple as it sounds. So, part one is going to deal mainly with getting SCCM set up properly to deploy OS images (and first how to get your "Gold" Windows 7 Image).
     
    The recommended route, for doing a full scale deployment system, would be to have a separate SQL Server, SCCM Site System, and SCCM Distribution Partner system (which helps with sharing the load for deploying packages etc).
     
    Best place to get the info on this... well rather than writing it all here, Im just going to credit the resource that got me up and running.
     
    http://www.windows-noob.com
     
    Read, and re-read the guide to get it set up. DO NOT skip any steps.
     
    2. Getting your "Gold" Image.
    Get your Windows 7 Enterprise DVD ready. Import it into SCCM (again use the guides above to get this right).
     
    See the attached zip for the Task Sequence used to build.
     
    Part 2 will deal with all the scripts and fandango Ive used to take the captured image, and put it on a machine. This is then Bitlockered, and put into an admin logon ready to configure (change the pin from a default we chose to the user chosen option) and allow us to choose other TS's to run.
  6. TheScarfedOne
    Ok, before you ask - I did not go AWOL! LOL - I'm still about, just taking a short break.... check, done.
     
    Right... next odd thing - Im writing about something non-sharepoint! OK, no lynching me James...
     
    Ever experienced a random complete slowdown? Well, it happens from time to time, and sometimes Im even lucky enough to nail it to a particular part of the network or group of machines. Either that or someone is doing some serious downloading - usually one of my techs with an ISO so they get something thrown at them (not that I support workplace violence [JOKE!!! before anyone comments] - they are those stress balls usually)...
     
    Was catching up on a bit of random blog reading over on the MVP sites and came across this useful nugget...
     
    http://msmvps.com/blogs/thenakedmvp/archive/2010/02/23/rss-tcp-offloading-strikes-again-microsoft-should-kill-this-feature-for-the-masses.aspx
     
    Take a read, and then go and check how many of your machines have this PITA enabled. I was amazed. Not yet chance to put a fix in place - but a random check gave me some leads.
     
    One to put in the pile of - ah, now I know - and I would never have thought it. Personally - the stress balls are still a good shout though.
     
    Laters all, back to Sharepoint stuff soon. Oooh, wait - nope I think I feel another monster SCCM post coming on and also been working on Helpdesk and Integration stuff.
     
    More soon.
  7. TheScarfedOne
    OK - so I took over the blog a bit recently, what with my Sharepoint ramblings followed by my "Live from..." series.
     
    Right... so whats been keeping me away from the blogging (no boos and hisses in the background thank you!!):
     
    1. Replacing a load of switches:
    Our core switches were all upgraded to Netgear GSM7212 - to provision our fibre. Next level out from this, we have just finished putting in GSM 7248/24 dependant on capacity. Why these? Well - we have a very good relationship with Netgear, these switches have all the L2 features and they are very reliable. Beyond that, at the far reaches of the network, we have the 750T2 and 724T2.
     
    2. Rebuilding RIS:
    You may have seen my previous post about the PITA that is a straight Server 08 Domain with RIS (the legacy mode flavour)... Read up on that if you are going to do it. At some point we will go WDS full - but going to tie that in with our Windows 7 deployment probably Easter.
     
    3. New PCs and Rebuilds:
    A load of DC7100s which needed images doing, fixing our D530s image, and the new load of ML115s. (Thanks John... plug plug for great service )
     
    4. Sharepoint:
    Yes, been busy with that again. My next post will have a load of screenies of our new layouts, and webparts. Lets jsut say our people have been busy. (Yep - theres a sorry to James in here too... I will get back to you mate - honest!!).
     
    Right - thats just a fleeting post of whats been happening here...
     
    Laters
  8. TheScarfedOne
    Ok... picture the scene...
     
    You have a nice existing RIS setup - which deals with all your machines quite nicely. If course - it has to run on Server 03. You then go and update your DCs to Server 2008.
     
    Problem - you notice that some of your image builds stop joining the domain. Cue pulling your hair out time! Have you changed anything in the images etc....
     
    No... the problem as I eventually found out is you Server 2008 DCs. So long as they are the only DCs (ie no Server 03 DCs) the new security settings will screw it up!
     
    The installation stops on with the message:
    Network Configuration
    The user you have specified is not permitted to join the machine to the
    domain. Would you like to proceed for now an try joining a domain later?
     
    With 2003 DC it worked perfect.
    Do i need to change something on the DC or in my SIF file?
    My [identification] section look like
    JoinDomain = %MACHINEDOMAIN%
    DoOldStyleDomainJoin = Yes
     
    I also tryed differnent options i found in the net. e.g.:
    [identification]
    JoinDomain = %MACHINEDOMAIN%
    DomainAdmin = %USERNAME%
    DomainAdminPassword = %PASSWORD%
    CreateComputerAccountInDomain = Yes
     
    On the DC i get the error messages NETLOGON 5722 and 5805.
     
    Solution... Enable the GP "Allow cryptography algorithms compatible with Windows NT 4.0"
    on Default DC Policy.
     
