A. Configuring User Profiles.
A. 1. Creating a User Profile Service Application
A. 1. 1. Start the Web Service Application Pool
- Log on to SP2010-WFE1 as CONTOSO\SP_Admin with its password.
- Click Start, then click Administrative Tools, and click Internet Information Services (IIS) Manager.
- Expand SP2010-WFE1.
- Click Application Pools.
- If Microsoft Sharepoint Web Services Root is not started, then right-click Sharepoint Web Services Root, and click Start/
- Close Internet Information Services (IIS) Manager.
- Open Sharepoint 2010 Central Administration
- In the Quick Launch, click Application Management.
- In the Service Applications section, click Manage service applications. The Manage Service Application pages opens.
- Click View, and then click User Profile Service Application. The Create New User Profile Service Application page opens.
- In the Name box, type User Profile Service Application.
- In the Application pool name box, type UserProfilePool.
- In the Configurable list, select CONTOSO\SP_Farm.
- Review, but skip the remaining sections.
- Click Create. The service application is created.
- Click OK.
- In the Quick Launch, click System Settings
- In the Servers section, click Manage services on server. The Services on Server page opens
- In the User Profile Service row, click Start.
- In the User Profile Synchronization Service row, click Start. The User Profile Synchronization Service page opens.
- In the Select the User Profile Application list, select User Profile Service Application.
- In the Password and Confirm Password boxes, type the SP_Admin password.
- Click OK.
- Observer the Status of the User Profile Synchronization Service. A time job is created that will configure user profile settings in the farm. When it has completed, the status of the service will change from Starting to Started.
- In the Quick Launch, click Monitoring
- In the Timer Jobs section, click Check job status
- In the Timer Links section of the Quick Launch, click Running jobs.
- Monitor the page.
- Press F5 to refresh
- Repeat this step until the ProfileSynchronizationSetupJob appears.
- Monitor the page. Press F5. Repeat this step until the ProfileSynchronizationsetupJob disappears.
- In the Timer Links section of the Quick Launch, click Job History.
- Confirm that the Status of ProfileSynchronizationsetupJob is Succeeded.
- In the Quick Launch, click System Settings
- In the Servers section click Manage services on server. The Services on Server page opens.
- Confirm that the Status of the user profile synchronization service is Started.
- Close Sharepoint 2010 Central Administration.
- Click Start, click Administrative Tools, and click Services.
- Confirm that the following services are started:
- Microsoft Forefront Identity Manager Service
- Forefront Identity Manager Synchronization ServiceIf a service is not started, press F5.
- Close the Services console.
- Open the folder C:\Program files\Microsoft Office Servers\14.\Synchronization Service\MaData.
- Confirm that the ILMMA folder exists. Confirm that a folder named MOSS-GUID exists with today's date. If the folders do not exist, wait until the timer job has completed fully, at which point the folders will appear.
- Close window that is showing the MaData folder.
- Click Start, right-click Command Prompt, and click Run as administrator.
- Click Yes.
- Type IISRESET, and then press ENTER.
- After the command has completed, close Administrator: Command Prompt.
- Open Microsoft Sharepoint 2010 Central Administration.
- In the Quick Launch, click Application Management.
- In the Service Applications section, click Manage service applications.
- Click User Profile Service Application. If an error is displayed, it is because the Web Services have not completed startu following the IISRESET operation. Press F5.
- Confirm that there are numbers on the right side of the page, which indicates that the service application is running.
- Close Sharepoint 2010 Central Administration.
A. 2. 1. Delegate Active Directory permissions to enable user profiles synchronization.
- Click Start, click Administrative Tools, hold the SHIFT key and right-click Active Directory Users and Computers, and click Run as different user. The Windows Security dialog box appears.
- Enter the user name, CONTOSO\Administrator, and the password, and click OK.
- In the console tree, expand contoso.com
- Right-click contoso.com, and click Delegate Control. The Delegation of Control Wizard opens.
- On the Welcome to the Delegation of Control Wizard page, click Next.
- On the Users or Groups page, click Add.
- Type CONTOSO\SP_Farm
- Click Ok.
- Click Next.
