i Deployment guide for Microsoft SharePoint 2013 Microsoft Corporation Published: October 2012 Author: Microsoft Office System and Servers Team (itspdocs@microsoft.com) Abstract This book provides deployment instructions for SharePoint 2013. The audiences for this book include application specialists, line-of-business application specialists, and IT administrators who are ready to deploy SharePoint 2013. The content in this book is a copy of selected content in the SharePoint 2013 technical library as of the publication date. For the most current content, see the technical library on the web. ii This document is provided “as-is.” Information and views expressed in this document, including URL and other Internet website references, may change without notice. You bear the risk of using it. Some examples depicted herein are provided for illustration only and are fictitious. No real association or connection is intended or should be inferred. This document does not provide you with any legal rights to any intellectual property in any Microsoft product. You may copy and use this document for your internal, reference purposes. © 2014 Microsoft Corporation. All rights reserved. Microsoft, Access, Active Directory, Backstage, Bing, Excel, Groove, Hotmail, Hyper-V, InfoPath, Internet Explorer, Office 365, OneNote, Outlook, PerformancePoint, PowerPoint, SharePoint, Silverlight, OneDrive, Visio, Visio Studio, Windows, Windows Live, Windows Mobile, Windows PowerShell, Windows Server, and Windows Vista are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication. iii Contents Getting help xxvi Overview of SharePoint 2013 installation and configuration 1 Physical architecture 2 Size 2 Installation and configuration 3 Prepare the servers 3 Create the farm 4 Configure settings, services, solutions, and sites 5 Deployment stages 5 Planning 5 Development 6 Proof of concept 6 Pilot 7 User acceptance test (UAT) 7 Production 7 Prepare for installation of SharePoint 2013 9 TechNet articles about how to prepare for SharePoint 2013 installation and initial configuration 9 Additional resources about SharePoint 2013 installation and initial configuration 10 Initial deployment administrative and service accounts in SharePoint 2013 11 Required permissions 11 Account permissions and security settings in SharePoint 2013 14 About account permissions and security settings 14 SharePoint administrative accounts 14 Setup user administrator account 14 SharePoint farm service account 15 SharePoint service application accounts 16 Application pool account 16 Default content access account 16 Content access accounts 17 Excel Services unattended service account 17 My Sites application pool account 17 Other application pool accounts 18 SharePoint database roles 18 WSS_CONTENT_APPLICATION_POOLS database role 18 iv WSS_SHELL_ACCESS database role 19 SP_READ_ONLY database role 19 SP_DATA_ACCESS database role 19 Group permissions 20 WSS_ADMIN_WPG 20 WSS_WPG 28 Local service 35 Local system 36 Network service 40 Administrators 40 WSS_RESTRICTED_WPG 44 Users group 44 All SharePoint 2013 service accounts 46 Configure SQL Server security for SharePoint 2013 environments 47 Before you begin 47 Configuring a SQL Server instance to listen on a non-default port 48 Blocking default SQL Server listening ports 49 Configuring Windows Firewall to open manually assigned ports 50 Configuring SQL Server client aliases 50 Install prerequisites for SharePoint 2013 from a network share 52 Installer switches and arguments 52 Download and combine the SharePoint 2013 prerequisites on a file share 53 Install the SharePoint 2013 prerequisites at the command prompt 54 Install the SharePoint 2013 prerequisites by using an arguments file 54 Known issues 56 Install SharePoint 2013 58 TechNet articles about how to install and configure SharePoint 2013 58 Additional resources about how to install and configure SharePoint 2013 59 Install SharePoint 2013 on a single server with a built-in database 61 Overview 61 Before you begin 62 Install SharePoint 2013 62 Run the Microsoft SharePoint Products Preparation Tool 63 Run Setup 63 Run the SharePoint Products Configuration Wizard 64 Configure browser settings 65 Post-installation steps 66 Install SharePoint 2013 on a single server with SQL Server 68 v Overview 68 Before you install SharePoint 2013 on a single server 68 Install SharePoint 2013 on a single server 69 Run the Microsoft SharePoint Products Preparation Tool 70 Run Setup 70 Run the SharePoint Products Configuration Wizard 71 Configure browser settings 73 Run the Farm Configuration Wizard 74 Post-installation steps 75 Install SharePoint 2013 across multiple servers for a three-tier farm 77 Overview 77 Before