    This is nicely described in http://technet.microsoft.com/en-us/library/cc731654(WS.10).aspx
     
    and on support in http://support.microsoft.com/kb/942564
  9. TheScarfedOne
    Sharepoint 2010
     
    Videos are available at http://sharepoint.microsoft.com
     
    Cross browser support
    No page refreshes
    Custom ribbon appears as in Office 2007 apps
    No page refreshes on updates of pages (eg moving to edit a page)
    Multiple checkin and check out
    In line popups for information editing (eg changing/rename files/folders)
  10. TheScarfedOne
    Q and A Session with the Panel
     
    1. Any lessons learnt of the lifecycle of developing with Sharepoint
     
    - Get the taxonomy right, the layout of your site etc... (Twynham School Guys)
     
    2. Can you move an exisiting Site Collection to be part of a new collection
     
    - Shouldnt be a problem. If was a subsite, more complicated, but still possible.
     
    3. Developing Webparts...any guide, or lots of publisher write them. If they dont meet your needs, can you change them? Any guide to getting on with webparts.
     
    -Codeplex or MS Sharepoint Development.com... can get the code, or guide your development. If you buy it, cant really edit. (Andrew)
     
    -Recycle the Date Form Web part.
     
    4. Codeplex, etc is there anything the community can put back in
     
    -Needs the imput from the community. If people in the community are doing "good stuff" put it back in the development (Richard)
     
    5. Microsoft Commitment to MLG/SLK?
     
    -MS Announcement soon. Commitment exists. Still needs community involvement. (Andrew/Richard)
     
     
    6. Is there going to be a forum developed from this meeting?
     
    - Yes. http://www.learninggateway.net. Contact Alex (Alex).
     
    7. Top quick win in implementing Sharepoint...
     
    - Streaming media (Mike)
    - Content sharing (Dave)
    - Get someone to take ownership to drive (Andrew)
    - Search
    - Discussion board for Q's to build an FAQ
    - Webpart for House Points (Richard)
    - Relevant content for stakeholders (Alex)
     
    8. Success of Portal use for Parents, and type of info expected
     
    - Are they going to every day, and why? Holland school more advanced than any UK - book school trips, choices etc. Use email alerts to trigger usage. (Mike)
     
    9. Seen slide deck a few times, and how great things are. What has gone wrong? Something which just didnt work.
     
    - PKS
    - Taxonomy, first cut design
    - If something doesnt work, danger of not using features which could be great by not working through something.
    - 1st cut of timetable part, had teachers picture because of lack of consultation
     
    (Mike/Dave)
     
    10. What 1 thing would you like Sharepoint to do that it currently doesnt. What would you like in future version.
     
    - Things like Wordpress easier. More user friendly(Mike)
    - Number of page refreshes (Dave)
    - Cross browser compatability (Andrew)
    - File replication for disparate servers (i.e Content). Content syncronisation between sites.
    - Reliable SPD
    - Cross browser support (Richard)
     
    Codeplex CKE for Wiki and Enhanced Blog Edition.
     
    11. Said what we can do with Sharepoint. Anything we can back it up with.
     
    - Avpoint
    - Powershell scripts on Codeplex
     
    Disaster Recovery or Content/Item/Site Level recovery. Need to do staged restore, not live restore onto production environment.
     
    ComVault
    Microsoft DPM (more expensive, more complicated, but the best of breed. Covers SQL and Exchange also).
    Quest
  11. TheScarfedOne
    Sharepoint Outside the Box
    Twynham School
    http://www.twynhamschool.com
     
    Main website and background
    Went through all the revisions of Sharepoint Team Services >> MOSS.
     
    Simple to upload content and make changes, for any user with access. Uploading content to document library, or making an announcement. Passing control back to the users.
     
    Data/MIS Web parts
     
    Demonstration for the MIS Webparts developed at Twynham. More information over on their site at https://www.twynhamschool.com/supportinglearning/default.aspx
     
    and also Richard over at Salamander () http://blog.salamandersoft.co.uk/index.php/2008/11/facility-cmis-web-parts/
     
    UPDATE FOR WSS/MOSS
     
    Federated search webparts for sharepoint. Infrastructure Update and SP2 for Sharepoint will add this functionality.
     
    Knowledgebases
    Use Wikis to build a KB for sharepoint. Can be used for ICT Helpdesk or Staff Handbook...
     
     
    Media Streaming
    Media streaming server, 2 front end servers (back end app server doubles as the media server). Media streaming has been in Windows Server since 2000, but superb in 2008.
     
    Document library containing the .asx files pointing at the media server. The media (once converted to .wmv) is uploaded to the Media streaming server - with single access point. Create asx file to point at the server.
     
    Licencing query brought up - ERA and ERA plus licencing requirements. Please see http://www.era.org.uk or check with your LA.
     
    Remote App
     
    Terminal Server 2008 Remote App, with a document library containing the .rdp files.
  12. TheScarfedOne
    Branding your Portal
     
    Penny Coventry (MVP)
    http://www.sharepointdesignerstepbystep.com
     
    Agenda:
    What is branding
    Branding Basics
    Branding options in the browser
    Using SPD
    Next steps
     
    What is branding
    More than just a header, its about site and content design. Was difficult in V1 and V2, WSS3 and MOSS2007 isnt so bad now. Still a challenge.
     
    Its more than just colouring! Navigation, etc. Know what you need to alter. Know who is doing what - visitors, editors etc.
     
    Consider the users involved and their requirements
    -Who is visiting
    -Who is adding content
     
    -Home page design (and sub sites/pages)
    -Colour schemes
    -Navigation
    -Rollup information/Format
    -Target information (audiencing)
     
    --> Map to development: Master Pages, Themes, Page Layouts, Custom XSL for CQWP or DFWP.
     