- On the Tasks to Delegate page, click Create a custom task to delegate.
- Click Next.
- On the Active Directory Object Type page, click Next.
- On the Permissions page, in the Permissions list, select the Replicating Directory Changes check box.
- Click Next.
- On the Completing the Delegation of Control Wizard page, click Finish
- Close Active Directory Users and Computers.
- Open the Sharepoint 2010 Central Administration
- In the Quick Launch, click Application Management.
- In the Service Applications section, click Manage Service Applications. The Manage Service Applications page opens.
- Click User Profile Service Application. The Manage Profile Service page opens.
- In the Synchronization section, click Configure Synchronization Connections. The Synchronization Connections page opens.
- Click Create New Connection. The Add new synchronization connection page opens.
- In the Connection Name box, type CONTOSO ACTIVE DIRECTORY.
- In the Forest Name box, type contoso.com
- In the Account Name box, type CONTOSO\SP_Farm.
- In the Password and Confirm password boxes, type its password.
- Click Populate Containers.
- In the Containers section, expand CONTOSO, and select the People, Sharepoint, and Users check boxes.
- Click OK. A new synchronization connection is created.
- In the Quick Launch, click Application Management.
- In the Service Applications section, click Manage service applications.
- Click User Profile Service Application.
- In the People section, click Manage User Properties. The Manage User Properties page opens.
- Click New Property.
- In the Name box, type City.
- In the Display Name box, type City.
- In the Policy Settings section, in the Default Privacy Setting list, select Everyone.
- Select the Replicable check box. A message box appears indicating that replicated data will not be deleted.
- Click Ok
- In the Display Settings section, select the Show in the profile properties section of the user's profile page check box.
- Select the Show on the Edit Details page check box.
- Select the Show updates to the property in newsfeed check box.
- In the Add New Mapping section, int the Source Data Connection box, select Contoso Active Directory.
- In the Attribute list, select L. (L) is the Lightweight Directory Access Protocol (LDAP) name for the locale, or city attribute.
- In the Direction list, select Import.
- Click Add
- Observe that the new attribute mapping appears in the Property Mapping for Synchronization section.
- Click OK.
- In the Quick Launch, click Application Management.
- In the Service Applications section, click Manage service applications.
- Click User Profile Service Application.
- In the Synchronization section, click Start Profile Synchronization
- Click Start Full Synchronization
- Click OK
- Wait one minute. The synchronization does not start immediately.
- Press F5 to refresh
- Observe the Profile Synchronization Status in the Profile Synchronization Settings section.
- Return to step 8 until the Profile Synchronization Status displays Idle..
- In the Profiles section, confirm that the Number of user profiles is 53 and confirm that Profile Synchronization Status displays Idle.
- In the People section, click Manage User Profiles. The Manage User Profiles page appears.
- In the Find profiles box, type SP_Admin.
- Click Find.
- Click CONTOSO\SP_Admin, and then click Edit My Profile.
- Browse to City, notice it has nothing in it.
- Click Cancel and Go Back.
- Click Start, click Administrative tools, hold the SHIFT key and right-click Active Directory Users and Computers, and then click Run as different user.. The Windows Security dialog box opens.
- Enter the user name, CONTOSO\Administrator, and the password.
- In the console tree, expand contoso.com
- Click Sharepoint
- Right-click Sharepoint Administrator, and then click Properties
- Click the Address tab.
- In the City box, type Aurora.
- Click OK.
- Close Active Directory Users and Computers.
- Switch to Central Administration
- In the Quick Launch, click Application Management.
- In the Service Application section, click Manage service applications. The Manage Service Applications page opens.
- Click User Profile Service Application.
- In the Synchronization section, click Start Profile Synchronization. The Start Profile Synchronization page opens.
- Click Start Incremental Synchronization.
- Click OK.
- Wait 30 seconds.
- Press F5
- Observe the Profile Synchronization Status in the Profile Synchronization Settings section.
- Return to step 9 until the Profile Synchronization Status displays Idle.
- In the People section, click Manage User Profiles.
- In the Find profiles box, type SP_Admin.
- Click Find.
- Click CONTOSO\SP_Admin, and click Edit My Profile
- Confirm that City is Aurora.
