Tuesday, March 28, 2017

Stop using Excel Spreadsheets for Project Management Use SharePoint or Office 365 Site Templates

BrightWork Collaborative Project Management Framework Overview   By Joel Oleson Executive Overview I have the privilege of seeing so many great projects and solutions. BrightWork Collaborative Project Management Framework and software are no exception. I first was introduced by BrightWork by Éamonn McGuinness, who has the vision of making successful project and portfolio management possible [&hellip
by Joel Oleson via CollabShow

Exam Prep: Optimization and Monitoring

The Exam for SharePoint 2016, is broken down into various categories, in these blog posts we will cover the following:

read more


by via SharePoint Pro

Stop using Access-based apps in SharePoint Online

Microsoft announced today that Access Services in SharePoint are slowly going away in favor of Microsoft PowerApps! Starting in two months (June 2017), you will no longer be able to create Access-based apps in SharePoint Online, and you have until April 2018 to convert your existing Access apps to PowerApps or any other tool that fits your business needs.

Access SharePoint

To make the transitioning process smoother, Microsoft has added a feature in Office 365 allowing you to export your data from the Access app, to a SharePoint list from where you can take advantage of both PowerApps and Flow to build modern and mobile-ready business applications. You can find more information about the process here.

As for everyone who is running SharePoint On-Premises, not only will Access Services and Access Web Apps be supported for the remainder of your current SharePoint support timeline, but they will also be included in the next version of SharePoint Server!

For all those of you who think that SharePoint 2016 is the last version of SharePoint On-Premises, this blog post is another proof that there will be another version of SharePoint Server . An important note is that this does not affect the Desktop version of access, but simply Access Services in SharePoint!

I am wondering, how many of you use Access Services in SharePoint Online currently? If you use it simply type something in the comments! You can find the Original Announcement on the Microsoft Tech Community!

Follow me on Social Media and Share this article with your friends!


Leave a comment and don’t forget to like the Absolute SharePoint Blog Page   on Facebook and to follow me on Twitter here  for the latest news and technical articles on SharePoint.  I am also a Pluralsight author, and you can view all the courses I created on my author page.

The post Stop using Access-based apps in SharePoint Online appeared first on Absolute SharePoint Blog by Vlad Catrinescu.


by Vlad Catrinescu via Absolute SharePoint Blog by Vlad Catrinescu

Monday, March 27, 2017

Decomission That Old Server (Move Extranet Service)


So you have an old Web Front End server. It has been a good ‘un (as we say in the south) a real work horse, but for numerous different reasons, it is time to “decommission” the ole gal and get a new work horse in place. You are going to keep the old WFE in place while you build up a new one and get them to look identical before taking the old one offline. One problem, you notice you are running this extranet service and you cannot get it installed on the new server. What is a horse farmer, I mean server admin to do?

First, Add the new server to the farm. Provision all necessary services except those that can only run on one server (like UPS and probably Search topology and of course the Extranet Service). For the rest of these steps, I will only focus on the ExCMExtranetService, additional services will need to be deployed as needed in your environment.



Next, stop the ExCM Service.




Once stopped, delete the ExCM service application (if there is one). Now you are ready to remove the extranet service using the Remove-ExCMExtranetService.



Now you are ready to remove the server from the farm.

With the old server out of the farm, you will want to retract and redeploy the ExCM solution. Now, you will need to start the service on the new farm. The way the service gets started is when you activate certain features of ExCM; features like Extranet Account Managers, Authentication Provider Mapping, user automation, etc. Chances are you have already activated these features, which is why you see the service in your farm to begin with. If you do not need to activate one of these features, then you can also start the service by running the “New-ExCMExtranetService”


As you can see from the below screenshot, I now have the service running on the new server.