    Themes
    Change a site theme - in the browser
    CSS and Images
     
    Choice of about 18 in WSS3
     
    You can create your own custom themes
    -Files are stored on the web server
    -Seen by all sites
    -Changes the CSS properies for the site
    -However, they do not apply to all sites.
    -These apply to the "user" part of the site as well as the "admin" part of the site
     
    Types of Site (aka Templates)
     
    Internet Sites (aka Publishing sites) - larger number of users. These are like shop fronts, only a small number of people can contribute to them - and this requires confirmation.
     
    Collaboration Sites - smaller number of users. More people have access to make changes (i.e. upload content). Content goes live immediately.
     
    Master pages
     
    Every page rendered, is actually a combination of two files - the master page (defining the navigation, header, footer and other "all pages" bits), and your content.
     
     
    New in WSS2/MOSS2007
    All sharepoint Content Pages associated with on Master Page
    Can be changed post site creation
    Provides constant Look/Feel
     
    =>
     
    Themes plus more!!
    Contains common page elements.
     
    When applying master pages to sites using the "All Site Actions" >> "Master Pages" section...
     
    You can also do this at an individual site level, so that different section of a site have a different look and feel/colour scheme.
     
    Remember: The first section only points at Publishing sites (as they use a custom action). In order to reflect these changes to a Collaboration site, you must also use the second section - and tick the reset subsites option. Beware - there are some sections in master pages and their CSS which will not apply to some custom areas (eg blog pages navigation). Test, test and test - and double check your CSS class references.
     
    Page Layouts
     
    Used on Publishing Sites
     
    Navigation
    In the same way you can break permissions to change the access for users - you can do the same with the top bar navigation. Make sure you leave some way to return to the top level site.
     
    Browser vs SPD
     
    Before doing any work on Master Pages, download minimal copies of master pages from Heather Soloman (http://www.heathersoloman.com) CSS is attached to the master page not the content page. There are copies of this page for Publishing/Collaboration/Wiki/Blog etc...
     
    CSS...so, if you want to change these, open up your master page, click on the item you want to customise - and SPD can help you by showing which CSS class affects that area. If the CSS comes from core.css (ie is not shown as being changed in the CSS attached to the master page.
     
    There is a reference of all the CSS classes/styles on Heather's site. You can then add this style to the CSS attached to your master page. Make sure you have the item selected in SPD, and click new style. It will then walk you through the process. You may find that this has some unexpected results....
     
    Dealing with CSS takes a while, as you need to get to learn which controls are affected by which CSS class. To get around some of the issues, you may have to change the class name of the object to refer to it directly in your CSS.
  13. TheScarfedOne
    Sites and Templates
     
    Use the top level site as a "front page" for rolling up information held elsewhere dependant on the user. Use the Audience capability in Sharepoint for information targeting (eg News).
     
    Other sub-areas:
    Students
    Staff
    Classes
     
    Think about how you catagorize things.... for navigation and site layout. Generally, it is not a good idea to have lots of subsites under one site. Branch it out.
     
    Egs....
     
     
    Staff
    --Departments
    --Staff Room
     
    Classes
    --Year
    --Subject
     
    Subject
    --Technology
    --ICT...
     
    Technology
    --1A/NG (classes)
     
    1A/NG (Classes)
    --Blog
    --Wiki
    --Lessons
     
    Courses and Resources
    -Teacher Aids
    -Exercises
    -Subscribed Content
    -Library
    -Subject Resources
     
     
    Architechure: Difference between Sites/Site Collections
     
    Site Collection:
    Galleries
    Features
    Security
    Search
    Auditing
     
    (ie. Applies to all....!)
     
    Sites:
    Lists and Libraries
    Features
    Tempates
     
    (ie. Applies at this level only....!)
     
     
    Database:
    DB per site Collection
     
    Scenario...
     
    Site: Classes (and any sites below the top level)
    Inherited from School Site
     
    Contains:
    Lists and Libraries
    Features
    Templates
     
    Allows you to:
    Break inheritance (at a site level or on a list/library, or an item - bear in mide the performance impact whilst it checks if you have permission on loading)
    Customise, and doesnt work back up the tree.
  14. TheScarfedOne
    Unified Communications for the Learning Gateway
     
    Office Communications Server... links to AD, providing presence information for the user.
     
    Initiate chat/call session with user if available. Can be used for helpdesk....?
     
    Linked with Sharepoint, can use functionality of Live Meeting to share the document or screen.
     
    Unified Communications Technology
     
    Microsoft UC Stack
     
    -Exchange 2007 / Office Communications Server 2007
     
    -Live Conferenceing/ Web Conferencing 2007
     
    Architechure
     
    -OCS 2007 R2 (64 bit only)
    Builds on Live Communications Server (adds Voice, Video, AV Conferencing....)
     
    Case studies on Technet
     
    Can do this as a single server internally, rather than a whole suite of servers.
     
    AD / Monitoring Server / Archiving Server / Group Chat Server (or use Forums in SP??)
     
    OCS: IM/Presence/Conferencing/Voice/App Sharing/SQL (FE Web App / BE SQL as with SP)
     
     
    Clients and Devices
     
    Office Communicator 2007 (aka Internal MSN Messenger)
    Office Live Meeting Client
    Conference add-in for Outlook
    RoundTable
    Office Communicator Web Access
    Office Communicator Mobile (PDA)
    Office Comminicator Phone Experience
    PC Periperal Devices
     
    Features
     
    Video (inc High Definition)
    -Live Meeting (augmented by Voice and Video)
     
    Integrated Tools
    -All in one client OCS Client
    -Built on the presence system
    -One click access (right click options!)
     
