Deployment Guide For Share Point 2013

User Manual:

Open the PDF directly: View PDF PDF.
Page Count: 1156

DownloadDeployment-guide-for-Share Point-2013
Open PDF In BrowserView PDF
Deployment guide for
Microsoft SharePoint 2013

Microsoft Corporation
Published: October 2014
Author: Microsoft Office System and Servers Team (itspdocs@microsoft.com)

Abstract
This book provides deployment instructions for SharePoint 2013. The audiences for this book include
application specialists, line-of-business application specialists, and IT administrators who are ready to
deploy SharePoint 2013.
The content in this book is a copy of selected content in the SharePoint 2013 technical library as of the
publication date. For the most current content, see the technical library on the web.

i

This document is provided “as-is.” Information and views expressed in this document, including URL
and other Internet website references, may change without notice. You bear the risk of using it.
Some examples depicted herein are provided for illustration only and are fictitious. No real association
or connection is intended or should be inferred.
This document does not provide you with any legal rights to any intellectual property in any Microsoft
product. You may copy and use this document for your internal, reference purposes.
© 2014 Microsoft Corporation. All rights reserved.
Microsoft, Access, Active Directory, Backstage, Bing, Excel, Groove, Hotmail, Hyper-V, InfoPath,
Internet Explorer, Office 365, OneNote, Outlook, PerformancePoint, PowerPoint, SharePoint,
Silverlight, OneDrive, Visio, Visio Studio, Windows, Windows Live, Windows Mobile,
Windows PowerShell, Windows Server, and Windows Vista are either registered trademarks or
trademarks of Microsoft Corporation in the United States and/or other countries.
The information contained in this document represents the current view of Microsoft Corporation on the
issues discussed as of the date of publication. Because Microsoft must respond to changing market
conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft
cannot guarantee the accuracy of any information presented after the date of publication.

ii

Contents
Getting help............................................................................................................................................ 27
Overview of SharePoint 2013 installation and configuration.......................................................... 28
Physical architecture ......................................................................................................................... 29
Installation and configuration ........................................................................................................... 30
Deployment stages............................................................................................................................ 33
Prepare for installation of SharePoint 2013 ...................................................................................... 37
TechNet articles about how to prepare for SharePoint 2013 installation and initial
configuration ................................................................................................................................... 37
Additional resources about SharePoint 2013 installation and initial configuration .................. 38
Initial deployment administrative and service accounts in SharePoint 2013 ............................... 39
Required accounts ............................................................................................................................ 39
Account permissions and security settings in SharePoint 2013 .................................................... 43
About account permissions and security settings ........................................................................ 43
SharePoint administrative accounts ............................................................................................... 43
SharePoint service application accounts ....................................................................................... 45
SharePoint database roles ............................................................................................................... 48
WSS_SHELL_ACCESS database role ...................................................................................... 49
Group permissions ............................................................................................................................ 50
Configure SQL Server security for SharePoint 2013 environments ............................................. 87
Before you begin................................................................................................................................ 87
Configuring a SQL Server instance to listen on a non-default port ........................................... 88
Blocking default SQL Server listening ports .................................................................................. 90
Configuring Windows Firewall to open manually assigned ports............................................... 90
Configuring SQL Server client aliases ........................................................................................... 91
Install prerequisites for SharePoint 2013 from a network share.................................................... 93
Installer switches and arguments.................................................................................................... 93
Download and combine the SharePoint 2013 prerequisites on a file share ............................ 94
Install the SharePoint 2013 prerequisites at the command prompt ........................................... 95
Install the SharePoint 2013 prerequisites by using an arguments file ...................................... 96
Install SharePoint 2013 ...................................................................................................................... 100
TechNet articles about how to install and configure SharePoint 2013.................................... 100
Additional resources about how to install and configure SharePoint 2013 ............................ 102
Install SharePoint 2013 on a single server with a built-in database ........................................... 103

iii

Overview ........................................................................................................................................... 103
Before you begin.............................................................................................................................. 104
Install SharePoint 2013 .................................................................................................................. 104
Post-installation steps ..................................................................................................................... 110
Install SharePoint 2013 on a single server with SQL Server ....................................................... 111
Overview ........................................................................................................................................... 111
Before you install SharePoint 2013 on a single server .............................................................. 111
Install SharePoint 2013 on a single server .................................................................................. 112
Post-installation steps ..................................................................................................................... 120
Install SharePoint 2013 across multiple servers for a three-tier farm ......................................... 122
Overview ........................................................................................................................................... 122
Using the Microsoft SharePoint Products Preparation Tool .................................................. 125
Database server ........................................................................................................................... 125
Public updates and hotfix packages.......................................................................................... 125
Prepare the farm servers................................................................................................................ 125
Install SharePoint 2013 on the farm servers ............................................................................... 126
Create and configure the farm ....................................................................................................... 127
Add web servers to the farm .......................................................................................................... 130
Post-installation steps ..................................................................................................................... 130
Install or uninstall language packs for SharePoint 2013 ............................................................... 132
About language IDs and language packs .................................................................................... 133
Downloading language packs........................................................................................................ 134
Installing language packs on the web and application servers ................................................ 134
Uninstalling language packs .......................................................................................................... 136
Add web or application servers to farms in SharePoint 2013 ...................................................... 137
Before you add a web or application server to a SharePoint farm .......................................... 137
Front-end web server role........................................................................................................... 140
Application server role ................................................................................................................. 140
Install prerequisite software ........................................................................................................... 141
Install the SharePoint software...................................................................................................... 142
Add the new SharePoint server to the farm ................................................................................ 143
Configure the new server ............................................................................................................... 146
Add a database server to an existing farm in SharePoint 2013 .................................................. 147
Before you begin.............................................................................................................................. 147
Prepare the new database server ................................................................................................. 148
Configure and use the new database server .............................................................................. 149
Remove a server from a farm in SharePoint 2013 ........................................................................ 152
iv

Removing a web server or application server from a SharePoint farm .................................. 153
Removing a database server from a SharePoint farm .............................................................. 154
Remove a database server, web server, or application server from a SharePoint farm by
using Central Administration ...................................................................................................... 154
Uninstall SharePoint 2013 ................................................................................................................. 157
Before you begin.............................................................................................................................. 157
Uninstall SharePoint 2013.............................................................................................................. 158
Install and configure a virtual environment for SharePoint 2013 ................................................. 160
Articles about SharePoint 2013 virtualization with Hyper-V...................................................... 160
Use best practice configurations for the SharePoint 2013 virtual machines and Hyper-V
environment ...................................................................................................................................... 162
Introduction and scope ................................................................................................................... 163
Review the general best practice guidance for virtualization.................................................... 163
Best practice guidance for virtualization ................................................................................... 165
Configure the Hyper-V host computer.......................................................................................... 166
Install and configure virtual networking ........................................................................................ 167
Virtual network types ................................................................................................................... 168
Create and configure the virtual machines .................................................................................. 171
Configure the memory for the virtual machines .......................................................................... 172
Configure the processors for the virtual machines ..................................................................... 173
Configure the controllers and hard disks for the virtual machines ........................................... 173
Configure services and general settings...................................................................................... 175
Configure SharePoint 2013 ............................................................................................................... 177
TechNet articles about how to configure settings for the server farm ..................................... 177
Additional resources about how to configure settings for the server farm .............................. 179
Service application and service management (SharePoint 2013) .............................................. 180
Configure authentication infrastructure in SharePoint 2013 ........................................................ 181
TechNet articles about how to configure authentication infrastructure ................................... 181
Configure forms-based authentication for a claims-based web application in SharePoint 2013
............................................................................................................................................................ 184
Before you begin.............................................................................................................................. 184
Process overview ............................................................................................................................ 185
Phase 1: Create a new web application that uses forms-based authentication with Central
Administration ............................................................................................................................... 185
Phase 2: Configure the Web.Config files for an LDAP membership provider ....................... 186
Create a new web application that uses forms-based authentication with Windows
PowerShell .................................................................................................................................... 191
v

Configure SAML-based claims authentication with AD FS in SharePoint 2013 ....................... 194
Before you begin.............................................................................................................................. 194
Process overview ............................................................................................................................ 195
Phase 1: Install and configure an AD FS server......................................................................... 195
Phase 2: Configure AD FS with the web application as a relying party .................................. 195
Phase 3: Configure SharePoint 2013 to trust AD FS as an identity provider ........................ 198
Phase 4: Configure web applications to use claims-based authentication and AD FS as the
trusted identity provider ............................................................................................................... 203
Configure server-to-server authentication in SharePoint 2013.................................................... 207
TechNet articles about how to configure server-to-server authentication .............................. 207
Configure server-to-server authentication between SharePoint 2013 farms............................. 209
Configure a SharePoint 2013 trust relationship with another farm .......................................... 210
Configure a SharePoint 2013 trust relationship with a farm that has no web applications .. 211
Configure an STS for HTTP ........................................................................................................... 213
Configure a synchronized STS name identifier .......................................................................... 214
Configure server-to-server authentication between SharePoint 2013 and Exchange Server
2013 ................................................................................................................................................... 216
Process overview ............................................................................................................................ 217
Configure server-to-server authentication between SharePoint 2013 and Lync Server 2013 220
Process overview ............................................................................................................................ 221
Configure app authentication in SharePoint Server 2013 ............................................................ 223
Process overview ............................................................................................................................ 223
Step 1. Configure the SharePoint Server 2013 app authentication trust ................................ 224
Configure SharePoint Server 2013 to trust the app ................................................................ 226
Step 2. Register the app with the Application Management service ....................................... 228
Step 3. Configure app permissions............................................................................................... 228
Configure client certificate authentication for SharePoint 2013 ................................................... 230
Configure client certificate authentication .................................................................................... 231
Replace the STS certificate for the on-premises environment .................................................... 233
Before you begin.............................................................................................................................. 233
Replace the STS certificate ........................................................................................................... 237
Next steps ......................................................................................................................................... 241
Implement SAML-based authentication in SharePoint Server 2013 .......................................... 242
Before you begin.............................................................................................................................. 242
Overview of SAML authentication ................................................................................................. 242
Concepts and terminology ............................................................................................................. 243
vi

SharePoint Server 2013 with Active Directory Federation Services 2.0 ................................. 243
Configure a SharePoint web application for SAML authentication .......................................... 243
Create a realm for employee access ........................................................................................ 244
Enable tracing for SharePoint Server 2013 claims .................................................................... 248
Trusted identity providers and user profile synchronization...................................................... 248
Using audiences with claims-based sites .................................................................................... 249
Migration of Windows claims authentication to SAML-based claims authentication in
SharePoint Server 2013 ................................................................................................................. 250
Identity migration ............................................................................................................................. 250
Migration of a web application.................................................................................................... 250
Implications of Claims Mode Authentication on service applications ......................................... 253
Business Connectivity Services and Secure Store Service ...................................................... 253
Migration ........................................................................................................................................ 254
Symptoms and Resolutions ........................................................................................................ 271
InfoPath Services ............................................................................................................................ 272
Managed Metadata Service ........................................................................................................... 272
Migration ........................................................................................................................................ 274
Troubleshooting ............................................................................................................................... 291
How to turn on and off the multiple metadata formats for JSON in SharePoint Server 2013 . 294
What is it? ......................................................................................................................................... 294
Turn on the multiple metadata formats feature ........................................................................... 294
Turn off the multiple metadata formats feature ........................................................................... 297
Configure availability and recovery solutions for SharePoint 2013 ............................................. 300
TechNet articles about installing and configuring high availability and disaster recovery
solutions......................................................................................................................................... 300
Configure SQL Server 2012 AlwaysOn Availability Groups for SharePoint 2013 .................... 301
Process overview ............................................................................................................................ 301
Before you begin.............................................................................................................................. 302
Detailed steps to configure an AlwaysOn Availability Group for SharePoint ......................... 305
Install SQL Server 2012 .............................................................................................................. 306
Enable AlwaysOn ......................................................................................................................... 307
About replicas and data synchronization.................................................................................. 309
Replica configuration requirements ........................................................................................... 309
Create and configure the availability group.............................................................................. 312
Use failover tests to validate the AlwaysOn installation ............................................................ 316
Monitor the AlwaysOn environment .............................................................................................. 316
Configure email integration for a SharePoint 2013 farm .............................................................. 318
vii