- Click Cancel and Go Back.
A. 3. 1. Create a new profile property
- In the Quick Launch, click Application Management.
- In the Service Applications section, click Manage Service Applications. The Manage Service Applications page opens.
- Click User Profile Service Application.
- In the People section, click Manage User Properties. The Manage User Properties page opens.
- Click new Property.
- In the Name box, type EmployeeID.
- In the Display Name box, type EmployeeID.
- In the Type list, select integer.
- In the Policy Settings section, in the Default Privacy Setting list, select Everyone.
- Select the Replicable check box. A message appears indicating that replicated data will not be deleted.
- Click Ok.
- Click the Allow users to edit values for this property radio button.
- In the Display Settings section, select the Show in the profile properties section of the user's profile page check box.
- Select the Show on the Edit Details page check box.
- Click Ok.
- Click Start, click All programs, then click Microsoft SQL Server 2008 R2, hold SHIFT and right-click SQL Server Management Studio, and then click Run as different user. The Windows Security dialog box opens.
- Enter the user name, CONTOSO\Administrator, the password, and then click OK.
- On the Connect to Server dialog box, click the Connect button.
- Expand Databases.
- Expand AventureWorks.
- Expand Security.
- Right-click Users, select New User.
- In the User name box, type CONTOSO\SP_admin.
- In the Login Name box, type CONTOSO\SP_admin.
- In the Database role membership list, select the db_owner check box.
- Click OK.
- Repeat steps 6-10 for CONTOSO\SP_Farm.
- Close Microsoft SQL Server Management Studio.
- Click Start, click All Programs, click Sharepoint, and click Microsoft Sharepoint Designer 2010.
- Click Open Site.
- Type http://intranet.contoso.com/sites/IT, and click Open. Wait for the site to open.
- When prompted for credentials, use Contoso\SP_Admin with the password. Wait for Sharepoint to retrieve external content types.
- On the ribbon, click External Content Type
- In the External Content Type Information section, next to Name, click New External content type.
- Type AdventureWorks.
- Click Click here to discover external data sources.
- Click Add Connection. The External Data Source Type Selection dialog box appears.
- In the Data Source Type list, select SQL Server.
- Click OK. The SQL Server Connection dialog box appears.
- In the Database Server box, type SP2010-WFE1
- In the Database Name box, type AdventureWorks.
- Expand Tables.
- Right-click Employee, and then click Create All Operations. The All Operations dialog box appears.
- Click Next.
- Click Finish.
- To save the external content type, press CTRL+S.
- Close Sharepoint Designer.
- Switch to Sharepoint 2010 Central Administration
- In the Quick Launch, click Application Management.
- In the Service Applications section, click Manage Service Applications. The Manage Service Applications page opens.
- Click Business Data Connectivity Service. The View External Content Types page appears.
- Click AdventureWorks.
- On the ribbon, click Set Object Permissions.
- Type All Authenticated Users.
- Click Add.
- In the Permissions for All Authenticated Users list, select each of the four check boxes.
- Click OK.
- In the Quick Launch, click Application Management.
- In the Service Applications section, click Manage Service Applications. The Manage Service Applications page opens.
- Click User Profile Service Application. The Manage Profile Service page opens.
- Click Configure Synchronization Connections. The Synchronization Connections page opens.
- Click Create New Connection. The Add new synchronization connection page opens.
- In the Connection Name box, type AdventureWorks.
- In the Type box, select Business Data Connectivity.
- Next to the Business Data Connectivity Entity box, click the Select External Content Type button. The External Content Type Picker dialog box opens.
- Click AdventureWorks.
- Click OK.
- Click Connect User Profile Store to Business Data Connectivity Entity as a 1:1 mapping.
- In the Return Items identified by this profile property list, select EmployeeID.
- Click OK.
- In the Quick Launch, click Application Management.
- In the Service Applications section, click Manage Service Applications. The Manage Service Applications page opens.
- Click User Profile Service Application.
- In the People section, click Manage User Properties. The Manage User Properties page opens.
- Click New Property.
- In the Name box, type Gender.
- In the Display Name box, type Gender.