    Presence Everywhere!!
    -Appears in Outlook
    -Reads calendar from Outlook/Exchange
    -Sharepoint Integration
     
    Voice Capabilities
    -Can be a telephone system
     
    New R2 Component-Communicator Attendant
    -Single screen for multi-call handling
    -Incoming Queue
    -Integrated history
    -Can be used on Reception for example
    -eg Transfer call, right click select person...
    -eg Put on hold/answer drag/drop...
     
    New R2 Component-Cross Platform Desktop Sharing
    -aka VNC!!
    -Helpdesk support
    -Once click from Communicator(inc Web Access)
     
     
    Communicator Web Access
    -Cross platform experience for all "core" browsers (IE/Firefox/Safari)
     
    Communicator Mobile
    -Available on some Nokias/Blackberries/WM
    -Single number reach...
    -Uses OCS to make the call rather than your mobile minutes (uses data instead)
     
    Demo
    Demo of "text" message capability
    Demo of "voice" message/call capability
    Demo of "video" message/call capability
    Demo of "transfer" message/call capability
    -either to colleague or another device (eg mobile)
     
    Software + Services - the future
     
    OCS is an "install in institution" product at present
    MSFT looking at moving (as are competitors) into the cloud
     
    Online Suite:
    -Exchange
    -Sharepoint
    -Hosted filtering for Exchange
    -Office Live Meeting
    -Office Communications Online
     
    ---> Outlook Live (live@edu) [using Exchange 2010]
     
    Exchange 2010
    Shared location for mailboxes (some locally hosted, some hosted in the cloud at MSFT)
     
    Flexible and Reliable
    -Deployment flexibility (mix of local and cloud hosted mailboxes seemlessly)
    -Continuous (improved disaster recovery though failover methods - evolution of continuous replication. Each db can have up to 16 copies. Provideds full redundancy.Reduced I/O and storage requirements.)
    -Simplify Admin (enable some "power-users" to do some tasks themselves - eg Conduct monitoring on mailboxes, Track messages,
    Manage mailbox quotas)
     
    Anywhere Access
    -Manage mailbox overload (mail tips to help remove unnecesssary and undeliverable mail - and you can then remove these recipients)
    -Enhance Unified Messaging (sinlge inbox for all mediums inc text based preview of voicemail)
    -Anywhere access and Collaberation (premium features cross-platform on "core" browsers)
     
    Protection and Compliance
    -Protect communications
    -Archiving and Compliance
    -Reporting and Alerts
     
    Demo of Presence in Outlook/OWA 2010
    -New commands available on messages as replies and free/busy info
    -Conversations (emails grouped together)
     
    Now.... break for lunch so back later....
  15. TheScarfedOne
    Best Practice for Sharepoint Configuration
     
    Steve Smith (MVP):
    Owner Combined Knowledge
     
    [email protected]
    Twitter stevesmithck
    UK Sharepoint User Group
     
    ===================================
    Link/Upload of slide deck to follow...
     
    Agenda:
    Sharepoint Terminolgy
    Dont we just put the CD in the server
    Its not just about Sharepoint
    SQL Config Demo
    Best Practice Summary
    Resources
     
    Sharepoint Logical Terminology
     
    Sharepoint Farm:
     
    Shared -------------------------
    Services | Web Apps
    | ----------------------
    | | Site Collections
    | |
    | | [sITE A] [sITE B]
     
     
    Associate Web Apps (IIS Web Sites) to Shared Services
     
    Site Collections are the first level of management. See later blog.... Andrew Woodward
     
    Sites are where the Collabs take place...
     
    Management and config at the Farm/SSP/Web apps affect everything down the road.
     
    Dont we just put the CD in...
     
    Installing the binaries is the easy part. Consider the factors:
     
    ::Location of files (eg Index file/Seach DB)
    Default install goes to C:\Prog Files....
     
    These files grow massively.... configure for a specific location. You can sort this later, but best to do it at the start.
     
     
    :: Type of Install
    Always use Complete (unless for demo). Use front ends for dedicated web apps hosting. You cannot turn on the services after if you choose WFE.
     
    :: Consider how you access management sites.Assign SSL to Central Admin and SSP. Whitepaper to follow.
     
    Use Kerberos for Authentication
     
    :: Use PSConfig commandline for total command, of config params. Located in Common Files\Web Server Extensions. Good recovery tool too....
     
    :: Service Accounts
    Minimum 4
    Should not be admins
    Least privs.
     
    Hard to do... depends on environment.
     
    Separate accounts for:
    :: Central Admin
    :: Search
    :: SSP
    :: Collaberation Sites
    Whitepaper on Technet (LINK)
     
    SQL permissions is the one to watch....
     
     
    Planning your Database
    Remember all your data is stored in SQL DB
     
    Plan your storage:
    -How many content DBs
    -Quotas
    -Site collection to db mapping, allowing for growth
    -Create in SQL then define in SP.
     
    Plan for recovery, not just storage.
     
    Plan for Concurrent user load:
    -Reuqest per second
    -Page load
    -Load balancing
    -Number of NICs
    -IIS load times... asp.net queue on front end.
    -IIS is the bottleneck not SQL
     
     
    Plan for AD:
    -Service Accounts
    -Location of DC
    -Kerberos
     
    Understand IIS
    -Performance
    -Troubleshooting
     
    64 Bit Hardware
    -OS (and version)
    -Sharepoint
    -SQL
    -No. Servers
     
    SQL DB Mapping
     
    HR DB Project DB
    V V
    [site Coll] [site Coll]
    V V
    [Quota] [Quota]
    50GB 30GB
     
    75GB is really a maximum.... DB gets fragmented. Remember to run your maintenance tasks in SQL Man. Studio.
     