TechNet articles about email integration ..................................................................................... 318
Configure incoming email for a SharePoint 2013 farm ................................................................. 320
Before you begin.............................................................................................................................. 320
Install and configure the SMTP service ....................................................................................... 321
Configure incoming email in a basic scenario............................................................................. 324
Configure incoming email in an advanced scenario .................................................................. 324
Prepare your environment for incoming email in an advanced scenario ................................ 328
Configure email drop folder permissions for the application pool identity account for a web
application .................................................................................................................................. 334
Configure email drop folder permissions for the logon account for the SharePoint Timer
service ........................................................................................................................................ 335
Are attachments missing from email messages that are sent to a SharePoint document
library? ........................................................................................................................................... 336
Configure outgoing email for a SharePoint 2013 farm .................................................................. 338
Before you begin.............................................................................................................................. 339
Install and configure the SMTP service ....................................................................................... 339
Configure outgoing email for a farm ............................................................................................. 342
Configure outgoing email for a specific web application ........................................................... 343
Configure services and service applications in SharePoint 2013 ............................................... 345
TechNet articles about how to configure services for SharePoint 2013 ................................. 345
Additional resources about how to configure services for SharePoint 2013 .......................... 347
Configure the Secure Store Service in SharePoint 2013 ............................................................. 348
Video demonstration (configuration) ............................................................................................ 348
Configure Secure Store .................................................................................................................. 349
Work with encryption keys ............................................................................................................. 350
Store credentials in Secure Store ................................................................................................. 352
Enable the audit log ........................................................................................................................ 356
Video demonstration (target applications) ................................................................................... 356
Create and configure a Search service application in SharePoint Server 2013 ....................... 358
Before you begin.............................................................................................................................. 358
How to create and configure a SharePoint Search service application .................................. 358
Step 1: Create accounts that are required for a SharePoint Search service application ..... 359
Step 2: Create a SharePoint Search service application .......................................................... 360
Step 3: Configure the SharePoint Search service application.................................................. 362
Step 4: Configure the SharePoint Search service application topology ................................. 364
Create a Search Center site in SharePoint Server 2013 .............................................................. 365
Before you begin.............................................................................................................................. 365
viii

Deploy people search in SharePoint Server 2013......................................................................... 368
People search prerequisites .......................................................................................................... 369
Set up people search ...................................................................................................................... 369
Add data for people search ............................................................................................................ 374
Crawl the profile store ..................................................................................................................... 375
Configure trust for search between two SharePoint Server 2013 farms .................................... 377
Configure result sources for search in SharePoint Server 2013 ................................................. 382
Before you begin.............................................................................................................................. 382
Create a result source .................................................................................................................... 383
Levels and permissions for result sources ............................................................................... 383
 On the BASICS tab................................................................................................................... 386
On the SORTING tab .................................................................................................................. 386
On the TEST tab .......................................................................................................................... 387
Set a result source as default ........................................................................................................ 387
Customize search result types in SharePoint 2013 ....................................................................... 389
Turn on automated translation of documents in SharePoint Server 2013 ................................. 393
Before you begin.............................................................................................................................. 393
Supported file name extensions and maximum file sizes ......................................................... 394
Table: Supported file types and maximum file size limits for machine translation ............. 395
Step 1: Create a Machine Translation service application ........................................................ 395
Table: Database section properties .......................................................................................... 397
3.Table: Variables used in the New-SPTranslationServiceApplication cmdlet .................. 398
Step 2: Configure the Machine Translation Service ................................................................... 399
3.Table: Variables used in the Set-SPTranslationServiceApplication cmdlet .................... 402
Additional steps................................................................................................................................ 403
Supported browser accessibility features .................................................................................... 403
Configure Request Manager in SharePoint Server 2013 ............................................................. 405
Overview ........................................................................................................................................... 405
Scenarios .......................................................................................................................................... 406
Setup and Deployment ................................................................................................................... 406
Configuration .................................................................................................................................... 409
Windows PowerShell examples to enable routing and throttling .......................................... 410
Windows PowerShell examples routing target tasks .............................................................. 411
Request Routing .............................................................................................................................. 413
Request routing ............................................................................................................................ 414
Monitoring and maintenance ......................................................................................................... 416
Configure Business Connectivity Services solutions for SharePoint 2013 ................................ 418
ix

About Business Connectivity Services installation scenarios................................................... 418
Prerequisites .................................................................................................................................... 419
On-premises deployment ............................................................................................................... 419
Cloud-only deployment ................................................................................................................... 419
Hybrid deployment .......................................................................................................................... 419
Deploy a Business Connectivity Services on-premises solution in SharePoint 2013 .............. 420
Before you begin.............................................................................................................................. 420
What these procedures help you deploy ..................................................................................... 421
How to use these procedures and a roadmap of the procedures ............................................ 423
Prerequisites for deploying a Business Connectivity Services on-premises solution in
SharePoint 2013 .............................................................................................................................. 425
On-premises scenario prerequisites ............................................................................................. 425
Preparing the environment ............................................................................................................. 426
Create database logins for a Business Connectivity Services on-premises solution in
SharePoint 2013 .............................................................................................................................. 427
Start the Business Data Connectivity service for a Business Connectivity Services onpremises solution in SharePoint 2013.......................................................................................... 429
Create the Business Data Connectivity service application in SharePoint 2013 ...................... 431
Set permissions on the BCS Metadata Store for a Business Connectivity Services onpremises solution in SharePoint 2013.......................................................................................... 434
Configure the Secure Store Service for a Business Connectivity Services on-premises solution
in SharePoint 2013 .......................................................................................................................... 436
Parameters for configuring the Secure Store Service for a Microsoft Business Connectivity
Services on-premises configuration .......................................................................................... 436
Create an external content type for a Business Connectivity Services on-premises solution in
SharePoint 2013 .............................................................................................................................. 439
Create and configure an external content type with SharePoint Designer 2013 ................... 440
Configure permission on an external content type for a Business Connectivity Services onpremises solution in SharePoint 2013.......................................................................................... 443
Create an external list for a Business Connectivity Services on-premises solution in
SharePoint 2013 .............................................................................................................................. 445
Manage user permissions on an external list for a Business Connectivity Services onpremises solution in SharePoint 2013.......................................................................................... 447

x

Connect an external list to Outlook for a Business Connectivity Services on-premises solution
in SharePoint 2013 .......................................................................................................................... 449
Verify offline access and synchronization of external data in Outlook for a Business
Connectivity Services on-premises solution in SharePoint 2013............................................. 451
Deploy a Business Connectivity Services cloud-only solution in SharePoint 2013 .................. 452
Before you begin.............................................................................................................................. 452
What these procedures help you deploy ..................................................................................... 453
How to use these procedures ........................................................................................................ 455
Deploy a Business Connectivity Services hybrid solution in SharePoint 2013 ......................... 456
Before you begin.............................................................................................................................. 457
What these procedures help you deploy ..................................................................................... 457
How to use these procedures ........................................................................................................ 460
Roadmap of the procedures .......................................................................................................... 462
Prepare the on-premises environment for the Business Connectivity Services hybrid scenario
............................................................................................................................................................ 466
Create an on-premises Secure Store Service target application for the Business Connectivity
Services hybrid scenario ................................................................................................................ 468
Create and configure a Secure Store target application ........................................................... 469
Create and configure an OData service endpoint for the Business Connectivity Services
hybrid scenario................................................................................................................................. 471
Prepare the SharePoint Online environment for the Business Connectivity Services hybrid
scenario............................................................................................................................................. 473
Configure permissions on the SharePoint Online BDC Metadata Store for the Business
Connectivity Services hybrid scenario ......................................................................................... 475
Validate external access to reverse proxy published URL for the Business Connectivity
Services hybrid scenario ................................................................................................................ 477
Prerequisites .................................................................................................................................... 478
Create and configure the connection settings object for the Business Connectivity Services
hybrid scenario................................................................................................................................. 480
Prerequisites .................................................................................................................................... 481
Create and configure the external content type for the Business Connectivity Services hybrid
scenario............................................................................................................................................. 483
Prerequisites .................................................................................................................................... 484
Deploy the Business Connectivity Services hybrid scenario as an external list ....................... 486
xi

Procedures in this section .............................................................................................................. 487
Extract an external content type to a BDCM file for the Business Connectivity Services hybrid
Scenario ............................................................................................................................................ 488
Import the BDCM file into SharePoint Online BDC Metadata Store for the Business
Connectivity Services hybrid scenario ......................................................................................... 490
Import a BDCM file into the SharePoint Online BDC Metadata Store .................................... 491
Create an external list for the Business Connectivity Services hybrid scenario ....................... 493
Deploy the Business Connectivity Services hybrid scenario as an app for SharePoint .......... 495
Procedures in this section .............................................................................................................. 496
Deploy an app for SharePoint to SharePoint Online by using Visual Studio for the Business
Connectivity Services hybrid scenario ......................................................................................... 497
Validate the Business Connectivity Services hybrid scenario ..................................................... 499
Configure eDiscovery in SharePoint Server 2013 ......................................................................... 503
Configure communication between SharePoint Server 2013 and Exchange Server 2013 . 503
Configure Search to crawl all discoverable content ................................................................... 504
Grant permissions ........................................................................................................................... 504
Create an eDiscovery center ......................................................................................................... 505
Configure site mailboxes in SharePoint Server 2013.................................................................... 506
Before you begin.............................................................................................................................. 506
Configure SharePoint for Site Mailboxes in SharePoint Server 2013 ..................................... 508
Establish OAuth Trust and Service Permissions on SharePoint Server 2013 ....................... 508
Configure Exchange Server 2013 for Site Mailboxes ................................................................ 517
Troubleshooting ............................................................................................................................... 517
Table of error codes for reference when you run a configuration checklist script.............. 517
Configure Exchange task synchronization in SharePoint Server 2013 ...................................... 522
Before you begin.............................................................................................................................. 522
Downloading and Installing Exchange Server Web Services API on SharePoint Server .... 523
Establish an OAuth trust on the Exchange Server ..................................................................... 525
Additional Information for Self-SSL............................................................................................... 526
Configure social computing features in SharePoint Server 2013................................................ 527
TechNet articles about configuring social computing features ................................................. 527
Additional resources about configuring social computing features.......................................... 528
Configure Exchange Autodiscover with a My Site Host URL in SharePoint Server 2013....... 530
Configure Exchange Autodiscover with a My Site Host URL ................................................... 531
xii