- In the Policy Settings section, in the Policy Setting list, select Optional.
- In the Default Privacy Setting list, select Everyone.
- Select the Replicable check box. A message appears indicating that replicated data will not be deleted.
- Click OK.
- In the Display Settings section, select the Show in the profile properties section of the User's profile page check box.
- Select the Show on the Edit details page check box.
- In the Source Data Connection list, select AdventureWorks.
- In the Attribute list, select Gender.
- Click Add.
- Click OK.
- In the Quick Launch, click Application Management.
- In the Service Applications section, click Manage service Applications.
- Click User Profile Service Application.
- In the People section, click Manage User Profiles.
- In the Find profiles box, type SP_Admin.
- Click Find.
- Click CONTOSO\SP_Admin, and then click Edit My profile.
- In the EmployeeID box, type 1
- Confirm that Gender is blank.
- Click Save and Close.
- In the Quick Launch, click Central Adminsitration.
- In the Quick Launch, click Application Management.
- In the Service Applications section, click Manage Service Applications.
- Click User Profile Service Application.
- In the Synchronization section, click Start Profile Synchronization.
- Click Start Full Synchronization
- Click OK.
- Wait 30 seconds.
- Press F5
- Observer the Profile Synchronization Status in the Profile Synchronization Settings section.
- return to step 9 until the profile synchronization displays Idle.
- In the Quick Launch, click Application Management.
- In the Service Applications section, click Manage Service Applications.
- Click User Profile Service Application.
- In the People section, click Manage User Profiles.
- In the Find profiles box, type SP_Admin.
- Click Find.
- Click CONTOSO\SP_Admin, and click Edit My profile.
- Confirm that Gender is M.
- Click Save and Close.
Question: What group does the farm account have to be in in order for user profile synchronization to work?
Answer: The farm account must be a local administrator. This requirement is enforced by the set up of Forefront Identity Manager in the synchronization process.
B. Administering My Sites
B. 1. Configuring My Sites
B. 1. 1. Create My Site Web Application
- Open Sharepoint 2010 Central Administration
- In the Quick Launch, click Application Management.
- In the Web Application section, click Manage Web applications.
- On the ribbon, click New. The Create New Web Application page opens.
- In the IIS Web Site section, in the Port box, type 80.
- In the Host Header box, type mysites.contoso.com
- In the Application Pool section, in the Configurable list, select CONTOSO\SP_Farm.
- In the Database Name and Authentication section, in the Database Name box, type WSS_Content_Mysites.
- Click OK. The Application Created page opens.
- Click Create Site Collection
- In the Title box, type My Site Host.
- In the Template Selection section, click the Enterprise tab.
- Select My Site Host.
- In the Primary Site Collection Administrator section, in the User Name box, type CONTOSO\SP_Admin.
- Click OK. The Top-Level Site Successfully Created page opens.
- Click OK.
- In the Quick Launch, click Application Management.
- In the Site Collection section, click Create Site Collections. The Create Site Collection page opens.
- In the Title box, type Search Center.
- In the Web Site Address section, select sites, and then type Search.
- In the Template Selection section, click the Enterprise tab.
- Click Enterprise Search Center.
- In the Primary Site Collection Administrator section, in the User Name box, type CONTOSO\SP_Admin.
- Click OK.
- Open a new tab in Windows Internet Explorer.
- In the address bar, type http://mysites.contoso.com/sites/Search and then press ENTER.
- Click Site Actions, and then click Site Permissions.
- On the ribbon, click Grant Permissions.
- In the Users/Groups box, type Domain Users.
- In the Add users to a Sharepoint group list, select Search Center Visitors.
- Click OK.
- Switch to Sharepoint 2010 Central Administration.
- In the Quick Launch, click Application Management.
- In the Web Applications section, click Manage Web applications. The Web Applications Management page opens.
- Click Sharepoint - mysites.contoso.com80
- On the ribbon, click Managed Paths.
- In the Path box, type Personal
- Click Add Path
- Click OK. The managed path is added.
- Click Sharepoint - mysites.contoso.com80
- On the ribbon, click Self-Serice Site Creation
- Click On
- Click OK.