you install SharePoint 2013 on multiple servers for a three-tier farm 79 Using the Microsoft SharePoint Products Preparation Tool 79 Database server 79 Public updates and hotfix packages 80 Prepare the farm servers 80 Install SharePoint 2013 on the farm servers 80 Create and configure the farm 81 Add web servers to the farm 83 Post-installation steps 84 Install or uninstall language packs for SharePoint 2013 85 About language IDs and language packs 85 Downloading language packs 87 Installing language packs on the web and application servers 87 Uninstalling language packs 88 Add web or application servers to farms in SharePoint 2013 89 Before you add a web or application server to a SharePoint farm 89 Determine server role 90 Front-end web server role 91 Application server role 91 Additional tasks 92 Install prerequisite software 92 Install the SharePoint software 93 Add the new SharePoint server to the farm 93 Configure the new server 96 Remove a server from a farm in SharePoint 2013 97 Removing a web server or application server from a SharePoint farm 97 Remove a web server or an application server from a farm by using Control Panel 98 vi Removing a database server from a SharePoint farm 99 Remove a database server, web server, or application server from a SharePoint farm by using Central Administration 99 Uninstall SharePoint 2013 101 Before you begin 101 Uninstall SharePoint 2013 102 Install and configure a virtual environment for SharePoint 2013 103 TechNet articles about SharePoint 2013 virtualization with Hyper-V 103 Additional resources about Hyper-V installation and initial configuration 103 Use best practice configurations for the SharePoint 2013 virtual machines and Hyper-V environment 105 Introduction and scope 106 Article scope 106 Review the general best practice guidance for virtualization 106 Best practice guidance for virtualization 107 Configure the Hyper-V host computer 108 Install and configure virtual networking 109 Hyper-V virtual networks 109 Virtual network types 109 Virtual local area networks (VLANs) 110 Network adapters and virtual network switches 111 Create and configure the virtual machines 112 Configure the memory for the virtual machines 112 Configure the processors for the virtual machines 113 Configure the controllers and hard disks for the virtual machines 114 Configure services and general settings 115 Integration services 115 Automatic stop and start 115 Configure SharePoint 2013 117 TechNet articles about how to configure settings for the server farm 117 Additional resources about how to configure settings for the server farm 119 Configure authentication infrastructure in SharePoint 2013 120 TechNet articles about how to configure authentication infrastructure 120 Configure forms-based authentication for a claims-based web application in SharePoint 2013 122 Before you begin 122 Process overview 123 vii Phase 1: Create a new web application that uses forms-based authentication with Central Administration 123 Phase 2: Configure the Web.Config files for an LDAP membership provider 124 Configure the Central Administration Web.Config file 124 Configure the Security Token Service Web.Config file 126 Configure the new web application Web.Config file 127 Create a new web application that uses forms-based authentication with Windows PowerShell 128 Configure a forms-based authentication web application for Windows Azure autohosted apps 130 Configure SAML-based claims authentication with AD FS in SharePoint 2013 132 Before you begin 132 Process overview 133 Phase 1: Install and configure an AD FS server 133 Phase 2: Configure AD FS with the web application as a relying party 133 Configure AD FS for a relying party 133 Configure the claim rule 134 Export the token signing certificate 135 Phase 3: Configure SharePoint 2013 to trust AD FS as an identity provider 135 Exporting multiple parent certificates 136 Import a token signing certificate by using Windows PowerShell 136 Define a unique identifier for claims mapping by using Windows PowerShell 138 Create a new authentication provider 138 Phase 4: Configure web applications to use claims-based authentication and AD FS as the trusted identity provider 139 Associate an existing web application with the AD FS identity provider 139 Create a new web application with the AD FS identity provider 140 Configure server-to-server authentication in SharePoint 2013 141 TechNet articles about how to configure server-to-server authentication 141 Configure server-to-server authentication between SharePoint 2013 farms 142 Configure a SharePoint 2013 trust relationship with another farm 142 Configure server-to-server authentication between SharePoint 2013 and Exchange Server 2013 146 