Configure microblogging in SharePoint Server 2013 .................................................................... 537
TechNet articles about microblogging .......................................................................................... 537
Configure Following settings in SharePoint Server 2013 ............................................................. 538
Configure Following settings for My Sites ................................................................................... 538
Manage Feed Cache and Last Modified Time Cache repopulation in SharePoint Server 2013
............................................................................................................................................................ 540
Feed Cache settings on the User Profile Service application .................................................. 541
Table: Feed Cache parameters for a User Profile Service application................................ 541
Repopulate the Last Modified Time Cache by using timer jobs in Central Administration .. 542
Repopulate the Feed Cache and Last Modified Time Cache by using Windows PowerShell
cmdlets........................................................................................................................................... 543
Manage the Distributed Cache service in SharePoint Server 2013............................................ 545
Start and stop the Distributed Cache service .............................................................................. 546
Change the memory allocation of the Distributed Cache service ............................................ 547
Add or remove a server in a Distributed Cache cluster ............................................................. 549
Perform a graceful shutdown of the Distributed Cache service ............................................... 550
Change the service account .......................................................................................................... 551
Repair a cache host ........................................................................................................................ 551
Configure My Sites in SharePoint Server 2013.............................................................................. 553
Prerequisites .................................................................................................................................... 553
Create a My Site host site collection ............................................................................................ 555
Add a wildcard inclusion managed path to the web application ............................................... 556
Connect the web application to service applications ................................................................. 556
Enable self-service site creation for the web application .......................................................... 557
Configure My Site settings for the User Profile service application ......................................... 559
Enable the User Profile Service Application - Activity Feed Job .............................................. 561
Next steps ......................................................................................................................................... 562
Configure synchronization on all document libraries in SharePoint Server 2013 ..................... 565
Remove synchronization ................................................................................................................ 565
Add synchronization ........................................................................................................................ 566
Create and configure communities in SharePoint Server 2013................................................... 568
Before you begin.............................................................................................................................. 568
Create a Community Site ............................................................................................................... 569
Create a Community Portal............................................................................................................ 570
Additional steps................................................................................................................................ 571
Enable or disable personal and social features for users or groups in SharePoint Server 2013
............................................................................................................................................................ 572
xiii

Enable users or groups to use personal and social features.................................................... 572
Remove recommendation Web Parts from My Sites in SharePoint Server 2013 .................... 574
Remove the Suggested sites to follow Web Part from a user's My Site ................................. 575
Remove the Suggested documents to follow Web Part from a user's My Site...................... 576
Synchronize and authenticate users from your on-premises Active Directory to Yammer and
Office 365 ......................................................................................................................................... 579
How to configure directory synchronization................................................................................. 581
How to add a single sign-on .......................................................................................................... 581
Configure web content management solutions in SharePoint Server 2013 .............................. 583
Configure cross-site publishing in SharePoint Server 2013 ......................................................... 586
Before you begin.............................................................................................................................. 586
Create site collections for cross-site publishing .......................................................................... 587
Activate the Cross-Site Collection Publishing feature ............................................................... 587
Create content for authoring sites ................................................................................................. 588
Configure search for cross-site publishing .................................................................................. 593
Connect a publishing site to a catalog in SharePoint Server 2013 ............................................. 595
Before you begin.............................................................................................................................. 595
Connect a publishing site to a catalog ......................................................................................... 596
Disconnect a publishing site from a catalog ................................................................................ 599
Assign a category page and a catalog item page to a term in SharePoint Server 2013 ......... 601
Before you begin.............................................................................................................................. 601
Assign a category page and a catalog item page to a term ..................................................... 602
Configure Search Web Parts in SharePoint Server 2013 ............................................................ 604
Before you begin.............................................................................................................................. 605
Add a Content Search Web Part to a page ................................................................................. 605
Configure the query for a Content Search Web Part ................................................................. 606
 Quick Mode (default) ................................................................................................................ 607
Advanced Mode ........................................................................................................................... 609
Configure the display templates for the Content Search Web Part ......................................... 612
Add a Refinement Web Part to a page ........................................................................................ 612
Configure the Refinement Web Part............................................................................................. 613
Change the refiner display name .................................................................................................. 614
Display refiner counts in a Refinement Web Part....................................................................... 615
Configure the display templates for the Refinement Web Part ................................................ 616
Add a Taxonomy Refinement Panel Web Part to a page ......................................................... 616
Configure the Taxonomy Refinement Panel Web Part ............................................................. 617
xiv

Add a Recommended Items Web Part to a page ....................................................................... 617
Configure the Recommended Items Web Part ........................................................................... 618
Configure the display templates for the Recommended Items Web Part ............................... 621
Configure refiners and faceted navigation in SharePoint Server 2013 ...................................... 622
Before you begin.............................................................................................................................. 623
Map a crawled property to a refinable managed property in SharePoint site collection
administration ............................................................................................................................... 624
Enable automatically created managed properties as refiners in SharePoint Central
Administration ............................................................................................................................... 625
Configure refiners for faceted navigation ..................................................................................... 627
Add JavaScript to a page to display refiners in the correct format .......................................... 630
Reference tables.............................................................................................................................. 632
Configure result sources for web content management in SharePoint Server 2013 ............... 634
Before you begin.............................................................................................................................. 634
Create a result source .................................................................................................................... 635
Levels and permissions for result sources ............................................................................... 635
On the BASICS tab ...................................................................................................................... 637
On the SORTING tab .................................................................................................................. 638
On the TEST tab .......................................................................................................................... 638
Set a result source as default ........................................................................................................ 639
Create query rules for web content management in SharePoint Server 2013 .......................... 641
Before you begin.............................................................................................................................. 642
Creating query rules at different levels in a SharePoint farm ................................................... 642
Levels and permissions for query rules .................................................................................... 643
Create a query rule.......................................................................................................................... 644
Create and display a result block .................................................................................................. 649
Display promoted results in a Content Search Web Part .......................................................... 652
Change ranked search results ...................................................................................................... 652
Make a query rule inactive ............................................................................................................. 654
Rank query rules.............................................................................................................................. 655
Configure recommendations and usage event types in SharePoint Server 2013 .................... 657
Before you begin.............................................................................................................................. 658
Create a custom usage event type ............................................................................................... 658
Record a custom usage event ....................................................................................................... 660
Record a default usage event ........................................................................................................ 664
Change the level of importance of a usage event type ............................................................. 668
Change the Recent time period for a usage event type ............................................................ 670
Enable and disable the logging of usage events of anonymous users ................................... 672
xv

Get SiteId GUID and WebId GUID for a site ............................................................................... 675
Configure workflow in SharePoint Server 2013 ............................................................................. 677
Install and configure workflow for SharePoint Server 2013 ......................................................... 678
Overview ........................................................................................................................................... 678
Workflow Platform types available in SharePoint Server 2013............................................. 679
Before you begin.............................................................................................................................. 680
Install and configure SharePoint Server 2013 ............................................................................ 680
Install and configure Workflow Manager ...................................................................................... 681
Configure Workflow Manager to work with the SharePoint Server 2013 farm....................... 681
Validate the installation ................................................................................................................... 685
Troubleshooting ............................................................................................................................... 685
Install Workflow Manager certificates in SharePoint Server 2013 .............................................. 687
Configuration steps ......................................................................................................................... 687
Video series: Install and configure Workflow in SharePoint Server 2013 .................................. 690
Episode 1: Installation overview .................................................................................................... 690
Episode 2: Pre-install steps ........................................................................................................... 691
Episode 3: Install and configure Workflow Manager .................................................................. 691
Episode 4: Install and configure Workflow Manager Client ...................................................... 691
Episode 5: Configure the SharePoint farm with the workflow farm ......................................... 691
Episode 6: Test workflow ............................................................................................................... 692
Create a web application in SharePoint 2013 ................................................................................ 693
TechNet articles about how to create web applications ............................................................ 693
Create web applications that use classic mode authentication in SharePoint 2013 ................ 695
Before you begin.............................................................................................................................. 695
Create a web application that uses classic mode authentication with Windows PowerShell
........................................................................................................................................................ 696
Create claims-based web applications in SharePoint 2013 ......................................................... 699
Create a claims-based web application by using Central Administration ............................... 700
Create a claims-based web application by using Windows PowerShell ................................. 705
Create a classic-mode web application by using Windows PowerShell ................................. 706
Configure basic authentication for a claims-based web application in SharePoint 2013 ........ 708
Before you begin.............................................................................................................................. 708
Configure IIS to enable basic authentication............................................................................... 709
Configure digest authentication for a claims-based web application in SharePoint 2013 ....... 711
Before you begin.............................................................................................................................. 711
xvi

Configure IIS to enable digest authentication ............................................................................. 712
Edit general settings on a web application in SharePoint 2013 .................................................. 714
Edit a web application by using Central Administration............................................................. 714
Install and manage solutions for SharePoint 2013 ........................................................................ 718
TechNet articles about how to install and manage solutions.................................................... 718
Additional resources about how to install and manage solutions ............................................ 719
Install and manage apps for SharePoint 2013 ............................................................................... 721
Downloadable resources about apps for SharePoint ................................................................ 721
TechNet articles about apps for SharePoint ............................................................................... 721
Additional resources about apps for SharePoint ........................................................................ 723
Overview of apps for SharePoint 2013 ............................................................................................ 724
Where are apps for SharePoint hosted? ..................................................................................... 725
How are apps for SharePoint and SharePoint sites related? ................................................... 725
What is the URL for an app for SharePoint? ............................................................................... 725
Use and benefits of apps for SharePoint ..................................................................................... 726
Impacts of apps for SharePoint ..................................................................................................... 726
Plan for apps for SharePoint 2013 ................................................................................................... 728
Governance: determine the app for SharePoint policy for your organization ........................ 728
Plan app configuration settings ..................................................................................................... 731
Recommended logical architecture .............................................................................................. 734
Plan App Catalog............................................................................................................................. 735
Plan to monitor apps ....................................................................................................................... 736
Plan for app licenses....................................................................................................................... 737
Plan app permissions management in SharePoint 2013.............................................................. 738
Introduction ....................................................................................................................................... 739
App permission request scopes .................................................................................................... 739
App permission requests ................................................................................................................ 740
App authorization policies .............................................................................................................. 742
Configure an environment for apps for SharePoint (SharePoint 2013) ...................................... 743
Before you begin.............................................................................................................................. 745
Configure the domain names in DNS (all hosting options) ....................................................... 745
Create a new wildcard SSL certificate ......................................................................................... 749
Configure the Subscription Settings and App Management service applications ................. 749
Configure the app URLs to use ..................................................................................................... 756
Configure the Internet-facing endpoints feature (Optional)....................................................... 759
Manage the App Catalog in SharePoint 2013 ................................................................................ 761
xvii

Before you begin.............................................................................................................................. 761
Configure the App Catalog site for a web application ................................................................ 762
Configure app requests and SharePoint Store settings ............................................................ 763
Add apps to the App Catalog ......................................................................................................... 766
Remove apps from the App Catalog ............................................................................................ 767
Add apps for SharePoint to a SharePoint 2013 site ...................................................................... 768
Before you begin.............................................................................................................................. 768
Add apps for SharePoint to SharePoint sites.............................................................................. 769
Remove app for SharePoint instances from a SharePoint 2013 site ......................................... 773
Before you begin.............................................................................................................................. 773
Remove an app from a SharePoint site ....................................................................................... 774
Locate and remove app instances in all locations ...................................................................... 775
Monitor apps for SharePoint for SharePoint Server 2013 ............................................................ 779
Before you begin.............................................................................................................................. 780
Selecting apps to monitor in Central Administration .................................................................. 780
Monitoring app details in Central Administration ........................................................................ 781
Monitoring app details in a SharePoint site ................................................................................. 783
Monitor and manage app licenses in SharePoint Server 2013 ................................................... 785
Before you begin.............................................................................................................................. 785
Monitoring and managing app licenses ....................................................................................... 786
Enable apps in AAM or host-header environments for SharePoint 2013 .................................. 789
Prepare the environment ................................................................................................................ 790
Configure app domains .................................................................................................................. 790
Enable the feature ........................................................................................................................... 794
Enable the SharePoint Health Analyzer rule ............................................................................... 795
Special conditions and limitations ................................................................................................. 797
Upgrade to SharePoint 2013............................................................................................................. 798
Downloadable resources about upgrade ..................................................................................... 798
TechNet articles about upgrade .................................................................................................... 798
Additional resources about upgrade ............................................................................................. 799
Get started with upgrades to SharePoint 2013 .............................................................................. 801
Downloadable resources about upgrade to SharePoint 2013 .................................................. 801
TechNet articles about understanding upgrade .......................................................................... 801
Additional resources about upgrade to SharePoint 2013.......................................................... 803
What's new in SharePoint 2013 upgrade ........................................................................................ 804
In-place upgrade of the farm is not supported ............................................................................ 804
xviii

