252 lines
6.3 KiB
Markdown
252 lines
6.3 KiB
Markdown
|
Qsumgebung 10.2018
|
|||
|
|
|
|||
|
|
Donnerstag, 26. April 2018
|
|||
|
|
|
|||
|
|
09:19
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
ADFS Zertifikat :
|
|||
|
|
|
|||
|
|
ADFS Signing - fs.bkk-mobil-oil.de 19.07.2019
|
|||
|
|
|
|||
|
|
Server:
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
bkkspqapp001 10.96.73.73
|
|||
|
|
|
|||
|
|
bkkspqapp002 10.96.73.74
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
bkkspqweb001 10.96.73.75
|
|||
|
|
|
|||
|
|
bkkspqweb002 10.96.73.76
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
10.96.73.86 -89 Reserviert für WebAppl
|
|||
|
|
|
|||
|
|
LB- Einträge:
|
|||
|
|
|
|||
|
|
10.96.73.86 = portal-spq.bkk-mobiloil.de
|
|||
|
|
|
|||
|
|
10.96.73.86 = search-spq.bkk-mobiloil.de
|
|||
|
|
|
|||
|
|
10.96.73.86 = mysites-spq.bkk-mobiloil.de
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
Office Online Sever
|
|||
|
|
|
|||
|
|
bkksppoos001 10.96.73.84
|
|||
|
|
|
|||
|
|
bkksppoos002 10.96.73.85
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
PHA:
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Patchstand :** 16.0.4666.1000
|
|||
|
|
|
|||
|
|
28.09.2018 sts2016-kb4018293-fullfile-x64-glb
|
|||
|
|
|
|||
|
|
wssloc2016-kb4011687-fullfile-x64-glb
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
\<Passphrase\>BKKHamburgQS2018!\</Passphrase\>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
Gruppen :
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
{width="10.927083333333334in" height="2.4375in"}
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
Erfasster Bildschirmausschnitt: 17.09.2018 10:37
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
User :
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| SPQ_Admin | o5Sxfw+sK!7i | cfg-spqAdmin |
|
|||
|
|
|--------------------|---------------|--------------------|
|
|||
|
|
| SPQ_Farm | qE=2?W)zHG2v | svc-spqFarm |
|
|||
|
|
| SPQ_Searchuser | ri518H4i!N94 | svc-spqSearch |
|
|||
|
|
| SPQ_Searchcon | z1Sydw+sT!4f | svc-spqSearchcon |
|
|||
|
|
| SPQ_Service | R?G9+63MT31e | svc-spqService |
|
|||
|
|
| SPQ_Visiouser | pwsPk22!i218 | svc-spqVisioU |
|
|||
|
|
| SPQ_PerfPointuser | ajP234!F18D0 | svc-spqPerfPointU |
|
|||
|
|
| SPQ_Mysiteuser | yNsZn04+o219 | svc-spqMysiteU |
|
|||
|
|
| SPQ_WebAppuser | k13OzTTy?6oH | svc-spqWebAppU |
|
|||
|
|
| SPQ_Cachereaduser | d=Vi?yPV9+5n | svc-spqCacheRU |
|
|||
|
|
| SPQ_Cachesuperuser | 5:bBd!771EP: | svc-spqCacheSU |
|
|||
|
|
| SPQ_C2WTS | LkP851!F17b4 | svc-spqC2WTS |
|
|||
|
|
| SPQ_Profilsyncuser | 8jqaDX8i6;xB | svc-spqProfilsyncU |
|
|||
|
|
| SPQ_Exceluser | FhC2?N!ki!e6 | svc-spqExceluU |
|
|||
|
|
| SPQ_SPDocKit | Up64uO7b9eX | svc-spqSPDocKit |
|
|||
|
|
| TSK-SPQ01 | 4zdV3i!9j\*rJ | tsk-spq01 |
|
|||
|
|
| TSK-SPQ02 | P3Xr52O,ufFu | tsk-spq02 |
|
|||
|
|
| SPQ_KasperskyAV | 21,ufFuSydwX | svc-spqKasperskyAV |
|
|||
|
|
|
|||
|
|
SQLInstanz : SQLSharePointQ\\SQLSharePointQ
|
|||
|
|
|
|||
|
|
10.96.65.164
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
4 GB
|
|||
|
|
|
|||
|
|
BKKSQLNODE001 und BKKSQLNODE003
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
Nach Best Practice aufgesetzt. Dokumentation an SQL Team versendet.