Lastly, browse out to your extranet site and ensure that you can log in. Enjoy!

by noreply@blogger.com (Johnathan Horton) via SharePoint Solutions Blog

Status update on the latest DFFS BETA

I have spent a lot of time last week and in the weekend trying to sort out some problems with “on-change rules” that surfaced in the last BETA version. Due to the changes in the “debug output”, it became clear that there were some issues that needed attention. The problem is related to using multiple rules on the same trigger – for example a multi choice field.

This means I’ll have to do some changes to how the “on-change rules” are handled, and release a new BETA – hopefully later this week or next weekend.

Alexander


by Alexander Bautz via SharePoint JavaScripts

Deleting a Very Large SharePoint List

I’ve complained about the 5000 item list threshold limit so many times, I’ve lost count. If you don’t believe me, you could read my posts here and  here and here and here.

Today’s difficulty was caused by needing to delete a Very Large List. This isn’t just a Large List – it’s Very Large. The number of items is way over 5000 at almost 300000. This list is part of a well-used application I built for a client about 3 years ago in SharePoint 2007. It’s been ticking away just fine, as there was no list threshold in 2007.

I’m migrating the application to SharePoint Online, so I’m totally rewriting it for several reasons. I copied across the list “shell” with Sharegate and brought along a few hundred items in the big list just for testing and building purposes.

But now I need to test “at volume”, so I brought across all 300k items. Unfortunately, I forgot to add an index to one of the columns where I need it to make some queries work. I figured “no big deal”. I’d just delete the list and start again.

Not so fast! When I tried to delete the list, I got this error:

I’m trying to DELETE the list, so what gives? Well, I found a post from Mike Smith (@TechTrainNotes) entitled SharePoint 2016: List View Threshold Limit to Delete a List is 99,993 Items??? which pretty much told me why this wasn’t working. It’s crazy, but you can’t delete a list or library which has more than 100k objects in it. (Read Mike’s post to see where he ran into a few wrinkles on this.) One would think that deleting a list would have nothing to do with any thresholds, but one would be wrong.

I tried a number of things – deleting the list in SharePoint Designer, writing some code to delete items one by one, etc. – but either my attempts didn’t work or they were taking forever.

Luckily, I have no pride and I complained on Twitter. Kelvin Hoyle (@kelvin_hoyle) came to the rescue!

By connecting to the list with Microsoft Access, I was able to select all the items and hit delete. Yes, this is taking a while as well, but it’s clearly faster.

The steps to do this are:

  • Open Access – I’m using Access 2016 – and create a blank database.
  • In the ribbon, go to External Data and in the Import & Link section, click on the More dropdown.
  • Choose SharePoint List
  • Provide the URL to the SharePoint site which houses the list
  • Be sure to leave the default radio button selected, creating a link between Access and the SharePoint list.

  • Click Next, and choose the list you want to work with.
  • Click OK.

Access will set up a new table which is linked to your list. You can open it like any other table in Access. Open the table and – voila – you can select any items you’d like to edit or delete.

Yet another workaround for something which I think shouldn’t be a limitation in the modern age. Sigh.


by Marc D Anderson via Marc D Anderson's Blog

Saturday, March 25, 2017

Rencore Tech Talks - Episode 005 - Microsoft Teams with Maarten Eekels

Rencore Tech Talks - Episode 005 - Microsoft Teams with Maarten Eekels

Note. This episode was recorded 2016-12-08.

I’m catching up with Maarten Eekels on Microsoft Teams. As of this post, Microsoft Teams has been released in General Availability. As of the recording, it was still in a preview.

Episode Guest, Maarten Eekels

Maarten Eekels (@maarteneekels is Microsoft MVP and CTO of Portiva, one of the larger SharePoint and Office 365 implementation partners in the Netherlands. In that role he is responsible for all knowledge and technology related matters.

Maarten is an experienced Office 365 and SharePoint specialist and already since version 2003 he is involved in implementing SharePoint and (later) Office 365.

Also, Maarten is a regular speaker on both national and international events, like conferences, SharePoint Saturdays, and user group meetings. In September 2015 he started a video blog series called Maarten’s Cloud Journaal, specifically targeted at Dutch speaking Office 365 users.

