Implementingand Administering Windows Share Point Services3.0

Implementing and Administering Windows SharePoint Services 3.0

Microsoft® Virtual Labs

2 Implementing and Administering Windows SharePoint Services 3.0

Implementing and Administering Windows SharePoint Services 3.0

Objectives After completing this lab, you will be able to:

� Describe the changes to the Central Administration site.

� Manage Microsoft® Windows® SharePoint® Services.

� Create and manage SharePoint sites.

� Configure permissions at the site, list, and item levels.

� Configure security policies.

Scenario You are the network administrator for Contoso, Ltd. The company has Windows SharePoint

Services version 2 deployed, but it is planning to deploy Windows SharePoint Services 3.0 to

provide enhanced collaboration between users in the company. In preparation for the migration, you need to understand how to manage Windows SharePoint Services 3.0.

Lab Components This lab includes three components:

� Exercises—The exercises include detailed step-by-step instructions and are required. The

exercises cover the core information needed to meet the lab objectives.

� Additional Tasks—The additional tasks are listed at the end of each exercise. You can perform

these tasks to extend your learning about the product. The additional tasks do not provide step-by-

step instructions, but the procedures are similar to the steps that you performed in the exercises.

The additional tasks are optional, but it is recommended that you complete them to gain a fuller

understanding of the product.

� For Further Research—The For Further Research component is at the end of the lab and provides

additional exercises that you can perform if you have time. These exercises might include some of

the tasks that you performed earlier. The For Further Research exercises do not provide step-by-

step instructions, but they are similar to the required exercises. The For Further Research exercises

are optional.

Implementing and Administering Windows SharePoint Services 3.0 3

Computers This lab uses three virtual machines performing the following roles:

� 3369A-3373A-SEA-DC1

• Domain controller

• Microsoft Exchange Server computer

� 3369A-3373A-SEA-SRV1

• Member server

• Server running Microsoft Windows SharePoint Services 3.0

� 3369A-3373A-SEA-CL1

• 2007 Microsoft Office system client

Estimated time to complete this lab: 90 minutes

Virtual Lab Console This lab makes use of the Microsoft Virtual Lab Program, an application that allows you to run

multiple virtual machines online. During the lab, you will switch between different windows, each

containing a separate virtual machine running Microsoft Windows Server™ 2003 or Microsoft Windows® XP.

Before you start the lab, familiarize yourself with the following basics of the Virtual Lab Console:

� To switch the focus for your mouse and keyboard to the virtual machine, click inside the virtual

machine window.

� To remove the focus from a virtual machine, move the mouse pointer outside the virtual machine

window.

� To issue the CTRL+ALT+DELETE keyboard combination inside a virtual machine,

use RIGHT-ALT+DELETE instead. Virtual PC designates the RIGHT-ALT key as the Host key.

� Select the machine you wish to perform tasks on by selecting it in “My Machines”

To Start the Lab Before you can perform any of the lab exercises, you must log on to the computer. If an error

message warns you that the disk’s parent appears to have been modified, click OK to continue. This

error message appears when you move Virtual PC images between computers with different time-zone settings.

Note These demonstrations have been developed using beta software. If a specific task results

in an error message or a time-out screen, try performing the task again. The task will most likely be completed successfully at the second attempt.


Exercise 1: Central Administration Site Overview As with earlier versions, Windows SharePoint Services 3.0 provides a Central Administration site

that can be used to configure server and application settings. However, Windows SharePoint

Services provides several key improvements to the Central Administration pages. This exercise shows an overview of interface changes in the Central Administration pages.

Central Administration Site Overview

Tasks Detailed Steps

Setup steps only. � Click on SEA-SRV1 under My Machines in the Virtual Lab

console

� Log on to SEA-SRv1 by entering RIGHT-ALT+DEL as

Administrator with the password Pa$$w0rd.

� Log on to SEA-CL1 as Contoso\Qin with the password

Pa$$w0rd.

1. Connect to the Central Administration

site on SEA-SRV1.

� Click Start, point Administrative Tools, and then click

SharePoint 3.0 Central Administration.

2. Examine the three default pages that

are included on the Central

Administration site.

a. On the Central Administration home page, point out the three

links on the top links bar.

b. Click Operations.

c. Click Application Management.

d. Click Home.

3. Examine the settings available on the

Central Administration home page.

4. Review the Incoming E-Mail setting,

and then mark the task as completed.

a. On the Central Administration home page, click Incoming

E-Mail Settings.

b. On the Administrative Tasks: Incoming E-Mail Settings

page, click Configure Incoming E-Mail Settings.

c. Scroll to the bottom of the page, and then click Cancel.

d. On the Operations page, click Home.

e. On the Central Administration home page, click Incoming

E-Mail Settings.

f. On the Administrative Tasks: Incoming E-Mail Settings

page, click Edit Item.

g. In the Status section, click Completed, and then click OK.