Process overview 147 Configure server-to-server authentication between SharePoint 2013 and Lync Server 2013 149 Process overview 150 Configure app authentication in SharePoint Server 2013 152 viii Process overview 152 Step 1. Configure the SharePoint Server 2013 app authentication trust 153 Configure SharePoint Server 2013 to trust ACS 153 Configure SharePoint Server 2013 to trust the app 154 Step 2. Register the app with the Application Management service 156 Step 3. Configure app permissions 156 Configure client certificate authentication for SharePoint 2013 157 Configure client certificate authentication 158 Configure availability and recovery solutions for SharePoint 2013 160 TechNet articles about installing and configuring high availability and disaster recovery solutions 160 Configure SQL Server 2012 AlwaysOn Availability Groups for SharePoint 2013 161 Process overview 161 Before you begin 162 Knowledge and skill requirements 162 SQL Server AlwaysOn Availability Group concepts 162 Windows Server Failover Clustering 164 SharePoint Foundation 2013 and SharePoint Server 2013 164 Detailed steps to configure an AlwaysOn Availability Group for SharePoint 164 Prepare the Windows Server cluster environment 165 Prepare the SQL Server environment 166 Install SQL Server 2012 166 Enable Named Pipes 166 Enable AlwaysOn 167 Create and configure the availability group 167 About replicas and data synchronization 168 Replica configuration requirements 169 Create and configure the availability group 171 Create the availability group 171 Install and configure SharePoint 2013 172 Add SharePoint databases to the availability group 173 Use failover tests to validate the AlwaysOn installation 174 Monitor the AlwaysOn environment 174 Configure email integration for a SharePoint 2013 farm 176 TechNet articles about email integration 176 Configure incoming email for a SharePoint 2013 farm 178 Before you begin 178 Install and configure the SMTP service 179 ix Install the SMTP service 179 Install IIS 6.0 Management tools 180 Configure the SMTP service 180 Configure incoming email in a basic scenario 181 Configure incoming email in an advanced scenario 181 Prepare your environment for incoming email in an advanced scenario 184 Configure AD DS to be used with Directory Management Service 184 Configure DNS Manager 187 Add an SMTP connector in Microsoft Exchange Server 2010 188 Configure permissions to the email drop folder 189 Configure email drop folder permissions for the application pool identity account for a web application 189 Configure email drop folder permissions for the logon account for the SharePoint Timer service 190 Are attachments missing from email messages that are sent to a SharePoint document library? 191 Configure outgoing email for a SharePoint 2013 farm 192 Before you begin 193 Install and configure the SMTP service 193 Install the SMTP service 193 Configure the SMTP service 194 Configure outgoing email for a farm 195 Configure outgoing email for a specific web application 196 Configure services and service applications in SharePoint 2013 198 TechNet articles about how to configure services for SharePoint 2013 198 Additional resources about how to configure services for SharePoint 2013 200 Configure the Secure Store Service in SharePoint 2013 201 Configure Secure Store 201 Work with encryption keys 203 Generate an encryption key 203 Refresh the encryption key 204 Store credentials in Secure Store 204 Create a target application 205 Field 206 Set credentials for a target application 207 Enable the audit log 207 Video demonstration 208 Create and configure a Search service application in SharePoint Server 2013 209 x Before you begin 209 How to create and configure a SharePoint Search service application 209 Step 1: Create accounts that are required for a SharePoint Search service application 210 Step 2: Create a SharePoint Search service application 211 Step 3: Configure the SharePoint Search service application 212 Specify the default content access account 212 Specify the contact email address 213 Create content sources in a SharePoint Search service application 213 Step 4: Configure the SharePoint Search service application topology 214 Create a Search Center site in SharePoint Server 2013 215 Before you begin 215 Deploy people search in SharePoint Server 2013 218 Before you begin 218 People search prerequisites 218 Set up people search 219 Configure My Sites settings 219 Configure crawling 219 Add data for people search 222 Add user profiles to the profile store 222 Add information to My Sites 223 Crawl the profile store 223 Configure result sources for search in SharePoint Server 2013 225 Before you begin 225 Create a result source 225 Levels and permissions for result sources 226 On the BASICS tab 227 On the SORTING tab 228 On the TEST tab 228 Set a result source as default 228 Create and configure Machine Translation services in SharePoint Server 2013 230 Before you begin 230 Create a SharePoint Machine Translation service application 231 Database section properties 232 Configure the Machine Translation Service 234 Additional steps 237 Configure Request Manager in SharePoint Server 2013 238 Overview 238 Scenarios 238 [...]