- In the Quick Launch, click Application Management.
- In the Service Applications section, click Manage service applicatons.
- Click User Profile Service Application.
- In the My Site Settings section, click setup My Sites.
- In the Preferred Search Center box, type http://mysites.contoso.com/sites/Search/Pages.
- In the My Site Host Location box, type http://mysites.contoso.com
- In the Location box, type personal
- Click OK
- Open a new tab in Internet Explorer
- In the address bar, type http://intranet.contoso.com
- Click Site Actions, and then click Site Permissions.
- On the ribbon click Grant Permissions.
- In the Users Groups box, type Domain Users.
- In the Add users to a Sharepoint group (recommended) list, select Contoso Intranet Visitors [Read].
- Click OK
- Close all windows and applications
B. 2. 1. Create your My Site
- Lon on to SP2010-WFE1 as CONTOSO\KyleH with password.
- Open Internet Explorer.
- In the address bar, type http://intranet.contoso.com, and press ENTER.
- Click the logon menu, Kyle H, and then click My profile. The profile page for Kyle H, CTO opens.
- In the top link bar, click My Content. A My Site is created. The 'Processing" screen may display for 1 to 2 minutes.
- In the top link bar, click My profile. The profile page opens.
- Review the tabs on the My Site.
- Click in the What's happening? box
- Type Loving Sharepoint! and then press ENTER. Your status is updated.
- Click Edit My profile.
- Start editing
- In the Birthday section, in the Show To list, select My Colleagues.
- Click Save and Close
- Click More Information.
B. 3. 1. Add colleagues
- Click the Colleagues tab. A listing of your colleagues is displayed. Anyone that is specified as a direct report in Active Directory is automatically listed as a colleague.
- Click Add Colleagues. The Add Colleagues page opens.
- In the Colleagues box, type CONTOSO\LolaJ, and then click the Check Names button.
- In the Add to My Team section, click Yes.
- Click OK. Lola Jacobson is added as your colleague.
- Click Skip.
- Click the Dan Jump logon menu, and click Sign in as different user.
- In the User name box, type CONTOSO\LolaJ.
- In the Password box, type its password.
- Click OK.
- In the top link bar, click My Profile.
- Click Edit My Profile.
- In the About Me box, type On the Contoso team for 15 years!
- In the Employee ID box, type 3.
- Click Save and Close.
- Click in the What's happening? status box.
- Type Working on our marketing strategy, and then press ENTER.
- In the address bar, type http://intranet.contoso.com/Sites/IT.
- Click Sign in as different user.
- In the User Name box, type CONTOSO\SP_Admin.
- In the Password box, type its password
- Click OK
- Click Site Actions, then click Site Permissions.
- On the ribbon, click Grant Permissions.
- In the Users/Groups box, type CONTOSO\DanJ
- In the Add Users to a Sharepoint group (recommended) list, select Information Technology Members [Contribute]
- Click OK
- Click Information Technology Members.
- On the Information Technology Members page, click Settings, and then click Make Default Group.
- Click OK.
- Open Sharepoint 2010 Central Administration.
- In the User Name box, type CONTOSO\SP_Admin.
- In the Password box, type its password.
- Click OK.
- In the Quick Launch, click Monitoring.
- Click review Job definitions.
- Click the next page button - the right-pointing arrow - at the bottom of the page.
- Click User Profile Service Application - Activity Feed Job.
- Click Enable
- Click User Profile Service Application - Activity Feed Job.
- Click Run Now.
- Click User Profile Service Application - Activity Feed Job.
- Press F5. Repeat this step until the Last run time indicates that the job has completed.
- Click OK.
- Repeat the above steps and run the following jobs:
- User Profile Service Application - User Profile to Sharepoint Full Synchronization
- User Profile Service Application - User Profile to Sharepoint Quick Synchronization.
- Open the Internet Explorer
- In the Address bar, type http://intranet.contoso.com/Sites/IT
- Click the Sign In control that displays Dan Jump, and click My Profile.
- In the My Organization Chart section, click Toni Poe.
- Review the contents of the In Common With You section.
- Click Organization Browser
- Click Dan Jump
- Click Dan Jump's name