Database-attach upgrade is available for some service application databases .................... 805
Deferred site collection upgrade ................................................................................................... 805
Site collection health checker ........................................................................................................ 806
Upgrade evaluation site collections .............................................................................................. 806
Notifications for life-cycle events ................................................................................................... 806
Throttles for site collection upgrade.............................................................................................. 806
True “SharePoint 2010” instead of visual upgrade..................................................................... 807
Log files now in ULS format ........................................................................................................... 807
Overview of the upgrade process to SharePoint 2013 ................................................................. 808
Create the SharePoint 2013 farm ................................................................................................. 809
Copy the SharePoint 2010 Products databases......................................................................... 809
Upgrade SharePoint 2010 Products databases and service applications.............................. 810
Upgrade SharePoint 2010 Products site collections .................................................................. 813
Upgrade overview videos for SharePoint 2013 .............................................................................. 817
Overview: SharePoint 2013 upgrade process ............................................................................ 817
Phase 1: Create the SharePoint 2013 farm ................................................................................ 817
Phase 2: Copy the databases to the new farm ........................................................................... 818
Phase 3: Upgrade the service applications ................................................................................. 818
Phase 4: Upgrade content databases .......................................................................................... 819
Phase 5: Upgrade site collections................................................................................................. 820
Services upgrade overview for SharePoint Server 2013 .............................................................. 821
Database attach upgrade with services ....................................................................................... 821
Considerations for specific services ............................................................................................. 823
Upgrade farms that share services (parent and child farms) to SharePoint 2013 .................... 825
Process for upgrading farms that share services ....................................................................... 825
Best practices for upgrading to SharePoint 2013 .......................................................................... 833
Best practices for testing upgrade ................................................................................................ 833
Best practices for upgrading to SharePoint 2013 ....................................................................... 834
Review supported editions and products for upgrading to SharePoint 2013 ............................ 837
Supported topologies ...................................................................................................................... 837
Supported editions for upgrade ..................................................................................................... 838
Supported cross-product upgrades .............................................................................................. 839
Plan for upgrade to SharePoint 2013 .............................................................................................. 841
TechNet articles about how to plan for upgrade ......................................................................... 841
Additional resources about how to plan for upgrade to SharePoint 2013 .............................. 842
Determine strategy for upgrade to SharePoint 2013 ..................................................................... 843
xix

How to minimize downtime during upgrade ................................................................................ 843
Special cases ................................................................................................................................... 844
Create a plan for current customizations during upgrade to SharePoint 2013 ......................... 846
Identify customizations in your environment ............................................................................... 846
Evaluate the customizations .......................................................................................................... 846
Considerations for specific customizations ................................................................................. 848
Ensure that future customizations follow best practices............................................................ 854
Plan for site collection upgrades in SharePoint 2013.................................................................... 855
Determine the site collections that farm administrators should upgrade ................................ 855
Plan settings for upgrade notifications, self-service upgrade, and site collection creation .. 856
Properties that control site collection upgrade and site creation .......................................... 857
Properties that control upgrade notifications ........................................................................... 858
Plan for upgrade evaluation sites.................................................................................................. 858
Timer jobs for upgrade evaluation site collections .................................................................. 859
Plan site collection upgrade throttling and queues..................................................................... 860
Throttle levels for site collection upgrade ................................................................................. 860
About site collection modes ........................................................................................................... 863
Train site collection administrators ............................................................................................... 863
Plan for performance during upgrade to SharePoint 2013........................................................... 865
About upgrade performance for SharePoint 2013 ..................................................................... 865
Estimate the space that you must have for the upgrade ........................................................... 866
Estimate how long the upgrade will take ..................................................................................... 867
Environment performance after upgrade ..................................................................................... 872
Create a communication plan for the upgrade to SharePoint 2013 ............................................ 873
Who is a member of the upgrade team? ..................................................................................... 873
When and what to communicate to the upgrade team .............................................................. 875
When and what to communicate to site users ............................................................................ 876
Clean up an environment before an upgrade to SharePoint 2013.............................................. 877
Items to clean up ............................................................................................................................. 877
How to make structural changes ................................................................................................... 882
Test and troubleshoot an upgrade to SharePoint 2013 ................................................................ 884
Downloadable resources about how to test and troubleshoot upgrade .................................. 884
TechNet articles about how to test and troubleshoot upgrade ................................................. 885
Additional resources about how to test and troubleshoot upgrade.......................................... 886
Use a trial upgrade to SharePoint 2013 to find potential issues.................................................. 887
Set up a test environment .............................................................................................................. 888
xx

Identify and install customizations ................................................................................................ 890
Copy real data to the test environment and upgrade databases ............................................. 892
Review results after you upgrade databases .............................................................................. 893
Upgrade site collections and My Sites ......................................................................................... 894
Review results after you upgrade site collections ...................................................................... 894
Adjust your plans and test again ................................................................................................... 894
Troubleshoot database upgrade issues in SharePoint 2013 ....................................................... 896
General principles to identify issues ............................................................................................. 896
Common issues ............................................................................................................................... 897
Troubleshoot site collection upgrade issues in SharePoint 2013................................................ 903
Check upgrade status and log files............................................................................................... 903
Common issues ............................................................................................................................... 904
Branding issues that may occur when upgrading to SharePoint 2013 ....................................... 908
Custom CSS..................................................................................................................................... 909
Custom theme .................................................................................................................................. 910
Copy and change a master page that ships with SharePoint 2013 ......................................... 911
Custom master page in a publishing site ..................................................................................... 911
Custom content placeholders on a custom master page .......................................................... 912
Restart a database-attach upgrade or a site collection upgrade to SharePoint 2013 ............. 914
Restart upgrade for a database by using Windows PowerShell .............................................. 914
Restart upgrade for a site collection ............................................................................................. 915
Upgrade databases from SharePoint 2010 to SharePoint 2013 ................................................. 918
Downloadable resources about upgrading databases .............................................................. 918
TechNet articles about upgrading databases ............................................................................. 918
Additional resources about upgrade ............................................................................................. 920
Checklist for database-attach upgrade (SharePoint 2013) .......................................................... 921
Prepare for upgrade ........................................................................................................................ 921
Pre-upgrade steps ....................................................................................................................... 922
Complete the database attach upgrade ....................................................................................... 923
Prepare the new environment .................................................................................................... 923
Back up and restore databases ................................................................................................. 926
Upgrade service application databases.................................................................................... 929
Create web applications .............................................................................................................. 933
Attach and upgrade content databases .................................................................................... 934
Complete post-upgrade steps ....................................................................................................... 935
Post upgrade steps for database attach upgrade ................................................................... 936

xxi

Create the SharePoint 2013 farm for a database attach upgrade .............................................. 939
Before you begin.............................................................................................................................. 941
Collect information and settings .................................................................................................... 941
Record the passphrase for the Secure Store service application ............................................ 942
Export the encryption key for the User Profile service application .......................................... 943
Install SharePoint 2013 in a new environment ........................................................................... 944
Configure service applications ...................................................................................................... 944
Configure farm settings .................................................................................................................. 946
Copy databases to the new farm for upgrade to SharePoint 2013 ............................................. 948
Before you begin.............................................................................................................................. 949
Set the earlier version databases to be read-only ...................................................................... 950
Back up the SharePoint 2010 Products databases by using SQL Server tools .................... 951
Copy the backup files to the SharePoint 2013 environment..................................................... 953
Restore a backup copy of the database ...................................................................................... 953
Set the databases to read-write .................................................................................................... 954
Upgrade service applications to SharePoint 2013......................................................................... 956
Before you begin.............................................................................................................................. 957
About upgrading the service application databases .................................................................. 959
Start the service instances ............................................................................................................. 960
Upgrade the Secure Store service application ........................................................................... 962
Upgrade the Business Data Connectivity service application .................................................. 965
Upgrade the Managed Metadata service application ................................................................ 966
Upgrade the User Profile service application .............................................................................. 969
Upgrade the PerformancePoint Services service application .................................................. 973
Upgrade the Search service application ...................................................................................... 975
Verify that all of the new proxies are in the default proxy group .............................................. 979
Upgrade content databases to SharePoint 2013 ........................................................................... 982
Before you begin.............................................................................................................................. 983
Create web applications ................................................................................................................. 984
Reapply customizations.................................................................................................................. 985
Verify custom components ............................................................................................................. 986
Attach a content database to a web application and upgrade the database ......................... 988
Verification: Verify upgrade for the first database ...................................................................... 990
Attach the remaining databases.................................................................................................... 992
Verification: Verify upgrade for additional databases ................................................................ 993
Next steps ......................................................................................................................................... 993
Verify database upgrades in SharePoint 2013............................................................................... 995
Verify upgrade status for databases ............................................................................................. 995
xxii

Validate the upgraded environment.............................................................................................. 996
Migrate from classic-mode to claims-based authentication in SharePoint 2013 ...................... 998
Convert SharePoint 2010 Products classic-mode web applications to claims-based
authentication in SharePoint 2010 Products and then upgrade to SharePoint 2013 ........ 998
Convert SharePoint 2010 Products classic-mode web applications to SharePoint 2013
claims-based web applications ................................................................................................ 1001
Convert SharePoint 2013 classic-mode web applications to claims-based web applications
...................................................................................................................................................... 1003
Migrate SharePoint 2010 Products classic-mode web applications to SharePoint 2013
classic-mode web applications ................................................................................................ 1005
Upgrade site collections to SharePoint 2013 ............................................................................... 1007
Downloadable resources how to upgrade site collections ...................................................... 1007
TechNet articles about how to upgrade site collections .......................................................... 1007
Additional resources about how to upgrade to SharePoint 2013 ........................................... 1008
Run site collection health checks in SharePoint 2013 ................................................................ 1009
Site collection health check rules ............................................................................................ 1010
Before you begin............................................................................................................................ 1011
Run the site collection pre-upgrade health checks by using Site Settings ........................... 1012
Run the site collection pre-upgrade health checks by using Windows PowerShell ............ 1012
Additional steps.............................................................................................................................. 1014
Upgrade a site collection to SharePoint 2013 .............................................................................. 1015
Create an upgrade evaluation site (Optional) ........................................................................... 1017
Upgrade a site collection .............................................................................................................. 1018
Verification ...................................................................................................................................... 1019
Additional steps.............................................................................................................................. 1020
Review site collections upgraded to SharePoint 2013 ................................................................ 1021
Checklists for reviewing upgraded sites..................................................................................... 1022
Manage site collection upgrades to SharePoint 2013................................................................. 1028
Before you begin to upgrade site collections to SharePoint 2013 ......................................... 1028
Control upgrade notifications and self-service upgrade .......................................................... 1029
Control the compatibility range for site creation modes .......................................................... 1031
Control the queue for upgrades of sites to SharePoint 2013.................................................. 1035
Control site throttle settings for upgrade to SharePoint 2013................................................. 1037
Create upgrade evaluation site collections by using Windows PowerShell ......................... 1041
Upgrade site collections by using Windows PowerShell ......................................................... 1042
View upgrade status by using Windows PowerShell ............................................................... 1044
Upgrade My Sites to SharePoint Server 2013 ............................................................................. 1048
xxiii