5. View the event logs on each of the

servers listed in the Farm Topology

section.

a. On the Central Administration home page, point out the

Farm Topology section. Next to SEA-SRV1, click View.

b. Click Home.


Exercise 2: Configuring Windows SharePoint Services The Operations page on the Windows SharePoint Services Central Administration site includes all

of the settings that are applied to the Windows SharePoint Services server or farm. The Application

Management page on the Windows SharePoint Services Central Administration site includes all of

the settings that are applied to the Windows SharePoint Services applications. In Windows

SharePoint Services, the term application has replaced the term virtual server, so you will see that

many of the settings on this page are similar to the virtual server settings in earlier versions of

Windows SharePoint Services. This exercise shows some of the administrative tasks that will be performed on the Operations page and the Application Management page.

Configuring Windows SharePoint Services


1. Connect to the Operations page of the

Central Administration site.

� On the Central Administration home page, click

Operations.

2. Examine the incoming e-mail settings. a. On the Operations page, click Incoming E-Mail

Settings.

b. On the Incoming E-Mail Settings page, point out the

Enable sites on this server to receive e-mail option.

c. Point out the E-Mail Drop Folder setting and the

Incoming E-Mail Server Display Address setting.

d. Click Cancel.

3. Examine the status of running timer jobs,

and also view the timer job definitions.

a. In the Global Configuration section, click Status of

running timer jobs.

b. On the site breadcrumb, click Operations.

c. In the Global Configuration section, click Timer job

definitions.

d. On the site breadcrumb, click Operations.

4. On the Operations page, configure the

option to quiesce the farm. When you

quiesce the farm, all of the servers in the

farm will stop accepting connections for

long-running jobs. For example, if you are

using Microsoft Office InfoPath® forms on

a SharePoint site, a quiesced farm will not

accept new connections for users to start

filling out forms, but it will allow users to

complete forms that they have already

started filling out. By quiescing the farm,

you can slowly shut down that farm for

maintenance and decrease the disruption

for users.

a. In the Global Configuration section, click Quiesce

Farm.

b. On the Quiesce Farm page, in the The farm should be

fully quiesced after this long (Time in Minutes) box,

type 10.

c. Click Cancel.


(continued)



5. Configure server logging and reporting on

the Operations page.

a. Under Logging and Reporting, click Usage analysis

processing.

b. On the Usage Analysis Processing page, in the Logging

Settings section, click Enable logging.

c. In the Number of log files to create box, type 4.

d. In the Processing Settings section, click Enable usage

analysis processing.

e. Change the End time to 2 am.

f. Click OK.

g. Under Logging and Reporting, click Diagnostic

logging.

h. On the Diagnostic Logging page, in the Event

Throttling section, click Warning in the Least critical

event to report to the event log list.

i. Click Medium in the Least critical event to report to

the trace log list.

j. Scroll to the bottom of the page, and then click OK.

6. On the Operations page, perform a backup

of the server running Windows SharePoint

Services.

a. In the Backup and Restore section, click Perform a

backup.

b. On the Perform a Backup page, select the WSS_Content

check box, and then click Start Backup Process.

c. On the Start Backup page, in the Backup Location box,

type C:\WSSBackup. Click OK.

d. On the Backup and Restore Status page, click View

History.

e. Under Central Administration, click Operations.

7. Configure a new alternative access

mapping setting for the Windows

SharePoint Services site. Configure

the new mapping as http://sea-

srv1.contoso.com.

a. In the Global Configuration section, click Alternate

access mappings.

b. Click Add Incoming URLS.

c. On the Add Incoming URLs page, beside Alternate

Access Mapping Collection, click No selection, and then

click Change Alternate Access Mapping Collection.

d. On the Select An Alternate Access Mapping Collection

page, click SharePoint (80).

e. Under Zone, click Internet

f. In the New default zone URL protocol, host and port

box, type http://sea-srv1.contoso.com.

g. Click Save.

h. Under Central Administration, click Home.


(continued)



8. Access the Application Management page

of the Central Administration site.

� On the Central Administration page, click Application

Management.

9. Examine the workflow settings on the

server.

a. Under Workflow Management, click Workflow

settings.

b. On the Workflow Settings page, point out the options for

enabling and disabling user-defined workflows and for

enabling participants without site access to participate in

workflows.

c. Click Cancel.

10. In a later exercise, you will examine some

of the security and site management

options available on the Central

Administration site.

� Under Central Administration, click Home.

Additional Tasks If time permits, examine the other configuration options on the Operations and Application

Management pages. Many of these tasks are similar to the tasks you performed when administering Windows SharePoint Services 2.0.