Some of the topics we brush on are:

  • Microsoft Teams, where does it fit in?
  • Teams Desktop Applications vs Browser
  • Threaded conversations, giphys etc.
  • Enabling Teams in my Tenant
  • Bots and Connectors for extensibility
  • and more...

Listen now:

All the best,
Tobias Zimmergren


by Tobias Zimmergren via Zimmergren's thoughts on tech

Wednesday, March 22, 2017

Changing Content Types Using Bulk Edit Metadata in Sharegate

There are many times when I start working with a client where they have used virtually no (or none at all) Content Types in SharePoint. As I discuss in my Content Types: Love Them or Lose It sessions at conferences (Coming up next: SPTechCon Austin! Use code ANDERSON to save an extra $200 off full registration.), Content Types are about much more than just metadata. A good information architecture in SharePoint uses Content Types liberally to improve search results, determine workflow behaviors, create content roll ups, and so much more.

If you have read any of our recent Sympraxis newsletters, you know that Sharegate is one of our absolutely favorite tools we use to work with SharePoint. We love it so much, we’re partners with them – you can even buy Sharegate through us! It a rare day that Sharegate isn’t open in my Windows 10 Task Bar so that I can do something with SharePoint. You may think of Sharegate as a migration tool, but we use it as our “everything tool” – it does far more than just migrate content.

I didn’t intend this to be an advertisement for Sharegate, but once I start talking about it…

Anyway, today I needed to change the Content Type on a LOT of events in a calendar. We often create a new Content Type based on Event which has a few extra column. Most often they are things like Show on Home Page? or Department Name, especially in an Intranet. In this case, that Content Type is called Department Event, and it lets us intelligently roll up those events on the Intranet home page.

Changing from one Content Type to another is something you’ll probably need to do anytime you want to “true up” your information architecture.

Maybe you have a Document Library with thousands of documents in it – all with the Content Type Document. That doesn’t do much for you!

Or maybe you created a Content Type called Contract, and realize that having several child Content Types like Real Estate Contract and Employee Contract will give you improved metadata and “findability”. If you have a lot of existing Contracts, then you’ve got a headache ahead of you – unless you use a tool like Sharegate.

The way we go about this is to use the Bulk Edit Metadata capability in Sharegate.

First we open the list or library where we want to change the Content Type. Choose the SharePoint Site Collection or tenant and connect…

Navigate to the the list or library where you want to make the changes and select a view which displays the Content Type. If you don’t have one, go set one up and come back to refresh the view (upper right below). Select the items you’d like to change…

Click on the Excel button in the ribbon…

 

…and choose Export Selection to Excel.

You can add additional mappings and changes here, but let’s just click on the Export now button…

 

You’ll need to provide a destination to save the file. Once the export is done, click on the Open File button to open the Excel file containing the exported data…

In Excel, you can change any of the metadata, but here we are focusing on the Content Type. Remember that spelling matters – you’ll get errors on import if you’ve spelled the Content Type name incorrectly.

Click on the Excel button back in Sharegate again and this time choose Import From Excel

Select the Excel file wherever you saved it before. You have another chance to create some other mappings, etc., but let’s just click on the Import now button…

After a little work – it’ll take longer for more data – your Content Types will be changed, just as you set them in the Excel export. You didn’t “migrate” any content at all – you just changed things in place to be the way you want them!