Upgrading My Sites terms and concepts ................................................................................... 1048
Planning considerations for upgrading My Sites ...................................................................... 1049
Procedure to upgrade My Sites ................................................................................................... 1049
Upgrading the My Site Host ......................................................................................................... 1051
Upgrading the personal site collection ....................................................................................... 1051
Alternative procedure for upgrading My Sites ........................................................................... 1052
Alternative procedure for upgrading the personal site collection ........................................... 1052
Troubleshooting a My Site upgrade............................................................................................ 1053
Advanced upgrade scenarios for SharePoint 2013 ..................................................................... 1055
TechNet articles about how to upgrade in advanced scenarios ............................................ 1055
Additional resources about upgrade ........................................................................................... 1056
Upgrade from Office SharePoint Server 2007 or Windows SharePoint Services 3.0 to
SharePoint Server 2013 or SharePoint Foundation 2013....................................................... 1057
Process overview .......................................................................................................................... 1057
Before you begin............................................................................................................................ 1061
Prepare to upgrade ....................................................................................................................... 1062
Prepare your farms........................................................................................................................ 1064
Perform the first upgrade.............................................................................................................. 1065
Verify the first upgrade.................................................................................................................. 1066
Perform the second upgrade ....................................................................................................... 1066
Verify the second upgrade ........................................................................................................... 1067
Upgrade site collections ............................................................................................................... 1067
Search-first migration from FAST Search Server for SharePoint 2010 to SharePoint Server
2013 ................................................................................................................................................. 1068
Introduction to search-first migration (SharePoint Server 2013) ............................................ 1068
Supported migration path ............................................................................................................. 1069
High-level search-first migration steps ....................................................................................... 1069
Summary of search-first migrated features ............................................................................... 1071
Features with limitations ............................................................................................................... 1072
How to upgrade an environment that uses content type syndication (SharePoint Server 2013)
.......................................................................................................................................................... 1075
Initial state....................................................................................................................................... 1075
Back up the data and create a duplicate content type hub in the SharePoint 2010
environment ................................................................................................................................ 1077
Restore databases and upgrade the Managed Metadata service application and site
collections to SharePoint Server 2013.................................................................................... 1080
Create additional Managed Metadata service applications and republish the content types
...................................................................................................................................................... 1083
Configure connections (proxies) ................................................................................................. 1086
xxiv

Final state ....................................................................................................................................... 1089
Recommendations for how to manage content type syndication across the 2010 and 2013
farms ............................................................................................................................................ 1091
Deploy custom features to upgraded site collections in SharePoint Server 2013 .................. 1093
Things you need to know ............................................................................................................. 1094
Legacy custom features in a SharePoint Server 2013 farm ................................................ 1099
Supported scenarios ..................................................................................................................... 1099
Feature masking requirements ................................................................................................ 1106
Uninstalling a solution package ............................................................................................... 1109
Other Considerations .................................................................................................................... 1111
Deploy software updates for SharePoint 2013............................................................................. 1112
TechNet articles about software updates for SharePoint 2013 .............................................. 1112
Additional resources about software updates for SharePoint 2013 ...................................... 1113
Software updates overview for SharePoint 2013......................................................................... 1114
Before you begin............................................................................................................................ 1114
Terminology .................................................................................................................................... 1114
Features .......................................................................................................................................... 1116
Intended audience and scope ..................................................................................................... 1117
Software update process.............................................................................................................. 1117
Software update strategy ............................................................................................................. 1118
Software update deployment cycle ............................................................................................. 1118
Requirements and prerequisites .............................................................................................. 1119
Update strategy .......................................................................................................................... 1119
Downtime reduction ................................................................................................................... 1120
Common issues .......................................................................................................................... 1120
Document the environment ...................................................................................................... 1120
Manage customizations ............................................................................................................ 1120
Plan the update strategy ........................................................................................................... 1121
Make farm items ready for updates ......................................................................................... 1122
Build a test farm ......................................................................................................................... 1122
Evaluate techniques .................................................................................................................. 1122
Build or update farms ................................................................................................................ 1123
Deploy customizations .............................................................................................................. 1123
Reduce downtime ...................................................................................................................... 1123
Monitor progress ........................................................................................................................ 1123
Logged event failures ................................................................................................................ 1125
User interface or experience issues ........................................................................................ 1125
Data issues ................................................................................................................................. 1126

xxv

Prepare to deploy software updates for SharePoint 2013.......................................................... 1127
Verify account permissions and security settings..................................................................... 1127
Determine an update approach ................................................................................................... 1127
Back up the environment.............................................................................................................. 1129
Document the environment .......................................................................................................... 1130
Determine whether related items need to be updated............................................................. 1131
Obtain the software update and prepare the installation source (optional) .......................... 1131
Install a software update (SharePoint 2013) ................................................................................ 1133
Before you begin............................................................................................................................ 1133
Determine the update strategy .................................................................................................... 1134
Monitor installation progress ........................................................................................................ 1135
Initial state....................................................................................................................................... 1135
Use the in-place method without backward compatibility........................................................ 1137
Use the in-place method with backward compatibility ............................................................. 1140
Use the database-attach method for high availability of existing content ............................. 1146
Install a software update on servers that host Search components ...................................... 1150
Update Workflow in SharePoint Server 2013 ............................................................................... 1155
Run cmdlets after software updates are installed .................................................................... 1155
Troubleshooting steps for workflow updates ............................................................................. 1156

xxvi

Getting help
Topic Last Modified: 2012-06-27

Every effort has been made to ensure the accuracy of this book. This content is also available online in
the Office System TechNet Library, so if you run into problems you can check for updates at:
http://technet.microsoft.com/office

If you do not find your answer in our online content, you can send an email message to the Microsoft
Office System and Servers content team at:
itspdocs@microsoft.com

If your question is about Microsoft Office products, and not about the content of this book, please
search the Microsoft Help and Support Center or the Microsoft Knowledge Base at:
http://support.microsoft.com

27

Overview of SharePoint 2013 installation
and configuration
Applies to: SharePoint Server 2013, SharePoint Foundation 2013
Topic Last Modified: 2014-07-09
Summary: Learn about how to install and configure SharePoint Server 2013 or SharePoint Foundation

2013 in a farm.
Although SharePoint products farms vary in complexity and size, a combination of careful planning
and a phased deployment that includes ongoing testing and evaluation significantly reduces the risk of
unexpected outcomes. This article provides an overview for all types of SharePoint 2013 farm
deployment.
For a visual representation of the information in this article, see the SharePoint 2013 Products
Deployment model in the Technical diagrams for SharePoint 2013 topic. Related technical diagrams
include "Topologies for SharePoint 2013 and Services in SharePoint Server 2013".
In this article:


Concepts



Physical architecture



Installation and configuration



Deployment stages

Concepts
The logical result of SharePoint 2013's flexibility and richness can be a high degree of complexity
around installing and configuring SharePoint 2013 correctly. A fundamental understanding of the
following key structural elements in a SharePoint 2013 environment is required in order to correctly
deploy and support SharePoint 2013:


Server farm: The top-level element of a logical architecture design for SharePoint 2013.



Web application: An IIS Web site that is created and used by SharePoint 2013.



Content database: Provides storage Web application content. You can separate content into
multiple content databases at the site collection level.

28



Site collection: A set of Web sites that have the same owner and share administration settings.



Site: One or more related Web pages and other items (such as lists, libraries, and documents) that
are hosted inside a site collection.

For more information about these and other architectural components, see Plan logical architectures
for SharePoint 2013.
In addition to understanding the elements of a SharePoint 2013 environment and how they have to be
configured for your solution, you must consider the following additional factors: physical architecture,
installation and configuration, and the various stages of deployment.

Physical architecture
The physical architecture, which consists of one or more servers and the network infrastructure,
enables you to implement the logical architecture for a SharePoint 2013 solution. The physical
architecture is typically described in two ways: by its size and by its topology. Size, which can be
measured in several ways, such as the number of users or the number of documents, is used to
categorize a farm as small, medium, or large. Topology uses the idea of tiers or server groups to define
a logical arrangement of farm servers.

Size
Size uses the number of users and number of content items as a fundamental measure to indicate
whether a server farm is small, medium, and large, as follows:


A small server farm typically consists of at least two Web servers and a database server. One of
the Web servers hosts the Central Administration site and the other handles additional farmrelated tasks, such as serving content to users.
The small farm can be scaled out to three tiers using a dedicated application server in response to
the number of users, the number of content items, and the number of services that are required.



A medium server farm typically consists of two or more Web servers, two application servers, and
more than one database servers. We recommend that you start with the preceding configuration
and then scale out to accommodate the workload placed on the servers.
In scenarios where services are known to use a disproportionate amount of resources, you can
scale out the application tier. Performance data will indicate which services you should consider
off-loading to a dedicated server.



A large server farm can be the logical result of scaling out a medium farm to meet capacity and
performance requirements or by design before a SharePoint 2013 solution is implemented. A

29

three-tier topology environment typically uses dedicated servers on all the tiers. Additionally,
these servers are often grouped according to their role in the farm. For example, all client-related
services can be grouped onto one or two servers and then scaled out by adding servers to this
group as needed in response to user demand for these services.
Note:
The recommendation for scaling out a farm is to group services or databases with similar
performance characteristics onto dedicated servers and then scale out the servers as a
group. In large environments, the specific groups that evolve for a farm depend on the
specific demands for each service in a farm.
For specific numbers related to small, medium, and large farms, see Plan for performance and
capacity management in SharePoint Server 2013.

Topology
Topology uses tiers as a model for logically arranging farm servers according to the components that
they host or their roles in a server farm. A SharePoint 2013 farm is deployed on one, two, or three
tiers, as follows:


In a single-tier deployment, SharePoint 2013 and the database server are installed on one
computer.



In a two-tier deployment, SharePoint 2013 components and the database are installed on
separate servers. This kind of deployment maps to what is called a small farm. The front-end Web
servers are on the first tier and the database server is located on the second tier. In the computer
industry, the first tier is known as the Web tier. The database server is known as the database tier
or database back-end.



In a three-tier deployment, the front-end Web servers are on the first tier, the application servers
are on the second tier, which is known as the application tier, and the database server is located
on the third tier. A three-tier deployment is used for medium and large farms.

Installation and configuration
After you finish planning your solution you can create a SharePoint 2013 farm to host the solution.
The first step is to install SharePoint 2013 and create the farm that is required for the solution. The
process of preparing your environment consists of the following phases:
1. Prepare the servers
2. Create the farm

30

3. Configure settings, services, solutions, and sites
Note:
The farm that you create and deploy will undergo significant changes in size, topology, and
complexity as you move through the different deployment stages illustrated in the SharePoint
2013 Products Deployment model. This is typical and the expected result of a phased
deployment. This is why we recommend that you follow all of the stages described in the
"Deployment stages" section of this article.

Prepare the servers
In this phase, you get your servers ready to host the product. This includes the supporting servers and
the servers that will have SharePoint 2013 installed. The following servers must be configured to
support and host a farm:






Database server: The required version of SQL Server, including service packs and cumulative
updates must be installed on the database server. The installation must include any additional
features, such as SQL Analysis Services, and the appropriate SharePoint 2013 logins have to be
added and configured. The database server must be hardened and, if it is required, databases
must be created by the DBA. For more information, see:


Hardware and software requirements for SharePoint 2013



Configure SQL Server security for SharePoint 2013 environments

Application servers and front-end Web servers: The farm servers that will have SharePoint 2013
installed must be prepared as follows: verify that they meet the hardware requirements, have the
operating system hardened, have the required networking and security protocols configured, have
the SharePoint 2013 software prerequisites installed and hardened, and have the required
authentication configured. For more information, see:


System requirements for SharePoint 2013



"Installing software prerequisites" in Hardware and software requirements for SharePoint
2013



Plan security hardening for SharePoint 2013



Plan authentication in SharePoint 2013

Domain controller: The required farm accounts have to be configured for the domain and
directory synchronization must be configured.

31

Important:
SharePoint 2013 does not support installation on to a domain controller in a production
environment. A single label domain (SLD) names or single label forests is also not
supported. Because the use of SLD names is not a recommended practice, SharePoint
2013 is not tested in this scenario. Therefore, there may be incompatibility issues when
SharePoint 2013 is implemented in a single label domain environment. For more
information, see Information about configuring Windows for domains with single-label DNS
names and the DNS Namespace Planning Solution Center.
For information about required accounts, see:


Initial deployment administrative and service accounts in SharePoint 2013

Create the farm
In this phase, you install the product and configure each server to support its role in the farm. You also
create the configuration database and the SharePoint Central Administration Web site. The following
servers are required for a SharePoint 2013 farm:


Database server: Unless you plan to use DBA-created databases, the configuration database,
content database, and other required databases are created when you run the SharePoint
Products Configuration Wizard.