... for SharePoint 414 TechNet articles about apps for SharePoint 414 Additional resources about apps for SharePoint 415 Overview of apps for SharePoint 2013 417 Where are apps for SharePoint hosted? 417 How are apps for SharePoint and SharePoint sites related? 418 What is the URL for an app for SharePoint? 419 Use and benefits of apps for. .. unexpected outcomes This article provides an overview for all types of SharePoint 2013 farm deployment For a visual representation of the information in this article, see the SharePoint 2013 Products Deployment model in the Technical diagrams (SharePoint 2013) topic Related technical diagrams include "Topologies for SharePoint 2013 and Services inSharePoint Server 2013" In this article: Concepts Physical... site 451 Before you begin 451 Add apps for SharePoint to SharePoint sites 452 Remove an app for SharePoint from a SharePoint 2013 site 455 Before you begin 455 Remove an app from a SharePoint site 455 Monitor apps for SharePoint for SharePoint Server 2013 457 Before you begin 457 Selecting apps to monitor in Central... http://support.microsoft.com xxvi Overview of SharePoint 2013 installation and configuration Published: July 16, 2012 Summary: Learn about how to install and configure SharePoint Server 2013 or SharePoint Foundation 2013 in a farm Applies to: SharePoint Foundation 2013 | SharePoint Server 2013 Although SharePoint products farms vary in complexity and size, a combination of careful planning and a phased deployment that includes... 281 Configure site mailboxes in SharePoint Server 2013 282 Before you begin 282 Configure SharePoint for Site Mailboxes in SharePoint Server 2013 283 Install Exchange Web Services API on SharePoint Server 284 Establish OAuth Trust and Service Permissions on SharePoint Server 2013 284 Configure Exchange Server 2013 for Site Mailboxes 293 Establish... configured, have the SharePoint 2013 software prerequisites installed and hardened, and have the required authentication configured For more information, see: "Installing software prerequisites" in Hardware and software requirements (SharePoint 2013) Plan security hardening (SharePoint Server 2013) System requirements (SharePoint 2013) Plan authentication in SharePoint 2013 Domain controller:... (parent and child farms) to SharePoint 2013 487 Process for upgrading farms that share services 487 Best practices for upgrading to SharePoint 2013 494 Best practices for testing upgrade 494 Best practices for upgrading to SharePoint 2013 495 Review supported editions and products for upgrading to SharePoint 2013 497 Supported topologies 497 Physical... guidance 498 Supported editions for upgrade 498 xix Supported cross-product upgrades 499 Plan for upgrade to SharePoint 2013 500 TechNet articles about how to plan for upgrade 500 Additional resources about how to plan for upgrade to SharePoint 2013 501 Determine strategy for upgrade to SharePoint 2013 502 How to minimize downtime... claims-based authentication in SharePoint 2013 608 Convert SharePoint 2010 Products classic-mode web applications to claims-based authentication in SharePoint 2010 Products and then upgrade to SharePoint 2013 608 xxiii Convert SharePoint 2010 Products classic-mode web applications to SharePoint 2013 claims-based web applications 610 Convert SharePoint 2013 classic-mode web applications... apps for SharePoint 420 Impacts of apps for SharePoint 420 Plan for apps for SharePoint 2013 421 Governance: determine the app for SharePoint policy for your organization 421 Plan app configuration settings 422 Determine the domain name to use 424 xvii Plan App Catalog 425 Plan to monitor apps 425 Plan for app . apps for SharePoint to a SharePoint 2013 site 451 Before you begin 451 Add apps for SharePoint to SharePoint sites 452 Remove an app for SharePoint from a SharePoint 2013 site 455 Before. Use and benefits of apps for SharePoint 420 Impacts of apps for SharePoint 420 Plan for apps for SharePoint 2013 421 Governance: determine the app for SharePoint policy for your organization. Overview of apps for SharePoint 2013 417 Where are apps for SharePoint hosted? 417 How are apps for SharePoint and SharePoint sites related? 418 What is the URL for an app for SharePoint? 419