    Best practice for SQL DBs Demo
     
    DB Names.... MOSS_name
    New DB....
    -Initial Size, autogrowth (size each time), and also max file size. Doubles for the SP Quota-ing...
     
    Set DB owner (ie. the WebApplication owner service account). That account now doesnt need SQL Create DB rights.
     
    Summary:
    -Index File location
    -Data Growth
    -Maximise data throughput (i.e. correct disk hardware, versions of OS/SQL/SP)
    -Pre-create DBs where poss
    -Consider how you will do restores
    -Kerberos (for performance and security)
    -Use FQDNS for Web Apps
    -Plan Service Account
    -Plan Search DB and Location
    -Install SP as Farm Admin
    -Get to know PSConfig
    -SSL on management sites
    -Shared Services on Port 80??? look up about BDC errors....
     
    -Dont use AD Admin accounts for Service Accs
    -Training
     
    Resources
    http://www.combined-knowledge.com
    -How tos and Whitepapers
    -Training/Adoption Info
     
    http://www.mindsharpblogs.com
    -Useful info
     
    http://www.sukug.uk
    -Community
  16. TheScarfedOne
    Gonna try and keep a blog running from the LGC in Birminham.... yeah I know thats a long way from my normal neck of the woods! Sat with Russ and James...
     
    Welcomes from Richard, Alex and then Steve from MSFT.
     
    ... Microsoft UK Education Vision ...
    (Slides to be linked to/attached later...)
     
    :: Main UK focus: Products/Services, Programs and Research
     
    :: Student Centric view with partners...
     
    :: Conflict between Institution and Home view (the old Facebook arguement!)...
     
    :: Evolution of ICT in Schools.... massive growth and investment...
     
    :: Digital lifestyle, merging of 24/7 access with the traditional "homework". What are the technical implications of this? Gov. Home Access plan for underpriv'd families.
     
    :: Connecting people by the Learning Gateway. School / People ( Teachers and Students) / Other Institutions / Communities.
     
    :: Sharepoint assists by connecting disparate systems. Virtual Learning > MIS > Other IT > Business Apps. Taking a "Platform Approach"... by integrating what you already have.
     
    :: HOW?? Where does Sharepoint Fit? Desktop Productivity >> Education Apps
     
    :: Future? A glace at Sharepoint 2010....
     
    :: 2 yrs ago an Education Group was created. 240 Product Managers/Testers/Developers....
     
    :: Not building products.... building on top of existing technology making them relevant to EDU. Plumbing and interoperability/Solution Accelerators.
     
    ::Areas of investigation...
    LG:extending functionality for partners/schools to expand on.
     
    Search:enhance, requirements for EDU, aligning to curriculum by user?
     
    Office:build on Office for EDU. MS "Semblio" (code name Grava) assembly tools for EDU/Teachers. Support for various formats/content types. Assist teacher to create content. Assessment tools. Still in beta (link to follow....)
     
    LiveEDU (software+services model):free hosted email for students (mainly in Uni/FE). Current 550,000 users. May expand to Schools - but prob directed at RBCs and LAs. Based on Exchange 2010. No adverising, branded to Institution.
     
    Software+Services: Building 13 DataCentres. Dublin currently twice size of Olympia (BETT). Cloud based services... eg Live EDU.
     
    Meshing the School/LA services up into the cloud as a service rather than hosting locally. Still same level of intergration and management. Give EDU the choice of Local vs Cloud.
     
    :: Summary
     
    Boundaries of the school will expand into the home and beyond...
     
    Implications of this? Security, Licencing....
     
    ICT is not the answer. Has a part to play, but it can help with some of the barriers...
     
    Lots of investment worldwide... not just on programs, products and research.
     
    Office 2010 announced in US last night (including the Web Versions... links to follow).
     
    Q and A's:
     
    Tony (surprise surprise!!): Microsoft Acadamies.... limited to MS only technologies. Isnt this against the "open nature"? All tecnologies are provided by their own vendors. MS Acadamies are NOT locked into MS technology. Can certify MS technology, but also open to others...
     
    Semblio Release date: With 2010 Suite, or separate before. Announcements due over the coming days. Possibility of linking with other products not just MS Office Suite.
     
    Idea of cloud is attractive. Data store etc. SLA and Security? Where held? Implications and how addressed. UK guarenteed held in Dublin, and also the data not linked with advertising. No data crawling, privacy in place.
     
     
    What is the furture of SLK? Is it part of EDU product group or will it stay with RW? Part of EDU Group, wrap it as part of a full product. Investment underway, always will have an element on Codeplex butlooking at the wider aspect. Make it easier to role out and support. Has to take account of the 1/2 million UK users. Migration etc...! Future announcement...
     
    Search.... how far off is development...policing the content and development of that product. Make search relevant to curriculum. Next calendar year. Take horazontal technologies and make relevant to EDU. Part of work taking place re FAST aquisition.
     
    More to follow from the other "Tracks" during the day.....
  17. TheScarfedOne
    The next installment of my "Jobs for the Holidays" series...
     