Application server: After you prepare the application server, install any additional components
that are required to support functions such as Information Rights Management (IRM) and decision
support. Install SharePoint 2013 on the server that will host SharePoint Central Administration
Web site and then run the SharePoint Products Configuration Wizard to create and configure the
farm.



Front-end Web server: Install SharePoint 2013 on each Web server, install language packs, and
then run the SharePoint Products Configuration Wizard to add the Web servers to the farm.
Note:
After you add and configure all the front-end Web servers, you can add any additional
application servers that are part of your topology design to the farm.

For more information about supported deployment scenarios, see Install SharePoint 2013.

Configure settings, services, solutions, and sites
In this phase, you prepare the farm to host your site content by completing the following tasks:

32



Configure services. For more information, see Configure services and service applications in
SharePoint 2013



Configure global settings. For more information, see Configure SharePoint 2013



Create and populate the sites. For more information, see Create a web application in SharePoint
2013

Note:
Farm configuration steps are not isolated to a specific tier in the server infrastructure.

Deployment stages
By deploying a SharePoint 2013 solution in stages, you gain the benefits that are provided by a
systematic approach, such as collecting performance and usage data that you can use to evaluate your
solution. Additional benefits include verifying your capacity management assumptions and identifying
issues before the farm is put into production.
We recommend that you deploy your farm in the following stages:


Planning



Development



Proof of concept



Pilot



User acceptance test



Production

Planning
Before you can deploy a farm, you must plan the solution that you want to deploy and determine the
infrastructure requirements, such as server resources and farm topology. When you finish the
planning stage, you should have documented the following:


An infrastructure design to support your solution



A detailed description of how you will implement the farm and the solution



A plan for testing and validating the solution



A site and solution architecture

33



An understanding of the monitoring and sustained engineering requirements to support the
solution



A record of how the solution will be governed



An understanding of how the solution will be messaged to the user to drive adoption of the
solution

We recommend that you use the planning resources and articles described in Plan for SharePoint
2013.
Important:
Resource and time issues may pressure you to be less rigorous during the planning stage. We
recommend that you try to be as diligent as possible because missed or lightly touched
planning elements can resurface as significant issues after you are in production. These issues
can create much additional work, consume unbudgeted resources, and potentially take away
from the success of your SharePoint 2013.
After the planning stage, you move through the following deployment stages, updating and revising
your plans, configurations, and topologies as you test.

Development
During the development stage you will deploy SharePoint 2013 on a single server or on multiple
servers to develop, test, evaluate, and refine the solution that you intend to implement. This
environment is scaled according to your needs during solution development and can be retained as a
scaled down environment for future development and testing. This is not a stable environment and
there are no service-level agreements.

Proof of concept
During the proof of concept stage, the objective is two-fold: to understand SharePoint 2013 and to
evaluate SharePoint 2013 in the context of how it can address your business needs. The first level of
product evaluation can be done by installing all of the product components on a single server. You do
a more extensive product evaluation by a proof-of-concept deployment.
A proof-of-concept deployment on a single server or on a small farm enables you to expand the scope
of your evaluation. In this deployment, non-IT staff is added to the evaluation team, which provides a
broader view of how SharePoint 2013 features might be actually be used in the organization. The
benefit of a proof-of-concept deployment is that you can collect data that can be used to refine your
original plan. This data—such as page views, user behavior patterns, and server resource
consumption—also enables you to start to build a benchmark for sizing your farm. A proof of concept

34

is also good when you evaluate service applications and determining what feature sets that you will
offer your end users.
It is important during the proof-of-concept stage that you understand the unique characteristics and
functionality of these features because this understanding will help you define your overall topology.
Be aware that a proof-of-concept deployment requires additional resources and extends the time
required to put SharePoint 2013 into production.
Tip:
Virtualization provides a good platform for evaluating SharePoint 2013 because a virtual
environment provides flexibility, rapid deployment capability, and the ability to roll back
virtual machines to previous states.

Pilot
A pilot is used to test your solution on a small scale. There are two approaches to using a pilot
deployment. In the first approach, the focus is on functional testing without using real data. By using
the second approach you test for production characteristics by using real data and have your pilot
users test different kinds of tasks. We recommend the second approach because of the broader scope
and real-world data that you can collect and use to refine your solution design.
A pilot deployment provides many benefits. It enables you to collect data that you can use to validate
the following aspects of your farm design:


Infrastructure design



Capacity management assumptions



Site and solution architecture



Solution usage assumptions

The pilot stage also enables you to determine additional data that should be collected to increase the
breadth and depth of your benchmarks. This is important if you want to assess the potential effect of
additional features or services that you want to add to the farm before the user acceptance test.
At the conclusion of the pilot deployment, you can use the data that you collect to adjust the various
components of the solution and its supporting infrastructure.

User acceptance test (UAT)
A user acceptance test deployment—also known as a pre-production environment—is used by
organizations as a transitional step from the pilot deployment to a production deployment. An
organization's business processes determine the scope, scale, and duration of user accept testing.

35

The topology of the pre-production environment should be the same as, or very similar to the planned
production topology. During user acceptance testing, the SharePoint 2013 solution is tested against a
subset or a complete copy of production data. This deployment stage provides a final opportunity for
performance tuning and validating operational procedures such as backups and restores.

Production
The final stage is rolling your farm into a production environment. At this stage, you will have
incorporated the necessary solution and infrastructure adjustments that were identified during the
user acceptance test stage.
Putting the farm into production requires you to complete the following tasks:


Deploy the farm.



Deploy the solution.



Implement the operations plan.



If required, deploy additional environments such as authoring and staging farms, and services
farms.

36

Prepare for installation of SharePoint 2013
Applies to: SharePoint Server 2013, SharePoint Foundation 2013
Topic Last Modified: 2013-12-18
Summary: Learn about permissions, accounts, security settings, and what you have to do to prepare

your environment for SharePoint 2013.
The following downloadable resources, articles on TechNet, video recordings, and related resources
provide information about how to prepare for SharePoint 2013 installation and initial configuration.

TechNet articles about how to prepare for SharePoint
2013 installation and initial configuration
The following articles about how to prepare for SharePoint 2013 installation and initial configuration
are available to view online. Writers update articles on a continuing basis as new information becomes
available and as users provide feedback.

Content

Description

Initial deployment administrative
and service accounts in
SharePoint 2013

Provides information about the
administrative and service
accounts that are required for
an initial SharePoint 2013
installation.

Account permissions and
security settings in SharePoint
2013

Describes SharePoint 2013
administrative and services
account permissions. This article
discusses the following areas:
Microsoft SQL Server, the file
system, file shares, and registry
entries.

37

Content

Description

Configure SQL Server security
for SharePoint 2013
environments

Learn how to harden SQL Server
for SharePoint 2013
environments by using SQL
Server tools and Windows
Firewall.

Install prerequisites for
SharePoint 2013 from a network
share

Describes how to install
SharePoint 2013 prerequisites
from an offline shared network
location using the prerequisite
installer
(PrerequisiteInstaller.exe) tool.

Additional resources about SharePoint 2013 installation
and initial configuration
The following resources about SharePoint 2013 installation and initial configuration are available from
other subject matter experts.

Content

Description



Installation and Deployment
for SharePoint 2013
Resource Center

Visit the Resource Center to
access videos, Community Sites,
documentation, and more.



Capabilities and features in
SharePoint 2013 Resource
Center

38

Initial deployment administrative and
service accounts in SharePoint 2013
Applies to: SharePoint Server 2013 Standard, SharePoint Server 2013 Enterprise, SharePoint
Foundation 2013
Topic Last Modified: 2014-06-11
Summary: Learn about the administrative and service accounts that are required to initially install

SharePoint 2013.
This article provides information about the administrative and service accounts that are required for
an initial SharePoint 2013 deployment. Additional accounts and permissions are required to fully
implement all aspects of a production farm.
Note:
For a complete list of permissions, see Account permissions and security settings in SharePoint
2013.
Important:
Do not use service account names that contain the symbol $.

Required accounts
To deploy SharePoint 2013 on a server farm, you must provide credentials for several different
accounts.
The following table describes the accounts that are used to install and configure SharePoint 2013.

39

Account

Purpose

Requirements

SQL Server service account

The SQL Server service
account is used to run SQL
Server. It is the service
account for the following SQL
Server services:

Use either a Local System account or
a domain user account.



MSSQLSERVER



SQLSERVERAGENT

If you do not use the default
SQL Server instance, in the
Windows Services console,
these services will be shown
as the following:

If you plan to back up to or restore
from an external resource,
permissions to the external resource
must be granted to the appropriate
account. If you use a domain user
account for the SQL Server service
account, grant permissions to that
domain user account. However, if
you use the Network Service or the
Local System account, grant
permissions to the external resource
to the machine account
(\).



MSSQL



SQLAgent The instance name is arbitrary and
was created when SQL Server was
installed.

40

Account

Purpose

Requirements

Setup user account

The Setup user account is
used to run the following:



Domain user account.



Member of the Administrators
group on each server on which
Setup is run.



SQL Server login on the
computer that runs SQL Server.



Member of the following SQL
Server roles:



Setup



SharePoint Products
Configuration Wizard



securityadmin fixed server

role


dbcreator fixed server role

If you run Windows PowerShell
cmdlets that affect a database, this
account must be a member of the
db_owner fixed database role for
the database.

41

Account

Purpose

Requirements

Server farm account or
database access account

The server farm account is
used to perform the following
tasks:









Domain user account.

Additional permissions are
automatically granted for the server
Configure and manage the farm account on Web servers and
server farm.
application servers that are joined to
a server farm.
Act as the application pool
identity for the SharePoint The server farm account is
automatically added as a SQL Server
Central Administration
login on the computer that runs SQL
Web site.
Server. The account is added to the
Run the Microsoft
following SQL Server security roles:
SharePoint Foundation
 dbcreator fixed server role
Workflow Timer Service.


securityadmin fixed server role



db_owner fixed database role

for all SharePoint databases in
the server farm

Note:
We recommend that you install SharePoint 2013 by using least-privilege administration.
See also
Account permissions and security settings in SharePoint 2013
Installation and Deployment for SharePoint 2013 Resource Center

42

Account permissions and security settings
in SharePoint 2013
Applies to: SharePoint Server 2013, SharePoint Foundation 2013
Topic Last Modified: 2014-07-30
Summary: Learn about the permissions and security settings to use with a deployment of SharePoint

2013.
This article describes SharePoint administrative and services account permissions for the following
areas: Microsoft SQL Server, the file system, file shares, and registry entries.
Important:
Do not use service account names that contain the symbol $.
In this article:


About account permissions and security settings



Administrative accounts



Service application accounts



Database roles



Group permissions

About account permissions and security settings
The SharePoint Configuration Wizard (Psconfig) and the Farm Creation Wizard, both of which are run
during a Complete installation, configure many of the SharePoint baseline account permissions and
security settings.

SharePoint administrative accounts
One of the following SharePoint components automatically configures most of the SharePoint
administrative account permissions during the setup process:


The SharePoint Configuration Wizard (Psconfig).



The Farm Creation Wizard.

43



The SharePoint Central Administration web site.



Windows PowerShell.

Setup user administrator account
This account is used to set up each server in your farm by running the SharePoint Configuration
Wizard, the initial Farm Creation Wizard, and Windows PowerShell. For the examples in this article,
the setup user administrator account is used for farm administration, and you can use Central
Administration to manage it. Some configuration options, for example, configuration of the
SharePoint 2013 Search query server, require local administration permissions. The setup user
administrator account requires the following permissions:


It must have domain user account permissions.



