Designing a Microsoft SharePoint 2010 Infrastructure Vol 2 part 38 docx

MCT USE ONLY. STUDENT USE PROHIBITED Lab: Planning for Performance and Capacity L3-3 Exercise 2: Creating a Capacity Plan Task 1: Read the supporting information 1. Review the lab scenario. 2. In Windows Explorer, double-click SPServer2010CapacitySizingOverview.docx, and then read the Dataset section within the Right-Sizing SharePoint Server 2010 Deployments section of the document. Task 2: Complete the Capacity worksheet in the Performance and Capacity Planning Worksheet.xlsx file 1. In the Performance and Capacity Planning worksheet, complete the Capacity worksheet. 2. Compare your solution to the sample solution located at E:\Labfiles\Lab03\Solution\Performance and Capacity Planning Worksheet – Solution.xlsx. 3. Close all windows and logoff. MCT USE ONLY. STUDENT USE PROHIBITED MCT USE ONLY. STUDENT USE PROHIBITED Lab 4: Designing a Physical Architecture L4-1 Module 4 Lab Answer Key: Designing a Physical Architecture Contents: Exercise 1: Planning the Physical Architecture L4-2 Exercise 2: Troubleshooting a Name Resolution Problem L4-3 MCT USE ONLY. STUDENT USE PROHIBITED L4-2 Module 4: Designing a Physical Architecture Module 4: Designing a Physical Architecture Lab 4: Designing a Physical Architecture Exercise 1: Planning the Physical Architecture Task 1: Read the supporting information 1. Read the lab scenario. 2. Log on to 10231A-NYC-DC1-04 as CONTOSO\Ed with the password Pa$$w0rd. 3. Click Start, and then click Computer. 4. In Windows® Explorer, move to the E:\Labfiles\Lab04\Starter folder, double-click Physical Architecture Requirements.docx, and then read the non-functional requirements. Task 2: Complete the Physical Architecture Planning worksheet 1. In Windows Explorer, double-click Physical Architecture Planning Worksheet.xlsx, and then complete the worksheet. 2. On the Servers sheet, fill in the details for all production, staging, and test servers. 3. Compare your solution to the sample solution located at E:\Labfiles\Lab04\Solution\Physical Architecture Planning Worksheet – Solution.xlsx. Task 3: Complete the Physical Architecture diagram 1. In Windows Explorer, double-click Physical Architecture Diagram.vsd, and then complete the diagram. 2. Compare your solution to the sample solution located at E:\Labfiles\Lab04\Solution\Physical Architecture Diagram - Solution.vsd. 3. Close all windows. MCT USE ONLY. STUDENT USE PROHIBITED Lab 4: Designing a Physical Architecture L4-3 Exercise 2: Troubleshooting a Name Resolution Problem Task 1: Attempt to access the Contoso, Ltd intranet by using two different URLs 1. Click Start, point to All Programs, click Internet Explorer, and then go to http://nyc-dc1. You will be able to browse the Contoso, Ltd home page. 2. In Windows Internet Explorer®, go to http://intranet.contoso.com. 3. Verify that you receive an error and the Web page cannot be displayed. 4. Minimize Internet Explorer. Task 2: Resolve the name resolution problem 1. Click Start, point to All Programs, click Microsoft SharePoint 2010 Products, and then click SharePoint 2010 Central Administration. 2. In the User Account Control dialog box, click Yes. 3. Under System Settings, click Configure alternate access mappings. 4. Click Edit Public URLs. 5. In the Alternate Access Mapping Collection, click No selection, and then click Change Alternate Access Mapping Collection. 6. In the Select An Alternate Access Mapping Collection dialog box, click SharePoint - 80. 7. In the Intranet box, type http://intranet.contoso.com and then click Save. 8. Click Start, point to Administrative Tools, and then click DNS. 9. Expand Forward Lookup Zones, expand Contoso.com, right-click Contoso.com, and then click New Host (A or AAAA). 10. In the New Host dialog box, in the Name box, type intranet 11. Verify that the Fully qualified domain name (FQDN) field contains intranet.Contoso.com. 12. In the IP address box, type 10.10.10.1 and then click Add Host. 13. In the DNS dialog box, click OK. 14. In the New Host dialog box, click Done. MCT USE ONLY. STUDENT USE PROHIBITED L4-4 Module 4: Designing a Physical Architecture 15. In DNS Manager, in the left pane, right-click Contoso.com, and then click Refresh. You should now see that the intranet Host (A) record has a static timestamp. 16. Close DNS Manager. 17. Click Start, point to All Programs, point to Administrative Tools, and then click Internet Information Services (IIS) Manager. 18. Under Connections, expand NYC-DC1 (CONTOSO\ed), and then expand Sites. 19. Right-click SharePoint – 80, and then click Edit Bindings. 20. In the Site Bindings dialog box, click Add. 21. In the Add Site Bindings dialog box, in the Host name box, type intranet.contoso.com and then click OK. 22. In the Site Bindings dialog box, click Close, and then close IIS Manager. 23. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator. 24. In the User Account Control dialog box, click Yes. 25. At the command prompt, type ping intranet.contoso.com and then press ENTER. The ping command should fail. 26. At the command prompt, type ipconfig /flushdns and then press ENTER. This command should successfully flush the Domain Name System (DNS) cache. 27. At the command prompt, type ping intranet.contoso.com and then press ENTER. This command should now successfully resolve intranet.contoso.com to the IP address 10.10.10.1. 28. Close the Command Prompt window. 