    1. Install WSS3 and MOSS2007 SP2:
    This could be fun! Let hope it dont break any of my highly customised environment!
     
    2. Install Server 2008 SP2:
    Some fun and games of Server restarting! Its about time we got some updates done...
     
    3. Rebuild 2 ICT Suites (60 PCs):
    When we did the Print Server update (see earlier blogs) - the HP drivers screwed up a few machines when trying to push them from a Server 08 x64 server. Some of the properties screens error. Same with some of the OKI drivers. Only these two rooms affected - so OS reinstall time.
     
    4. Chuck old equipment:
    Skip hired for removal of old gear. Yes... it is going properly following all guidelines! Surcharge added for it!
     
    Thats it for now - other things will probably crop up...
  18. TheScarfedOne
    OK - so Sharepoint has Forums (well, discussion boards as they call them) built in. However, not really as full featured as I would like - or as you would see elsewhere on the Internet.
     
    So... came across this a while back from Codeplex. Problem... not strictly WSS3/MOSS 2007 compatible. Fair dooooos - thought would leave it alone a bit.
     
    Most other things on our system are sorted now, so I went back to it. This is what it looks like (attached), and also a link to it...
     

     
    http://www.codeplex.com/spforums
     
    ==========================================
     
    Ok - getting this to work on WSS3/MOSS 2007 is a bit of fun. To save you looking through the discussion on codeplex - here is how to get it working.
     
    1. Download and install the AJAX Enabler Kit solution from RL-Soft. This saves you loads of time - and also means you can use loads of other AJAX webparts on your sites.
     
    Link: http://www.rl-soft.com/en/downloads/sc/RLSoft.SharePoint.Features.AjaxEnabler.rar
     
    You will need to install and deploy the solution. In the download is a script to do this for you. From your Sharepoint Central Admin Site, you can then activate the solution. A guide is attached - even though this applies to the Contact Us webpart solution they also have (handy too!) - the first bit deals with the AJAX enabler.
     
    Link: http://www.rl-soft.com/en/downloads/d/ContactUs_Documentation.pdf
     
    2. Download the SPForums solution from Codeplex and run the .msi on your system.
     
    Link: http://spforums.codeplex.com/Release/ProjectReleases.aspx?ReleaseId=53
     
    You will then need to go to C:\Program Files\WPPackager\. In there you will find a {string} folder containing the .cab, .xml and some other bits.
     
    3. You then need to deploy the web part package. Open a command prompt and run the following command from the
    C:\Program Files\WPPackager\{14aa60ab-2b6b-4254-b45e-0ef7b8b2a201} folder:
     
    Copy the code below, and paste into a new text document in the same folder. Rename it as deploy.bat
     

    stsadm.exe -o addwppack -filename "SharePointForums-1.2.0.0_Bil Simser.cab" -globalinstall -force
     
    4. Add the following to the .master page for your websites, just before the </BODY> tag:
     

    <script> function ProcessOwsForm(ctl, argument) { if (frm.fPreviewMode) { var LcantSaveText = "This form cannot be saved when previewing this page."; window.alert(LcantSaveText); return; } if (frm.FValidate(true)) { frm.FPostProcess(); var theForm = document.forms['aspnetForm']; __doPostBack2(ctl, argument); } } function __doPostBack2(eventTarget, eventArgument) { theForm.__EVENTTARGET.value = eventTarget; theForm.__EVENTARGUMENT.value = eventArgument; theForm.submit(); } </script>
     
    5. Add the webpart to a page as you would usually - and job done.
     
    Enjoy!
  19. TheScarfedOne
    Firstly, thanks to EduTech... we have been working together for a little while on Sharepoint projects. This post is the result of a remote session we did, where I was dealing with some PITA webparts!!!
     
    Read and enjoy... and beware of the gotchas!
     
    ======================================
     
    Take the scenario - you have a webpart you want to install. You download it, and it is just a .dll and a .webpart. Grrrrr you will think, how the hell do we get that one installed...
     
    First - I'm going to drop the dlls in the GAC [Global Assembly Catalog/Cache depending where you read], but show the two different places you can use. Then you need toregister the controls in the web.config. Finally, you can upload the webpart and add it to a page.
     
    The two GAC places which we need are C:\WINDOWS\ASSEMBLY, but you cannot put files in here directly on the same system. You must either do this remotely, or via unc path... (ie. \\servernamehere\C$\Windows\Assembly
     
    There you can see what the GAC looks like..., and you can also drop dlls in here and they auto register. If you tried to do this via C:\Wind...\Ass... it wouuld throw a proper hissy fit at you!!! LOL
     
    But... this is not the best way of doing it - as its not very secure. I prefer (so long as the developer of the webpart/solution has program'd well - using the bin directory of the sharepoint web virtual directory. Useful to know how to use the main GAC incase bin doesnt work. You can find the path to your virtual directory from IIS, by selecting Properties, then Home Directory [iIS6], or click Sites, then select Features View [iIS7].
     
    Navigate to this via Windows Explorer, and go into the BIN folder. You may have other .dlls here already if you have other solutions/webparts installed. Simply copy your new webpart .dll here.
     
    This next bit comes with a serious health warning.... editing the web.config...
     
    ou can properly screw this one up - so be seriously careful. By screw up - i mean get IIS in a permanent loop. Any editing of this file automatically recyles IIS worker processes.
     
    What Ihave highlighed is that when you do somehting (eg add a webpart, activate/deactivate a solution in central management or via stsadmin, it automatically generates a web*[long date/time}*.bak file, which is just a renamed web.config file - so relatively easy to restore/go back if worst comes to worst. However, we are doing a "maunal" so we have to do it ourselves...easier if you keep to the format...
     