It must be a member of the local administrators group on each server in the SharePoint farm.



This account must have access to the SharePoint databases.



If you use any Windows PowerShell operations that affect a database, the setup user
administrator account must be a member of the db_owner role.



This account must be assigned to the securityadmin and dbcreator SQL Server security roles
during setup and configuration.
Note:
The securityadmin and dbcreator SQL Server security roles might be required for this account
during a complete version-to-version upgrade because new databases might have to be
created and secured for services.

After you run the configuration wizards, machine-level permissions for the setup user administrator
account include:


Membership in the WSS_ADMIN_WPG Windows security group.



Membership in the IIS_WPG role.

After you run the configuration wizards, database permissions include:


db_owner on the SharePoint server farm configuration database.



db_owner on the SharePoint Central Administration content database.

44

Warning:
If the setup user administrator account cannot a log on to the computer running SQL Server,
the configuration wizards will not run correctly. If the account that you use to run the
configuration wizards does not have the appropriate special SQL Server role membership or
access as db_owner on the databases, the configuration wizards will not run correctly.

SharePoint farm service account
The server farm account, which is also referred to as the database access account, is used as the
application pool identity for Central Administration and as the process account for the SharePoint
Foundation 2013 Timer service. The server farm account requires the following permissions:


It must have domain user account permissions.

Additional permissions are automatically granted to the server farm account on web servers and
application servers that are joined to a server farm.
After you run Setup, machine-level permissions include:


Membership in the WSS_ADMIN_WPG Windows security group for the SharePoint Foundation
2013 Timer service.



Membership in WSS_RESTRICTED_WPG for the Central Administration and Timer service
application pools.



Membership in WSS_WPG for the Central Administration application pool.

After you run the configuration wizards, SQL Server and database permissions include:


Dbcreator fixed server role.



Securityadmin fixed server role.



db_owner for all SharePoint databases.



Membership in the WSS_CONTENT_APPLICATION_POOLS role for the SharePoint server farm
configuration database.



Membership in the WSS_CONTENT_APPLICATION_POOLS role for the SharePoint_Admin content
database.

SharePoint service application accounts
This section describes the service application accounts that are set up by default during installation.

45

Application pool account
The application pool account is used for application pool identity. The application pool account
requires the following permission configuration settings:
The following machine-level permission is configured automatically: The application pool account is a
member of WSS_WPG.
The following SQL Server and database permissions for this account are configured automatically:


The application pool accounts for Web applications are assigned to the SP_DATA_ACCESS role for
the content databases.



This account is assigned to the WSS_CONTENT_APPLICATION_POOLS role associated with the
farm configuration database.



This account is assigned to the WSS_CONTENT_APPLICATION_POOLS role associated with the
SharePoint_Admin content database.

Default content access account
Important:
Information in this section applies to SharePoint Server 2013 only.
The default content access account is used within a specific service application to crawl content,
unless a different authentication method is specified by a crawl rule for a URL or URL pattern. This
account requires the following permission configuration settings:


The default content access account must be a domain user account that has read access to
external or secure content sources that you want to crawl by using this account.



For SharePoint Server sites that are not part of the server farm, you have to explicitly grant this
account full read permissions to the web applications that host the sites.



This account must not be a member of the Farm Administrators group.

Content access accounts
Important:
Information in this section applies to SharePoint Server 2013 only.
Content access accounts are configured to access content by using the Search administration crawl
rules feature. This type of account is optional and you can configure it when you create a new crawl

46

rule. For example, external content (such as a file share) might require this separate content access
account. This account requires the following permission configuration settings:


The content access account must have read access to external or secure content sources that this
account is configured to access.



For SharePoint Server sites that are not part of the server farm, you have to explicitly grant this
account full read permissions to the web applications that host the sites.

Excel Services unattended service account
Important:
Information in this section applies to SharePoint Server 2013 only.
Excel Services uses the Excel Services unattended service account to connect to external data sources
that require a user name and password that are based on operating systems other than Windows for
authentication. If this account is not configured, Excel Services will not attempt to connect to these
types of data sources. Although account credentials are used to connect to data sources of operating
systems other than Windows, if the account is not a member of the domain, Excel Services cannot
access them. This account must be a domain user account.

My Sites application pool account
Important:
Information in this section applies to SharePoint Server 2013 only.
The My Sites application pool account must be a domain user account. This account must not be a
member of the Farm Administrators group.
The following machine-level permission is configured automatically: This account is a member of
WSS_WPG.
The following SQL Server and database permissions are configured automatically:


This account is assigned to the WSS_CONTENT_APPLICATION_POOLS role that is associated with
the farm configuration database.



This account is assigned to the WSS_CONTENT_APPLICATION_POOLS role that is associated with
the SharePoint_Admin content database.



The application pool accounts for web applications are assigned to the SP_DATA_ACCESS role for
the content databases

47

Other application pool accounts
The other application pool account must be a domain user account. This account must not be a
member of the Administrators group on any computer in the server farm.
The following machine-level permission is configured automatically: This account is a member of
WSS_WPG.
The following SQL Server and database permissions are configured automatically:


This account is assigned to the SP_DATA_ACCESS role for the content databases.



This account is assigned to the SP_DATA_ACCESS role for search database that is associated with
the web application.



This account must have read and write access to the associated service application database.



This account is assigned to the WSS_CONTENT_APPLICATION_POOLS role that is associated with
the farm configuration database.



This account is assigned to the WSS_CONTENT_APPLICATION_POOLS role that is associated with
the SharePoint_Admin content database.

SharePoint database roles
This section describes the database roles that installation sets up by default or that you can configure
optionally.

WSS_CONTENT_APPLICATION_POOLS database role
The WSS_CONTENT_APPLICATION_POOLS database role applies to the application pool account for
each web application that is registered in a SharePoint farm. This enables web applications to query
and update the site map and have read-only access to other items in the configuration database.
Setup assigns the WSS_CONTENT_APPLICATION_POOLS role to the following databases:


The SharePoint_Config database (the configuration database).



The SharePoint_AdminContent database.

Members of the WSS_CONTENT_APPLICATION_POOLS role have the execute permission for a subset
of the stored procedures for the database. In addition, members of this role have the select
permission to the Versions table (dbo.Versions) in the SharePoint_AdminContent database. For other
databases, the accounts planning tool indicates that access to read these databases is automatically

48

configured. In some cases, limited access to write to a database is also automatically configured. To
provide this access, permissions for stored procedures are configured.

WSS_SHELL_ACCESS database role
The secure WSS_SHELL_ACCESS database role on the configuration database replaces the need to add
an administration account as a db_owner on the configuration database. By default, the setup
account is assigned to the WSS_SHELL_ACCESS database role. You can use a Windows PowerShell
command to grant or remove memberships to this role. Setup assigns the WSS_SHELL_ACCESS role to
the following databases:


The SharePoint_Config database (the configuration database).



One or more of the SharePoint Content databases. This is configurable by using the Windows
PowerShell command that manages membership and the object that is assigned to this role.

Members of the WSS_SHELL_ACCESS role have the execute permission for all stored procedures for
the database. In addition, members of this role have the read and write permissions on all of the
database tables.
SP_READ_ONLY database role
The SP_READ_ONLY role should be used for setting the database to read only mode instead of using
sp_dboption. This role as its name suggests should be used when only read access is required for data
such as usage and telemetry data.
Note:
The sp_dboption stored procedure is not available in SQL Server 2012. For more information
about sp_dboption see sp_dboption (Transact-SQL).
The SP_READ_ONLY SQL role will have the following permissions:


Grant SELECT on all SharePoint stored procedures and functions



Grant SELECT on all SharePoint tables



Grant EXECUTE on user-defined type where schema is dbo

SP_DATA_ACCESS database role
The SP_DATA_ACCESS role is the default role for database access and should be used for all object
model level access to databases. Add the application pool account to this role during upgrade or new
deployments.

49

Note:
The SP_DATA_ACCESS role replaces the db_owner role in SharePoint 2013.
The SP_DATA_ACCESS role will have the following permissions:


Grant EXECUTE or SELECT on all SharePoint stored procedures and functions



Grant SELECT on all SharePoint tables



Grant EXECUTE on User-defined type where schema is dbo



Grant INSERT on AllUserDataJunctions table



Grant UPDATE on Sites view



Grant UPDATE on UserData view



Grant UPDATE on AllUserData table



Grant INSERT and DELETE on NameValuePair tables



Grant create table permission

Group permissions
This section describes permissions of groups that the SharePoint 2013 setup and configuration tools
create.

WSS_ADMIN_WPG
WSS_ADMIN_WPG has read and write access to local resources. The application pool accounts for the
Central Administration and Timer services are in WSS_ADMIN_WPG. The following table shows the
WSS_ADMIN_WPG registry entry permissions.

Key name

Permissi Inherit
ons

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic Full
es\VSS
control

Not Applicable

Descript
ion

Not
Applicabl
e

50

Key name

Permissi Inherit
ons

Descript
ion

HKEY_LOCAL_MACHINE\Software\Microsoft\Office\15.0\R Read,
write
egistration\{90150000-110D-0000-1000-0000000FF1CE}

Not Applicable

Not
Applicabl
e

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office
Server

Read

No

This key
is the
root of
the
SharePoi
nt 2013
registry
settings
tree. If
this key
is
altered,
SharePoi
nt 2013
functiona
lity will
fail.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office
Server\15.0

Full
control

No

This key
is the
root of
the
SharePoi
nt 2013
registry
settings.

51

Key name

HKEY_LOCAL_MACHINE\Software\M Read, write
icrosoft\Office
Server\15.0\LoadBalancerSettings

Permissi Inherit
ons

No

Descript
ion

This
key
contain
s
settings
for the
docum
ent
convers
ion
service.
Alterin
g this
key will
break
docum
ent
convers
ion
functio
nality.

52

Key name

Permissi Inherit
ons

Descript
ion

HKEY_LOCAL_MACHINE\Software\M Read, write
icrosoft\Office
Server\15.0\LauncherSettings

No

This
key
contain
s
settings
for the
docum
ent
convers
ion
service.
Alterin
g this
key will
break
docum
ent
convers
ion
functio
nality.

HKEY_LOCAL_MACHINE\Software\M Full control
icrosoft\Office Server\15.0\Search

Not
Not
Applicab Applica
le
ble

HKEY_LOCAL_MACHINE\Software\M Full control
icrosoft\Shared Tools\Web Server
Extensions\15.0\Search

Not
Not
Applicab Applica
le
ble

53

Key name

HKEY_LOCAL_MACHINE\Software\M Full control
icrosoft\Shared Tools\Web Server
Extensions\15.0\Secure

Permissi Inherit
ons

No

Descript
ion

This
key
contain
s the
connec
tion
string
and the
ID of
the
configu
ration
databa
se to
which
the
machin
e is
joined.
If this
key is
altered,
the
ShareP
oint
2013
installa
tion on
the
machin
e will
not
functio
n.

54

Key name

Permissi Inherit
ons

Descript
ion

HKEY_LOCAL_MACHINE\Software\Microsoft\Shared
Tools\Web Server Extensions\15.0\WSS

Full
control

This key
contains
settings
used
during
setup. If
this key
is
altered,
diagnosti
c logging
may fail
and
setup or
postsetup
configura
tion may
fail.

Yes

The following table shows the WSS_ADMIN_WPG file system permissions.
File system path

Permission Inherit
s

Description

%AllUsersProfile%\
Microsoft\SharePoint

Full control

This directory
contains the filesystem-backed cache
of the farm
configuration.
Processes might fail
to start and the
administrative
actions might fail if
this directory is
altered or deleted.