29. Restore the minimized Internet Explorer window, where you previously failed to go to http://intranet.contoso.com. 30. Click the Refresh button. The address will now be resolved and the Contoso, Ltd home page will appear. 31. Close all windows, and then log off. MCT USE ONLY. STUDENT USE PROHIBITED Lab 5: Designing a Security Plan L5-1 Module 5 Lab Answer Key: Designing a Security Plan Contents: Exercise 1: Designing for Least-Privilege Security L5-2 Exercise 2: Identifying and Resolving Potential Security Issues L5-3 Exercise 3: Granting Read Access to the Production Auditors Group L5-5 MCT USE ONLY. STUDENT USE PROHIBITED L5-2 Module 5: Designing a Security Plan Module 5: Designing a Security Plan Lab 5: Designing a Security Plan Exercise 1: Designing for Least-Privilege Security Task 1: Read the supporting information 1. Read the lab scenario. 2. Log on to 10231A-NYC-DC1-05 as CONTOSO\Ed with the password Pa$$w0rd. 3. Click Start, and then click Computer. 4. In Windows® Explorer, move to the E:\Labfiles\Lab05\Starter folder, double-click Contoso Business Requirements.docx, and then review the document. 5. In Windows Explorer, double-click Logical Architecture Diagram - Solution.vsd, and then review the diagram. 6. In Windows Explorer, double-click SharePoint 2010 Service Applications Planning Worksheet - Solution.xlsx, and then review the worksheet. Task 2: Complete the SharePoint 2010 Security Planning worksheet 1. In Windows Explorer, double-click SharePoint 2010 Security Planning Worksheet.xlsx, and then complete the worksheet. 2. Compare your solution to the sample solution located at E:\Labfiles\Lab05\Solution\SharePoint 2010 Security Planning Worksheet - Solution.xlsx. 3. Close all windows. MCT USE ONLY. STUDENT USE PROHIBITED Lab 5: Designing a Security Plan L5-3 Exercise 2: Identifying and Resolving Potential Security Issues Task 1: Apply least privilege to the farm account and reset IIS 1. Click Start, point to All Programs, click Administrative Tools, and then click Active Directory Users and Computers. 2. Click the Users container, and in the right pane, double-click Domain Admins. 3. In the Domain Admins Properties dialog box, on the Members tab, click SharePoint server farm account, and then click Remove. 4. In the Active Directory Domain Services dialog box, click Yes. 5. In the Domain Admins Properties dialog box, click OK. 6. Click Start, point to All Programs, click Microsoft SharePoint 2010 Products, and then click SharePoint 2010 Central Administration. 7. In the User Account Control dialog box, click Yes. 8. Under Security, click Configure service accounts. 9. Next to Credential Management, click the drop-down list, and then click Farm Account. 10. In the Select an account for this component list, click CONTOSO\sp-farm, and then click OK. 11. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator. 12. In the User Account Control dialog box, click Yes. 13. At the command prompt, type iisreset and then press ENTER. 14. Minimize the Command Prompt window. Task 2: Create and register a new service account as a managed service account and modify which service account is used for an application pool 1. In Active Directory Users and Computers, click the Managed Service Accounts container. 2. Right-click Managed Service Accounts, point to New, and then click User. MCT USE ONLY. STUDENT USE PROHIBITED L5-4 Module 5: Designing a Security Plan 3. In the New Object - User dialog box, in the Full name box, type SharePoint App Pool Service Account and in the User logon name box, type sp-apppool and then click Next. 4. In the Password and Confirm password boxes, type Pa$$w0rd 5. Clear the User must change password at next logon check box, click Next, and then click Finish. 6. Close Active Directory Users and Computers. 7. In Central Administration, under Security, click General Security, click Configure managed accounts. 8. Click Register Managed Account. 9. In the User name box, type CONTOSO\sp-apppool and in the Password box, type Pa$$w0rd and then click OK. 10. On the left menu, click Security, and then under General Security, click Configure service accounts. 11. Next to Credential Management, click the drop-down list, and then click Web Application Pool – SharePoint – 80. 12. In the Select an account for this component list, click CONTOSO\sp- apppool, and then click OK. 13. In the Message from webpage dialog box, click OK. 14. Restore the Command Prompt window. 15. At the command prompt, type iisreset and then press ENTER. Task 3: Remove an account from the managed accounts list and reset IIS 1. In SharePoint Central Administration, under Security, click General Security, click Configure managed accounts. 2. Next to CONTOSO\Administrator, under Remove, click X. 3. On the Remove Managed Account page, click OK. 4. Restore the minimized administrator Command Prompt window. 5. At the command prompt, type iisreset and then press ENTER. 6. Close the administrator Command Prompt window. . In the Domain Admins Properties dialog box, click OK. 6. Click Start, point to All Programs, click Microsoft SharePoint 20 10 Products, and then click SharePoint 20 10 Central Administration. 7 Click Start, point to All Programs, click Microsoft SharePoint 20 10 Products, and then click SharePoint 20 10 Central Administration. 2. In the User Account Control dialog box, click Yes. 3 USE PROHIBITED Lab: Planning for Performance and Capacity L3-3 Exercise 2: Creating a Capacity Plan Task 1: Read the supporting information 1. Review the lab scenario. 2. In Windows Explorer,