This is one of those everyday uses for Sharegate that makes it one of our favorite tools.


by Marc D Anderson via Marc D Anderson's Blog

Monday, March 20, 2017

Notes from the Field: The SharePoint Framework

So, by now you should have heard the SharePoint Framework is now available within Office 365, as it hit GA the other week. This is a big milestone and one that we should all take note of now. 

read more


by via SharePoint Pro

Free Webinar on Document Assembly and Automated Document Generation with SharePoint and Office 365

A ton of investments have been made in Office over time to support document assembly and document generation in Office 365 and SharePoint. This webinar will showcase these improvements
by Joel Oleson via CollabShow

SharePoint 2016 Site Template ID List for PowerShell

When creating a new Site Collection by PowerShell, we have the option to apply the Site Template Directly, however you must know the Template ID for that site. For example you will need to give PowerShell the #STS1 to create a team site.  Here is the SharePoint 2016 Site Template ID List for you to use in your own PowerShell scrips. This is really all the available templates, however some of them are obsolete (as marked in their description), so do not use them.

SharePoint 2016 Site Template ID

An example to create a Team site would be:

New-SPSite http://www.contoso.com -OwnerAlias "DOMAIN\jdow" -Name "Contoso" -Template "STS#0"

 

Template ID

Title

Description

ACCSRV#0 Access Services Site Microsoft Access Server
ACCSVC#0 Access Services Site Internal Microsoft Access Server Internal
ACCSVC#1 Access Services Site Microsoft Access Server
APP#0 App Template A base template for app development. It provides the minimal set of features needed for an app.
APPCATALOG#0 App Catalog Site A site for sharing apps for SharePoint and Office
BDR#0 Document Center A site to centrally manage documents in your enterprise
BICenterSite#0 Business Intelligence Center A site for presenting Business Intelligence content in SharePoint.
BLANKINTERNET#0 Publishing Site This template creates a site for publishing Web pages on a schedule, with workflow features enabled. By default, only Publishing subsites can be created under this site. A Document and Picture Library are included for storing Web publishing assets.
BLANKINTERNET#1 Press Releases Site This template creates the Press Releases subsite for an Internet-facing corporate presence website.
BLANKINTERNET#2 Publishing Site with Workflow A site for publishing Web pages on a schedule by using approval workflows. It includes document and image libraries for storing Web publishing assets. By default, only sites with this template can be created under this site.
BLANKINTERNETCONTAINER#0 Publishing Portal A starter site hierarchy for an Internet-facing site or a large intranet portal. This site can be customized easily with distinctive branding. It includes a home page, a sample press releases subsite, a Search Center, and a login page. Typically, this site has many more readers than contributors, and it is used to publish Web pages with approval workflows.
BLOG#0 Blog A site for a person or team to post ideas, observations, and expertise that site visitors can comment on.
CENTRALADMIN#0 Central Admin Site A site for central administration. It provides Web pages and links for application and operations management.
CMSPUBLISHING#0 Publishing Site A blank site for expanding your Web site and quickly publishing Web pages. Contributors can work on draft versions of pages and publish them to make them visible to readers. The site includes document and image libraries for storing Web publishing assets.
COMMUNITY#0 Community Site A place where community members discuss topics of common interest. Members can browse and discover relevant content by exploring categories, sorting discussions by popularity or by viewing only posts that have a best reply. Members gain reputation points by participating in the community, such as starting discussions and replying to them, liking posts and specifying best replies.
COMMUNITYPORTAL#0 Community Portal A site for discovering communities.
DEV#0 Developer Site A site for developers to build, test and publish apps for Office
EDISC#0 eDiscovery Center A site to manage the preservation, search, and export of content for legal matters and investigations.
EDISC#1 eDiscovery Case This template creates an eDiscovery case. Users create locations where they can preserve or export data.