Exercise 3: Creating and Managing SharePoint Sites In many ways, creating and managing SharePoint sites has not changed in Windows SharePoint

Services. As a Windows SharePoint Services administrator, you will still create site collections and

configure the Web sites for users. In this exercise, you will see how to create a site collection in Windows SharePoint Services and how to configure the site home page.

Creating and Managing SharePoint Sites


1. On the Central Administration site

create a new site collection named

Research. Use the Team Site template.

a. On the Central Administration site, click Application

Management.

b. Under SharePoint Site Management, click Create site

collection.

c. On the Create Site Collection page, in the Title text box,

type Research.

d. On the Create Site Collection page, in the URL name text

box, type Research.

e. In the Primary Site Collection Administrator section, in the

User name text box, type Contoso\Qin.

f. In the Template Selection section, under Select a template,

ensure that Team Site is selected, and then click OK.

2. Try to log on as the administrator who

created the site. By default, the

administrator is denied permission to

the site.

3. Log on as Qin, who is the site owner.

a. On the Top-Level Site Successfully Created page, click

http://sea-srv1/sites /research.

b. On the Error: Access Denied page, click Sign in as a

different user.

c. Log on as Contoso\Qin with the password Pa$$w0rd.

4. Review the configuration options

available on the Research Team site

Site Settings page.

a. On the Research Team site, click Site Actions, and then

click Site Settings.

b. On the Site Settings page, click Home.


(continued)

Creating and Managing SharePoint Sites


5. Add a Site Users Web Part to the

Research team site.

a. On the Research Team site, click Site Actions, and then

click Edit Page.

b. In the right column, click Add a web part.

c. At the bottom of the Add Web Parts to Right pane, click

Advanced Web Part gallery and options.

d. In the Add Web Parts dialog box, click Site Users and drag

and drop it between the Site Image and Links Web parts.

e. Close the Add Web Parts pane.

f. In the right column, drag the Site Users Web Part header bar

to the area under the Announcements Web Part in the left

column.

g. On the Site Users header, click the down arrow, and then

click Modify Shared Web Part.

h. In the Site Users pane, click Cancel.

i. On the Team Site home page, click Exit Edit Mode.

Additional Tasks If time permits, examine the other configuration options on the Site Settings page for the Research

site. Many of the settings are similar to the options in earlier versions of Windows SharePoint

Services. For example, on this page, you can configure permissions and configure the site title, description, and theme.


Exercise 4: Configuring Permissions at the Site, List, and Item Levels Windows SharePoint Services uses many of the same concepts and procedures for assigning

permissions that earlier versions use. However, Windows SharePoint Services provides some

additional features, particularly for assigning item-level security. In this exercise, you will see how to configure security at the site, list, and item levels for Windows SharePoint Services.

Configuring Permissions at the Site, List, and Item Levels


1. Create a new subsite named Private

under the Research top-level site.

Create unique permissions for the

subsite.

2. Add the Contoso\Research Private RO

group to the site visitors group, and

add Contoso\Research Private

Contributor to the site members group.

a. On SEA-CL1, open Microsoft Internet Explorer and connect

to http://sea-srv1/sites/research.

b. On the Team Site home page, click Site Actions, and then

click Site Settings.

c. On the Site Settings page, under Site Administration, click

Sites and Workspaces.

d. On the Sites and Workspaces page, click Create.

e. On the New SharePoint Site page, in the Title box, type

Private.

f. In the URL name box, type Private.

g. Under Permissions, click Use unique permissions, and then

click Create.

h. On the Set Up Groups for this Site page, in the Visitors to

this Site section, click Create a new Group.

i. In the Visitors to this Site section, click Browse.

j. On the Add People and Groups page, in the top text box,

type Research, and then click the search icon.

k. Under Account Name, click Contoso\Research Private

RO, and then click Add. Click OK.

l. In the Members of this Site section, click Browse.

m. On the Add People and Groups page, in the top text box,

type Research, and then click search icon.

n. Under Account Name, click Contoso\Research Private

Contributor, and then click Add. Click OK.

o. In the Owners of this Site section, click Use an existing

group, select Research Owners in the drop-down list, and

then click OK.


(continued)

Configuring Permissions at the Site, List, and Item Levels


3. Modify the permissions on the

Announcements list to remove all

permissions for the site visitors group.

a. On the Private home page, click Announcements.

b. Click Settings, and then click List Settings.

c. On the Customize Announcements page, click Permissions

for this list.

d. On the Permissions: Announcements page, click Actions,

then click Edit User Permissions. In the Internet Explorer

dialog box, click OK.

e. On the Permissions page, select the Private Visitors check

box, click Actions, and then click Remove User

Permissions. In the Internet Explorer dialog box, click OK.

f. In the site breadcrumb, click Announcements.