    Always use notepad (wordpad or spd will bugger the line breaks!) or notepad ++ (which can do xml layout checking... as although it is a .config it is really xml
     
    Safe controls are near the top thankfully - and I usually add to the end of the last entry...
     
    An example <Safe Control> looks like...

    <SafeControl Assembly="[i]WebpartName[/i], Version=WebpartVersion, Culture=neutral, PublicKeyToken=1a4d7592bb8c741f" Namespace="WebpartNamespace" TypeName="*" Safe="True" />
     
    Simple... once you get used to it... but like I said - be careful. Hitting save has cycled IIS - we we will wait a mo for it to come back... so we can continue...
     
    Right - lets head into the sharepoint website, as we can add the WP now and put it on a page. as this is simply a webpart not a solution - you do not need to activate it.
     
    Go to Site Actions > All Site Settings > Webparts (in galleries column) of your top level website. Click upload, point at the .webpart or .dwp depending on what you have and job done. Then just add it to a page like you would any other time.
     
    Need any help - shout! Remote help available... :-)
  20. TheScarfedOne
    For some reason, our College (with around 1800 students) was only allocated a relatively small number of IP addresses - and DHCP has been moaning at me for the past 3 months about it!!
     
    Chatting to our RBC got us a new range, not an extension sadly, so time to get ready to move everything. FUN FUN FUN
     
    :: 20 Servers
    :: 80 Waps
    :: 60 Printers
     
    On to the job
    As our kids have decided it is fun to reset the printer settings every now and then, over the past month we started recording all the MAC addresses of the machines. This we used to set reservations for all the printers. Now they can reset them all they want - they will stay where we need them!! This was probably the easiest bit, simply reboot all the printers - and done. Our Print Server was more fun though! Previously a x86 Server 2003 R2 box (which has been grumbling for a while) - we took the chance to change this to x64 Server 08. Grrrrr - drivers!!
     
    Vista x64 driver on the server with an x86 driver for XP side by side. Gotcha here.... puch the xp driver from the client - dont try and do it from the server as it throws a hissy fit!
     
    WAPS...
     
    Did the same as with the Printers in the end. At least since they are 3-COM, we could save a config file, and push that back to each WAP. Only needed to re-do the channel then. We also changed the SSID and security.
     
    Servers...
     
    Upset DNS for a while during changeover, but all ok now. WIth a bigger range, have now also been able to use the dual nics of the servers - and a nice difference it makes too! Especially as each nic is connected to a separate core switch.
     
    More to follow on my fun with the printers...
  21. TheScarfedOne
    I said in my last blog about us deploying Forefront over Easter, and its all pretty much done... ahead of schedule!
     
    Before I get into it, a bit of blurb about what it is...
     

     
    Snazzy then!! On into deploying it... and a few gotchas particularly if you plan to use Server 2008 (and why wouldnt you now anyway!!). For the time being, forget x64 until Stirling (aka Forefront v2) - getting all the pre-requisites sorted for this is a real pain and for the time being x86 will do just fine.
     
    Getting started - but before you even think about installing...
    :: Install MS .NET Framework 1.1 with SP1
     
    :: Install MS .NET Framework 3 via Server Manager
     
    :: Install IIS and ASP.NET via Server Manager
    [install the following role services: Static Content, Default Document, HTTP Redirection, Directory Browsing, ASP.NET, ISAPI Extension, ISAPI Filters, Windows Authentication, IIS Metabase, IIS 6 WMI]
     
    :: Install SQL Server 2005 with SP2
    [install the following components: Database Services, Reporting Services, Integration Services, and Workstation components]
     
    :: Verify and record the reporting server URL (you will need that later)
     
    :: Install GPMC with SP1 via Server Manager
     
    :: Install, configure, and synchronize Windows Server Update Services (WSUS) with SP1
    [in particular, make sure you have configured the following: Synchronize Product: Forefront Client Security, Synchronize Classification: Definition Updates, Create an auto-approval rule for Definition Updates]
     
    :: Add the Client Security server site to the Local intranet zone
     
     
    Now you can install...
    :: Run the Server Setup wizard for the media
     
    :: Dismiss the Program Compatibility Assistant dialog box
     
    :: On the Component Installation page, select all the check boxes
     
    In the Setup wizard, you will provide server names, SQL Server instances, and service accounts you have already set up. In addition, you must specify the following:
     
    Size of the databases - make sure the size does not exceed the space on your server.
     
    Management group name - use the default value (ForefrontClientSecurity). Record the name that you enter, because you will need to provide it when configuring Client Security group policies...
     
    Configuring deployment
    Options here... use the built in WSUS deployment - YES it pushes the main install too!!
     
    Alternatively, if you really want you can push it via Group Policy software install. You have 4 packages to push though - and you will need to edit the MOMAgent.msi to include details for your setup.
     
    We went with WSUS deployment - which you configure via the FCS Console on the server. Open it up and go to the Policies tab. Either edit the default one, or create a new one. Configure all you settings (fairly self explainatory really), and then done. Select your policy and either deploy to OU (which will create a new GPO to control the OU), or add to an existing OU. We created new one - so I could see what all the settings were.
     
    Simple - takes little or no time. You will have to have set up a GPO to deal with Windows Update already tho to auto install updates.
     
    Cost...
    On MS Schools: around £1 per machine!! Peanuts compared to other products and you have MS support!
     