ENTERWIKI#0 Enterprise Wiki A site for publishing knowledge that you capture and want to share across the enterprise. It provides an easy content editing experience in a single location for co-authoring content, discussions, and project management.
GLOBAL#0 Global template This template is used for initializing a new site.
GROUP#0 Group A site template used to create a Group.
MPS#0 Basic Meeting Workspace A site to plan, organize, and capture the results of a meeting. It provides lists for managing the agenda, meeting attendees, and documents.
MPS#1 Blank Meeting Workspace A blank meeting site for you to customize based on your requirements.
MPS#2 Decision Meeting Workspace A site for meetings that track status or make decisions. It provides lists for creating tasks, storing documents, and recording decisions.
MPS#3 Social Meeting Workspace A site to plan social occasions. It provides lists for tracking attendees, providing directions, and storing pictures of the event.
MPS#4 Multipage Meeting Workspace A site to plan, organize, and capture the results of a meeting. It provides lists for managing the agenda and meeting attendees in addition to two blank pages for you to customize based on your requirements.
OFFILE#0 (obsolete) Records Center (obsolete) This template creates a site designed for records management. Records managers can configure the routing table to direct incoming files to specific locations. The site also lets you manage whether records can be deleted or modified after they are added to the repository.
OFFILE#1 Records Center This template creates a site designed for records management. Records managers can configure the routing table to direct incoming files to specific locations. The site also lets you manage whether records can be deleted or modified after they are added to the repository.
OSRV#0 Shared Services Administration Site This template creates a site for administering shared services
POINTPUBLISHINGHUB#0 PointPublishing Hub A site template used to create a pointpublishing hub site.
POINTPUBLISHINGPERSONAL#0 PointPublishing Personal A site template used to create a pointpublishing personal site.
POINTPUBLISHINGTOPIC#0 PointPublishing Topic A site template used to create a pointpublishing topic site.
POLICYCTR#0 Compliance Policy Center
PPSMASite#0 PerformancePoint
PRODUCTCATALOG#0 Product Catalog A site for managing product catalog data which can be published to an internet-facing site through search. The product catalog can be configured to support product variants and multilingual product properties. The site includes admin pages for managing faceted navigation for products.
PROFILES#0 Profiles This template creates a profile site that includes page layout with zones
PROJECTSITE#0 Project Site A site for managing and collaborating on a project. This site template brings all status, communication, and artifacts relevant to the project into one place.
PWA#0 Project Web App Site Microsoft Project Web App
PWS#0 Microsoft Project Site A site that supports team collaboration on projects. This site includes documents, issues, risks, and deliverables which may be linked to tasks in Project Web App.
SGS#0 Group Work Site This template provides a groupware solution that enables teams to create, organize, and share information quickly and easily. It includes Group Calendar, Circulation, Phone-Call Memo, the Document Library and the other basic lists.
SPS#0 SharePoint Portal Server Site This template is obsolete.
SPSCOMMU#0 Community area template This template is obsolete.
SPSMSITE#0 Personalization Site A site used for hosting personal sites (My Sites) and the public People Profile page. This template needs to be provisioned only once per User Profile Service Application, please consult the documentation for details.
SPSMSITEHOST#0 My Site Host A site used for hosting personal sites (My Sites) and the public People Profile page. This template needs to be provisioned only once per User Profile Service Application, please consult the documentation for details.
SPSNEWS#0 News Site This template is obsolete.
SPSNHOME#0 News Site A site for publishing news articles and links to news articles. It includes a sample news page and an archive for storing older news items.
SPSPERS#0 SharePoint Portal Server Personal Space This web template defines a Personal Space for an individual participating on a SharePoint Portal.
SPSPERS#10 Storage And Social SharePoint Portal Server Personal Space This web template defines a minimal Personal Space with Storage, on-demand Social and Multilingual User Interface with document parser disabled at web level features for an individual participating on a SharePoint Portal.