|
|||
|
|
|
|||
|
|
Berechtigungen cfg-spqadmin auf den SP Servern erstellt:
|
|||
|
|
|
|||
|
|
- Remote Desktop Usern
|
|||
|
|
|
|||
|
|
- lokale Admin
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
cfg-spqadmin bkk-mobiloil.de/System/Microsoft SharePoint Products Lesen Schreiben erstellen löschen
|
|||
|
|
|
|||
|
|
svc-spqrofilsyncu Replikationssynchronisation auf Domainebene
|
|||
|
|
|
|||
|
|
SQL Berechtigungen
|
|||
|
|
|
|||
|
|
cfg-spqadmin der Gruppe SG_Adminsql hinzugefügt.
|
|||
|
|
|
|||
|
|
\+ Rolle secAdmin /dbCreator
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
DNS Einträge setzten:
|
|||
|
|
|
|||
|
|
portal-spq
|
|||
|
|
|
|||
|
|
search-spq
|
|||
|
|
|
|||
|
|
mysite-spq
|
|||
|
|
|
|||
|
|
SQL Aliase :
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
{width="3.5416666666666665in" height="1.6354166666666667in"}
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
{width="3.6145833333333335in" height="0.75in"}
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
Erfasster Bildschirmausschnitt: 27.09.2018 10:31
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
Script auf SP Servern ausgeführt um Prerequierements zu installieren
|
|||
|
|
|
|||
|
|
[\\\\bkkfiler01\\sharepoint\$\\Konfig-spq.ps1](file://bkkfiler01/sharepoint$/Konfig-spq.ps1) (automatisch soll folgendes gesetzt werden)
|
|||
|
|
|
|||
|
|
- IE Proxy gesetzt
|
|||
|
|
|
|||
|
|
- Windows Firewall ausgeschaltet
|
|||
|
|
|
|||
|
|
- UAC ausgeschaltet
|
|||
|
|
|
|||
|
|
- bkkfiler zur lok. Internetzone hinzugefügt
|
|||
|
|
|
|||
|
|
- ESC ausgeschaltet
|
|||
|
|
|
|||
|
|
- Remote Powershell aktiviert
|
|||
|
|
|
|||
|
|
- RDP aktiviert
|
|||
|
|
|
|||
|
|
- Netzwerkmonitor installiert
|
|||
|
|
|
|||
|
|
- cfg-spqadmin lokaler Administratorgruppe hinzugefügt (s.o.)
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
XML Datei für AutoSPInstaller konfiguriert!
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
> Noch zu erledigen :
|
|||
|
|
>
|
|||
|
|
>
|
|||
|
|
>
|
|||
|
|
> Proxy Einstellungen überprüfen
|
|||
|
|
>
|
|||
|
|
> Warmup Script Auf allen Servern installiert (Ist das Sinnig ?)
|
|||
|
|
>
|
|||
|
|
> Installation Language Pack
|
|||
|
|
>
|
|||
|
|
> Installation Updates
|
|||
|
|
>
|
|||
|
|
> Backup
|
|||
|
|
>
|
|||
|
|
> Restore
|
|||
|
|
>
|
|||
|
|
> Office Online Anbindung
|
|||
|
|
>
|
|||
|
|
> Fehlerbehebung
|
|||
|
|
>
|
|||
|
|
> ADFS
|
|||
|
|
>
|
|||
|
|
> ADFS Zertifikat auf allen Servern installieren
|
|||
|
|
>
|
|||
|
|
> Change stellen FS.bkk-mobil-oil.de muss in die Intranet Zone aufgenommen werden!!
|
|||
|
|
>
|
|||
|
|
> FS.bkk-mobil-oil.de ist in der Intranet Zone aufgenommen
|
|||
|
|
>
|
|||
|
|
> LDAPCP installieren
|
|||
|
|
>
|
|||
|
|
> Zone muss noch expandiert werden wegen der Search
|
|||
|
|
>
|
|||
|
|
> Kaspersky Portal AntiVirus (waiting for go)
|
|||
|
|
>
|
|||
|
|
> Kerberos einrichten
|
|||
|
|
>
|
|||
|
|
> HTTPS CA einrichten
|
|||
|
|
>
|
|||
|
|
> Load Balancer anbinden und Zert erneuern
|
|||
|
|
>
|
|||
|
|
> Berechtigungen über Gruppen eingerichtet
|
|||
|
|
>
|
|||
|
|
> Dokumentation
|
|||
|
|
>
|
|||
|
|
> Syskit SPDocKit (ohne Insights!)
|
|||
|
|
>
|
|||
|
|
> SysKit Insights neue Version
|
|||
|
|
|
|||
|
|
**AD Gruppen :**
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
SG-SPQ-Farm-Admin Mitglieder sind Farm Administratoren auf der Test Farm
|
|||
|
|
|
|||
|
|
SG-SPQWeb-Portal-Full Mitglieder sind auf der Webapplication Portal Full berechtigt
|
|||
|
|
|
|||
|
|
SG-SPQWeb-Portal-Read Mitglieder sind auf der Webapplication Portal Lesen berechtigt
|