4. Modify the permissions on an

individual announcement so that only

Qin can view it.

a. On the Announcements page, click the announcement in the

list.

b. On the Announcements: Get Started with Windows

SharePoint Services! page, click Manage Permissions.

c. On the Permissions: Get Started with Windows SharePoint

Services! page, click Actions, and then click Edit

Permissions. In the Internet Explorer dialog box, click OK.

d. Select the check boxes for Private Visitors and Research

Owners.

e. Click Actions, click Remove User Permissions. In the

Internet Explorer dialog box, click OK.

f. In the site breadcrumb, click Private.

5. Test the effect of configuring security

at the site, list, and item levels. Sign

on as the following users, and test the

level of access for each user:

• Greg Weber, who is not a member

of any site group for this site

• Carlos Lacerda, who is a member

of the Research Private RO group

• Katarina Larsson, who is a

member of the Research Private

Contributor group

a. On the Private home page, click Welcome Qin Hong, and

then click Sign in as Different User.

b. Sign in as Contoso\Greg with the password Pa$$w0rd.

c. On the Access Denied page, click Sign in as a different

user, and then sign in as Contoso\Carlos with the password

Pa$$w0rd.

d. On the Private home page, click Welcome Carlos Lacerda,

and then click Sign in as Different User.

e. Sign in as Contoso\Katarina with the password

P@$$w0rd.Click Add new announcement.

f. In the Announcements: New Item page, click Cancel.

g. Click Announcements, and confirm that no announcements

are listed.

h. Click Welcome Katarina Larsson, and then click Sign Out.

Completion step only. � Close Internet Explorer.


Exercise 5: Configuring Security Policies Windows SharePoint Services uses security policies to define the level of access that users have,

based on the zone from which they access the SharePoint site. With this option, you can configure

different permissions for the same user, depending on the URL used by the user to access the Web

site. In this exercise, you will see how to configure security policies in Windows SharePoint Services.

Configuring Security Policies


1. On the Alternate Access Mappings

page of the Central Administration

site, confirm that http://sea-srv1 and

http://sea-srv1.contoso.com are both

listed as Incoming URLs.

a. On SEA-SRV1, click Start, point to Administrative Tools,

and then click SharePoint 3.0 Central Administration.

b. On the Central Administration page, click Operations.

c. Under Global Configuration, click Alternate access

mappings.

d. On the Alternate Access Mappings page, confirm that

http://sea-srv1 and http://sea-srv1.contoso.com are both

listed as Incoming URLs.

e. On the top navigation bar, click Application Management.

2. Create a new policy for the Windows

SharePoint Services application, and

apply it to all domain users when

connecting from the Internet zone. To

prevent users from changing any

content on the SharePoint site,

configure the policy to deny users

write access.

3. Note that this feature is not fully

implemented in this beta version of the

software, so you receive an error

message when you try to add the user

group. This will be functional in the

released version of Windows

SharePoint Services.

a. On the Application Management page, in the Application

Security section, click Policy for Web Application.

b. On the Policy for Web Application page, click Add Users.

c. On the Add Users page, in the Select the Zone section,

select Internet, and then click Next.

d. In the Users box, type Contoso\Domain Users.

e. In the Choose Permission section, click Deny Write – Has

no write access. Click Finish.

f. You will receive an error message when you click Finish.

That is because this feature is not fully functional in this

build of Windows SharePoint Services.

g. Close Internet Explorer.

Completion step only. � Shut down all virtual machines, and delete changes.


For Further Research Complete the following exercise to learn more about the new features in Windows SharePoint Server 3.0.

Exercise 1: Creating a Project Meetings Web Site 1. Create a new user account in the Contoso.com domain using a test name. Assign a mailbox to

the user account. Create a new group in Active Directory® directory service named Project

Managers. Assign an e-mail address to the group account. Assign the test name to the Project Managers group.

2. Create a new user account in the Contoso.com domain using a test name. Assign a mailbox to

the user account. Create a new group in Active Directory named Project Members. Assign an e-mail address to the group account. Assign the test name to the Project Members group.

3. Create a new Windows SharePoint Services site under the IT top-level site. Use the following parameters when configuring the site:

• Site Name: IT Projects

• URL: ITProjects

• User Permissions: Use unique permissions

• Template: Multipage Meeting Workspace

4. Add Contoso\Project Members to the IT Projects Members group.

5. Add Contoso\Project Managers to the IT Projects Owners group.

6. On WPG-CL1, log on as the user that you created as a project manager. On the IT Projects site, add a Things to Bring Web Part to the right part of the page.

7. On the second page of the site, add a Calendar Web Part and a Project Tasks Web Part.

8. Create new items in the Objectives, Agenda, and Things To Bring sections.

9. Add the user that you created as a project member to the Attendees list.

10. Create a new recurring calendar item for a weekly status meeting.

11. Log off and log back on as the project member user. Access the IT Projects site, and review the items created by the member of the project manager group.

Technology

Implementingand Administering Windows Share Point Services3.0