    Questions, ideas and comments welcome as always...
  22. TheScarfedOne
    :bowl:Some of you may know about my fairly big plans for the Easter, but here is an idea of some of what we get up to...
     
    1. Our network range is moving (thanks IFL!!)... so 20 servers to change IP settings, a load of switches and a load more WAPS! Roll on when I have a better WLAN system!! Mark (over at NetCTRL)... Im still hoping, I know we've not spoken in a bit!
     
    2. Sharepoint is getting the two big updates from Feb. Also, putting the Podcast Kit for Sharepoint on, as well as some of the preparation for SIMS Learning Gateway. Im also going to be looking at some of the MSLG bits Im not using yet (like the calendar overlays), and start to play with Sharepoint Learning Kit. Richard (over at Salamander) - I might well be calling for help!!
     
    3. Adding RAM to all our workstations. Up to 1GB for ICT Suites, and min 768MB everywhere else. I will be upsetting our laptop users by re-calling all those for RAM upgrades to 1GB, and re-imaging.
     
    4. AVG --> Microsoft Forefront. Just got to make sure the damn uninstall script runs, WSUS will do the rest. I will be posting a separate blog about getting Forefront up and running and why we chose it over AVAST and AVG.
     
    5. Hopefully rest at the end!! Roll on Holiday in May... not had a proper one since September!!!
     
    Thats your lot for now... as always, comments, questions always welcome!!
  23. TheScarfedOne
    Firstly, thanks to all the people who have contacted me after my last posts on Sharepoint. I was expecting "some" interest - but have had a bit more than I bargained for!!
     
    Anyway - as there is such a desire for more info on it, and getting it set up in Schools, I thought I would try to put pointers out there on the way we have done things here.
     
    So - first question, yes we use MOSS on top of WSS. WSS is free, MOSS is not. However, it depends what you want to do with your setup as to whether you need MOSS or not. With MOSS, you get Blogs, Exchange Webparts and MySite (as well as a few other bits). However, MySite you can do another way - see Richard Willis' blog for more on that one. Exchange Web parts arent really required as you can do this with a Page Viewer Web Part. Blogs is the sticking point, but there is some work on Codeplex to create a better solution than the built in.
     
    Second question - how have I got our environment to look like it does. Well, this is done with Masterpages and CSS not themes. I started off by pulling out the base config from CKS (the Community Kit for Sharepoint, also on Codeplex). Then, using CSS - customised the look and feel. I have also editted the Masterpage a bit too.
     
    Third - webparts! I think I posted a load of them in my last blog - so go look!! All of them are off Codeplex, so I cant claim anything about them - other than hunting them down (which is no mean feat... there are loads out there and not all free!). Credit to all the developers, and I can testify that they work!
     
    Anyway... thats your lot for now, but if you want any help setting up, or want to talk through ideas - post a comment and we'll get a discussion going. I also keep an eye on the forums and there are loads of others in there who are "SharepointHeads"!!
     
    Finally - what do I do?? Well, Im a College Network Manager, and dont sell anything! Impartial...
     
    Some people did ask...
  24. TheScarfedOne
    Ok - a bit of an odd one here! I wasnt originally going to blog any more today - afterall I have been quite active after a quiet spell!!!
     
    However, I came across a forum post giving Acer a bit of a bashing - and had to get involved! No - not in that way.... to support them. A few years ago, I never thought I would say that, but hey - they've pulled it off.
     
    Acer support used to be dire sometimes - but they turned the corner about 3 years ago.
     
    I have over 100 of their laptops - all on the 3 yr extended with acc damages. If I ever need to return one, its 2 phone calls - one to the support centre and the other to DHL. Its true, the do have procedures in place than mean they need certain info from you, but if your work with one of their major resellers - you can get a copy of what info they require and build that into your own procedures.
     
    This is what we do. Before any laptop is reported to them, we test the machine with one of their Diagnostic CDs which we got sent - and then the technician working on it completes a form with all the relevant info on it including all diagnostic info we have done. We include a copy of this in the box with the laptop when we send it off. The repair centre know we do this so the minute they call up our details - they know they will get all the info.
     
    So long as you put a bit of work into your procedures - their support works really well (touch wood so far!!).
     
    I need to say at this point, the key is getting a good reseller - and getting a good dialogue going with their Acer Rep too. Thanks here go to Gemma at Laptop House, and over at Acer - Steve, Tarlock and formerly at Acer - Rash.
     
    Advertising over...!
  25. TheScarfedOne

    Managing Printers

    By TheScarfedOne,

    Ok - standard problem - managing your printers, or more to the point printing wastage!!
     
    How many times do you go to an IT Room and see a pile of wasted prints. :confused:If you are lucky - they might have tried to hide them in the bin - but most of the time they are just scattered all around the printer.
     
    So - we used to be an RM system (some people will have seen my posts on "How to move away from RM..."), which had a built in Print Credit system. It was ok - but flaky sometimes though.
     
    I used to work on a RangerSuite system years back - version 3 or something! Yes - I know RM have "interests" there now too - but its still a separate product range with separate developers.
     
    I've gone off track....
     
    Anyway - that reminded me of Ranger Printer Manager. More lightweight than Print Manager Plus, and having looked at PCounter - got a bit scared!! RPM - well worth a look, especially as V4 has automatic import/sync with AD to pick up new users.
     
    Doing a bit of blatent advertising (and no I dont get an income for it) but Printware sorted this, and the trial of the various products out for us.
     
    As usual, PM if you want to know more. I've done a Remote Desktop before to show it in use.
×
×
  • Create New...