SPSPERS#2 Storage And Social SharePoint Portal Server Personal Space This web template defines a minimal Personal Space with both Social and Storage features for an individual participating on a SharePoint Portal.
SPSPERS#3 Storage Only SharePoint Portal Server Personal Space This web template defines a minimal Personal Space with Storage features for an individual participating on a SharePoint Portal.
SPSPERS#4 Social Only SharePoint Portal Server Personal Space This web template defines a minimal Personal Space with Social features for an individual participating on a SharePoint Portal.
SPSPERS#5 Empty SharePoint Portal Server Personal Space This web template defines a empty Personal Space.
SPSPERS#6 Storage And Social SharePoint Portal Server Personal Space This web template defines a minimal Personal Space with Storage and on-demand Social features for an individual participating on a SharePoint Portal.
SPSPERS#7 Storage And Social SharePoint Portal Server Personal Space This web template defines a minimal Personal Space with Storage, Social and Multilingual User Interface features for an individual participating on a SharePoint Portal.
SPSPERS#8 Storage And Social SharePoint Portal Server Personal Space This web template defines a minimal Personal Space with Storage, on-demand Social and Multilingual User Interface features for an individual participating on a SharePoint Portal.
SPSPERS#9 Storage And Social SharePoint Portal Server Personal Space This web template defines a minimal Personal Space with Storage, on-demand Social with document parser disabled at web level features for an individual participating on a SharePoint Portal.
SPSPORTAL#0 Collaboration Portal A starter site hierarchy for an intranet divisional portal. It includes a home page, a News site, a Site Directory, a Document Center, and a Search Center with Tabs. Typically, this site has nearly as many contributors as readers and is used to host team sites.
SPSREPORTCENTER#0 Report Center A site for creating, managing, and delivering Web pages, dashboards, and key performance indicators that communicate metrics, goals, and business intelligence information.
SPSSITES#0 Site Directory A site for listing and categorizing important sites in your organization. It includes different views for categorized sites, top sites, and a site map.
SPSTOC#0 Contents area Template This template is obsolete.
SPSTOPIC#0 Topic area template This template is obsolete.
SRCHCEN#0 Enterprise Search Center A site focused on delivering an enterprise-wide search experience. Includes a welcome page with a search box that connects users to four search results page experiences: one for general searches, one for people searches, one for conversation searches, and one for video searches. You can add and customize new results pages to focus on other types of search queries.
SRCHCENTERLITE#0 Basic Search Center A site focused on delivering a basic search experience. Includes a welcome page with a search box that connects users to a search results page, and an advanced search page. This Search Center will not appear in navigation.
SRCHCENTERLITE#1 Basic Search Center The Search Center template creates pages dedicated to search. The main welcome page features a simple search box in the center of the page. The template includes a search results and an advanced search page. This Search Center will not appear in navigation.
STS#0 Team Site A place to work together with a group of people.
STS#1 Blank Site A blank site for you to customize based on your requirements.
STS#2 Document Workspace A site for colleagues to work together on a document. It provides a document library for storing the primary document and supporting files, a tasks list for assigning to-do items, and a links list for resources related to the document.
TBH#0 In-Place Hold Policy Center A site to manage policies to preserve content for a fixed period of time.
TENANTADMIN#0 Tenant Admin Site A site for tenant administration. It provides Web pages and links for self-serve administration.
visprus#0 Visio Process Repository A site for viewing, sharing, and storing Visio process diagrams. It includes a versioned document library and templates for Basic Flowcharts, Cross-functional Flowcharts, and BPMN diagrams.
WIKI#0 Wiki Site A site for a community to brainstorm and share ideas. It provides Web pages that can be quickly edited to record information and then linked together through keywords

The post SharePoint 2016 Site Template ID List for PowerShell appeared first on Absolute SharePoint Blog by Vlad Catrinescu.


by Vlad Catrinescu via Absolute SharePoint Blog by Vlad Catrinescu

Thursday, March 16, 2017

Exam Prep: Productivity Services

The Exam for SharePoint 2016, is broken down into various categories, in these blog posts we will cover the following:

read more


by via SharePoint Pro

Wednesday, March 15, 2017

Business Extranets that are Cost-effective and Highly-secure

In this webinar we cover many of the features that make SharePoint a highly-secure and cost-effective business extranet platform:




by noreply@blogger.com (Jeff Cate) via SharePoint Solutions Blog

Monday, March 13, 2017

Upcoming Webinar: Business Extranets that are Cost-effective and Highly Secure

We'll be conducting a one hour webinar on cost-effective and highly secure business extranets on Wednesday, March 15 at 11:00 a.m. EDT.

To attend, go register here:  http://ift.tt/2mjxjOq

Here is the description for what we will be covering:

Join us for an informative look at how to use SharePoint (2016, 2013, or 2010) to provide cost-effective, highly secure, and user-friendly on-premises business extranets for collaboration with customers, vendors and other business partners.

We will look at techniques for:

  • Allowing internal users to easily and securely invite external business partners to join private extranet collaboration sites 
  • Automatically enforcing security and governance policies as external users create accounts from invitations and join sites 
  • Oversee and govern external user Forms-based Authentication (FBA) accounts with minimal workload for SharePoint Administrators 
  • Automating the extranet site request and provisioning process for extranet sites to ensure that it is fast and easy for users to obtain properly provisioned sites as new customers\vendors\projects are initiated 

Questions are welcome during and after the webinar.

We'll be doing the demos using SharePoint 2016, but SharePoint 2010 and 2013 are still applicable as well.

Come join us and learn about how to have a business-grade extranet!

by noreply@blogger.com (Jeff Cate) via SharePoint Solutions Blog

SharePoint 2016 Service Accounts Recommendations

Service Accounts are a very big part of installing every version of SharePoint, however everyone has a different way of setting them up. And once you install your SharePoint with a set of service accounts, it’s not always easy to change them. Let’s take a look at the SharePoint 2016 Service Accounts that I reccomend.

SharePoint 2016 Service Accounts

Every SharePoint administrator you ask, will have a different opinion on how many service accounts you need and whether you should have dedicated service accounts for some Service Applications or certain administration tasks. Even if all SharePoint Administrators have different opinions, it doesn’t mean some are wrong and some are right, there is no real “golden” solution that will be good for every SharePoint farm out there. From my experience with SharePoint, here are the Service Accounts that I recommend for your SharePoint 2016 implementation.

SharePoint 2016 Service Accounts

The following Service Accounts can be named according to your companies naming convention. Local Security Policies only need to be configured if you have Group Policies that will take those away.

Account

Description

Local / Application Permissions

Local Security Policy

SP_Admin

This account will be used to Install and configure the SharePoint farm initially. After the initial setup, you can grant the farm administrator rights to your SharePoint Administrators account so they can log in and manage SharePoint with their own account.

  • Domain User
  • Local Administrator on the SharePoint Servers
  • Member of the following SQL Roles
    • DB Creator
    • Security Admin
Back up files and directories

Debug Programs

Manage auditing and Security log

Restore files and directories

Take ownership of files or other objects

SP_Farm

Runs the SharePoint Timer and Administration Service

  • Domain User
  • Member of the following SQL Roles
    • DB Creator
    • Security Admin

Allow log on locally

Adjust memory quotas for a process

Impersonate a client after authentication

Log on as a batch job

Log on as a service

Replace a process level token

SP_Services

Runs the Application Pool for most of your Service Applications. There are some service applications that require more rights and a dedicated Service Account is recommended. We’re converting those a bit lower in this blog post!

  • Domain User

Adjust memory quotas for a process

Log on as a batch job

Log on as a service

Replace a process level token

Impersonate a client after authentication

SP_Pool

Runs the Application Pool for your Web Applications.

  • Domain User

Impersonate a client after authentication

Log on as a batch job

Lon as a service

SP_Crawl

The Default Content Access Account for the Search Service Application. This account is sued to crawl the content of your SharePoint Web Applications.

  • Domain User
  • This account needs to have Read Access on all your Web Applications (given automatically)
SP_Sync

Used to synchronize profiles between AD and SharePoint Server 2016

  • Domain User
  • Needs to have “Replicate Directory Changes” in the Active Directory >> Tutorial here
SP_C2WTS

Used to run the Claims to Windows Token

Service

  • Domain User
  • Local Administrator on all SharePoint Servers running the C2WTS service

Act as part of the operating system

Impersonate a client after authentication

Log on as a service

SP_SU

Object cache account (Super User). Must not be an account that will ever be used to log in to the site.

  • Domain User
  • Full Control on your Web Applications
SP_SR

Object cache account (Super Reader). Must not be an account that will ever be used to log in to the site.

  • Domain User
  • Full Read on your Web Applicationss

SQL Service Accounts

The following Service Accounts are recommended for your dedicated SQL Server hosting SharePoint databases and can be named according to your companies naming convention. Local Security Policies only need to be configured if you have Group Policies that will take those away.

Account

Description

Local / Application Permissions

Local Security Policy

SP_SQLAdmin

This account will be used to Install and configure the SQL Server initially. After the initial setup, you can grant the SQL Admin rights to your SQL Administrators account so they can log in and manage SQL with their own account.

  • Domain User
  • Local Administrator on the SQL Server
Back up files and directories

Debug Programs

Manage auditing and Security log

Restore files and directories

Take ownership of files or other objects

SP_SQLEngine

This account will run the Database Engine service

  • Domain User
Log on as a service

Replace a process-level token

Bypass traverse checking

Adjust memory quotas for a process

Perform Volume Maintenance Tasks (Only If you want to enable Instant File Initialization)

SP_SQLAgent

This account will run the SQL Server Agent Service

  • Domain User
Log on as a service

Replace a process-level token

Bypass traverse checking

Adjust memory quotas for a process

Other Accounts Depending on your Scenario

Depending on what features you plan to use in your SharePoint 2016 implementation, here are some other Service Accounts that I recommend:

Account

Description

Local / Application Permissions

Local Security Policy

SP_WFM

This account would be used as the RunAs account for the Workflow Manager and Service Bus Farms. If you want, you could create a dedicated account for each.

  • Domain User
  • Local Administrator on the WFM Servers
  • Full Control to the Web Applications where Workflow Manager will be used

Impersonate a client after authentication

Log on as a service

Log on as a batch job

SP_Access

This account would be used to run the Service Application Pool for the Access Apps for SharePoint Service Application. The reason of a dedicated service account is that this account requires special permissions in SQL as well as special settings on the Access App Services Service Application

  • Domain User
  • Member of the following SQL Roles
    • DB Creator
    • Security Admin
  • Read/Write permission to the config cache folder located at C:\ProgramData\Microsoft\SharePoint\Config
  • The IIS Application Pool running the Access App Services Service Application needs to have “Load User Profile” at True. Navigate to the IIS Application Pools , and from Advanced Settings, change “Load User Profile” to True.

Adjust memory quotas for a process

Log on as a batch job

Log on as a service

Replace a process level token

Impersonate a client after authentication

SP_PowerPivot

The PowerPivot unattended data refresh account is a designated account for running PowerPivot data refresh jobs in a SharePoint farm.

  • Domain User
  • Read permissions to external data sources

General Recommendations for Service Accounts

Whatever accounts you choose, here are some recommendations that you need to follow for your SharePoint 2016 service accounts.

First of all, the length of your Service Accounts Username should be less than 20 (including domain name). This is due to the SAM-Account-Name attribute (also known as the pre–Windows 2000 user logon name) which is limited to 20 characters in the AD Schema. For example, CORP\SP16Prod_SuperReader is 25 characters and would be too long.

My second recommendation is to use different service accounts for each environment. For example, your production might have a SP_Services, while your QA account would be SPQ_Services. This makes sure that nothing in a farm can affect the other one, and if you ever want to test for example changing the password of the managed account, or giving the password of the QA account to someone else, you will not compromise the security and stability of your production SharePoint farm.

The post SharePoint 2016 Service Accounts Recommendations appeared first on Absolute SharePoint Blog by Vlad Catrinescu.


by Vlad Catrinescu via Absolute SharePoint Blog by Vlad Catrinescu