No

55

File system path

Permission Inherit
s

Description

C:\Inetpub\wwwroot\wss

Full control

This directory (or the
corresponding
directory under the
Inetpub root on the
server) is used as the
default location for
IIS Web sites.
SharePoint sites will
be unavailable and
administrative
actions might fail if
this directory is
altered or deleted,
unless custom IIS
Web site paths are
provided for all IIS
Web sites extended
with SharePoint
2013.

No

56

File system path

Permission Inherit
s

Description

%ProgramFiles%\Microsoft Office
Servers\15.0

Full control

No

This directory is the
installation location
for SharePoint 2013
binaries and data.
The directory can be
changed during
installation. All
SharePoint 2013
functionality will fail
if this directory is
removed, altered, or
removed after
installation.
Membership in the
WSS_ADMIN_WPG
Windows security
group is required for
some SharePoint
2013 services to be
able to store data on
disk.

%ProgramFiles%\Microsoft Office
Servers\15.0\WebServices

Read, write

No

This directory is the
root directory where
back-end Web
services are hosted,
for example, Excel
and Search. The
SharePoint 2013
features that depend
on these services will
fail if this directory is
removed or altered.

57

File system path

Permission Inherit
s

Description

%ProgramFiles%\Microsoft Office
Servers\15.0\Data

Full control

No

This directory is the
root location where
local data is stored,
including search
indexes. Search
functionality will fail
if this directory is
removed or altered.
WSS_ADMIN_WPG
Windows security
group permissions
are required to
enable search to save
and secure data in
this folder.

%ProgramFiles%\Microsoft Office
Servers\15.0\Logs

Full control

Yes

This directory is the
location where the
run-time diagnostic
logging is generated.
Logging functionality
will not function
properly if this
directory is removed
or altered.

%ProgramFiles%\Microsoft Office
Servers\15.0\Data\Office Server

Full control

Yes

Same as the
parent folder.

%windir%\System32\drivers\etc\HO Read, write
STS

Not
Not
Applicabl Applicable
e

%windir%\Tasks

Not
Not
Applicabl Applicable
e

Full control

58

File system path

Permission Inherit
s

%COMMONPROGRAMFILES%Micros
oft Shared\Web Server
Extensions\15

Modify

Yes

This directory
is the
installation
directory for
core
SharePoint
2013 files. If
the access
control list
(ACL) is
modified,
feature
activation,
solution
deployment,
and other
features will
not function
correctly.

%COMMONPROGRAMFILES%\Micro
soft Shared\Web Server
Extensions\15\ADMISAPI

Full control

Yes

This directory
contains the
SOAP services
for Central
Administratio
n. If this
directory is
altered,
remote site
creation and
other
methods
exposed in
the service
will not
function
correctly.

Description

59

File system path

Permission Inherit
s

Description

%COMMONPROGRAMFILES%\Micros Full control
oft Shared\Web Server
Extensions\15\CONFIG

Yes

This directory
contains files used to
extend IIS Web sites
with SharePoint
2013. If this directory
or its contents are
altered, web
application
provisioning will not
function correctly.

%COMMONPROGRAMFILES%\Micros Full control
oft Shared\Web Server
Extensions\15\LOGS

No

This directory
contains setup and
runtime tracing logs.
If the directory is
altered, diagnostic
logging will not
function correctly.

%windir%\temp

Yes

This directory is used
by platform
components on
which SharePoint
2013 depends. If the
access control list is
modified, Web Part
rendering and other
deserialization
operations might fail.

Full control

60

File system path

Permission Inherit
s

Description

%windir%\System32\logfiles\ShareP
oint

Full control

This directory is used
by SharePoint Server
usage logging. If this
directory is modified,
usage logging will not
function correctly.

No

This registry key
applies only to
SharePoint Server.
%systemdrive\program
files\Microsoft Office Servers\15
folder on Index servers

Full control

This permission is
granted for a
%systemdrive\progra
m files\Microsoft
Office Servers\15
folder on Index
servers.

Not Applicable

WSS_WPG
WSS_WPG has read access to local resources. All application pool and services accounts are in
WSS_WPG. The following table shows WSS_WPG registry entry permissions.

Key name

Permissions

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office Read
Server\15.0

Inherit

Description

No

This key is the
root of the
SharePoint
2013 registry
settings.

61

Key name

Permissions

Inherit

Description

HKEY_LOCAL_MACHINE\Software\Microsoft\Office
Server\15.0\Diagnostics

Read, write

No

This key
contains
settings for
the
SharePoint
2013
diagnostic
logging.
Altering this
key will break
the logging
functionality.

HKEY_LOCAL_MACHINE\Software\Microsoft\Office
Server\15.0\LoadBalancerSettings

Read, write

No

This key
contains
settings for
the document
conversion
service.
Altering this
key will break
document
conversion
functionality.

HKEY_LOCAL_MACHINE\Software\Microsoft\Office
Server\15.0\LauncherSettings

Read, write

No

This key
contains
settings for
the document
conversion
service.
Altering this
key will break
document
conversion
functionality.

62

Key name

Permissions

Inherit

Description

HKEY_LOCAL_MACHINE\Software\Microsoft\Shared
Tools\Web Server Extensions\15.0\Secure

Read

No

This key
contains the
connection
string and the
ID of the
configuration
database to
which the
machine is
joined. If this
key is altered,
the
SharePoint
2013
installation on
the machine
will not
function.

HKEY_LOCAL_MACHINE\Software\Microsoft\Shared
Tools\Web Server Extensions\15.0\WSS

Read

Yes

This key
contains
settings that
are used
during setup.
If this key is
altered,
diagnostic
logging may
fail and setup
or post-setup
configuration
may fail.

The following table shows the WSS_WPG file system permissions.

63

File system path

Permissi
ons

Inherit

Description

%AllUsersProfile%\
Microsoft\SharePoint

Read

No

This directory
contains the
file-systembacked cache
of the farm
configuration.
Processes
might fail to
start and the
administrativ
e actions
might fail if
this directory
is altered or
deleted.

64

File system path

Permissi
ons

Inherit

Description

C:\Inetpub\wwwroot\wss

Read,
execute

No

This directory
(or the
correspondin
g directory
under the
Inetpub root
on the server)
is used as the
default
location for
IIS Web sites.
SharePoint
sites will be
unavailable
and
administrativ
e actions
might fail if
this directory
is altered or
deleted,
unless custom
IIS Web site
paths are
provided for
all IIS Web
sites
extended
with
SharePoint
2013.

65

File system path

Permissi
ons

Inherit

Description

%ProgramFiles%\Microsoft Office
Servers\15.0

Read,
execute

No

This directory
is the
installation
location for
the
SharePoint
2013 binaries
and data. It
can be
changed
during
installation.
All SharePoint
2013
functionality
will fail if this
directory is
removed,
altered, or
moved after
installation.
WSS_WPG
read and
execute
permissions
are required
to enable IIS
sites to load
SharePoint
2013 binaries.

66

File system path

Permissi
ons

Inherit

Description

%ProgramFiles%\Microsoft Office
Servers\15.0\WebServices

Read

No

This directory
is the root
directory
where backend Web
services are
hosted, for
example,
Excel and
Search. The
SharePoint
2013 features
that depend
on these
services will
fail if this
directory is
removed or
altered.

%ProgramFiles%\Microsoft Office
Servers\15.0\Logs

Read,
write

Yes

This directory
is the location
where the
runtime
diagnostic
logging is
generated.
Logging
functionality
will not
function
properly if
this directory
is removed or
altered.

67

File system path

Permissi
ons

Inherit

Description

%COMMONPROGRAMFILES%\Microso Read
ft Shared\Web Server
Extensions\15\ADMISAPI

Yes

This directory
contains the
SOAP services
for Central
Administratio
n. If this
directory is
altered,
remote site
creation and
other
methods
exposed in
the service
will not
function
correctly.

%COMMONPROGRAMFILES%\Micro
soft Shared\Web Server
Extensions\15\CONFIG

Read

Yes

This directory
contains files used to
extend IIS Web sites
with SharePoint
2013. If this directory
or its contents are
altered, web
application
provisioning will not
function correctly.

%COMMONPROGRAMFILES%\Micro
soft Shared\Web Server
Extensions\15\LOGS

Modify

No

This directory
contains setup and
runtime tracing logs.
If the directory is
altered, diagnostic
logging will not
function correctly.

68

File system path

Permissi
ons

Inherit

Description

%windir%\temp

Read

Yes

This directory is used
by platform
components on
which SharePoint
2013 depends. If the
access control list is
modified, Web Part
rendering, and other
deserialization
operations may fail.

%windir%\System32\logfiles\ShareP
oint

Read

No

This directory is used
by SharePoint Server
usage logging. If this
directory is modified,
usage logging will not
function correctly.
The registry key
applies only to
SharePoint Server.

%systemdrive\program
files\Microsoft Office Servers\15

Read,
execute

Not
The permission is
Applicabl granted for
e
%systemdrive\progra
m files\Microsoft
Office Servers\15
folder on Index
servers.

Local service
The following table shows the local service registry entry permission:

69

Key name

Permissions

HKEY_LOCAL_MACHINE\Software\Microsoft\Office Read
Server\15.0\LoadBalancerSettings

Inherit

Description

No

This key
contains
settings for the
document
conversion
service.
Altering this
key will break
document
conversion
functionality.

The following table shows the local service file system permission:

File system path

Permissions

%ProgramFiles%\Microsoft Read, execute
Office Servers\15.0\Bin

Inherit

Description

No

This directory is the
installed location of
the SharePoint 2013
binaries. All the
SharePoint 2013
functionality will fail if
this directory is
removed or altered.

70

Local system
The following table shows the local system registry entry permissions:
Key name

Permissions

Inherit

Description

HKEY_LOCAL_MACHINE\Software\Microsoft\Office
Server\15.0\LauncherSettings

Read

No

This key
contains
settings for
the document
conversion
service.
Altering this
key will break
document
conversion
functionality.
This registry
key applies
only to
SharePoint
Server.

HKEY_LOCAL_MACHINE\Software\Microsoft\Shared Full control
Tools\Web Server Extensions\15.0\Secure

No

This key
contains the
connection
string and the
ID of the
configuration
database to
which the
machine is
joined. If this
key is altered,
the SharePoint
2013
installation on
the machine
will not
function.

71

Key name

Permissions

Inherit

Description

HKEY_LOCAL_MACHINE\Software\Microsoft\Shared Full control
Tools\Web Server
Extensions\15.0\Secure\FarmAdmin

No

This key
contains the
encryption key
that is used to
store secrets
in the
configuration
database. If
this key is
altered,
service
provisioning
and other
features will
fail.

HKEY_LOCAL_MACHINE\Software\Microsoft\Shared Full control
Tools\Web Server Extensions\15.0\WSS

Yes

This key
contains
settings that
are used
during setup.
If this key is
altered,
diagnostic
logging may
fail and setup
or post-setup
configuration
may fail.

72

The following table shows the local file system permissions:

File system path

Permissions

Inherit

Description

%AllUsersProfile%\ Microsoft\SharePoint

Full control

No

This directory
contains the
file-systembacked cache of
the farm
configuration.
Processes might
fail to start and
administrative
actions might
fail if this
directory is
altered or
deleted.

73

File system path

Permissions

Inherit

Description

C:\Inetpub\wwwroot\wss

Full control

No

This directory
(or the
corresponding
directory under
the Inetpub
root on the
server) is used
as the default
location for IIS
Web sites.
SharePoint sites
will be
unavailable and
administrative
actions might
fail if this
directory is
altered or
deleted, unless
custom IIS Web
site paths are
provided for all
IIS Web sites
extended with
SharePoint
2013.

74

File system path

Permissions

Inherit

Description

%COMMONPROGRAMFILES%\Microsoft
Shared\Web Server Extensions\15\ADMISAPI

Full control

Yes

This directory
contains the
SOAP services
for Central
Administration.
If this directory
is altered,
remote site
creation and
other methods
exposed in the
service will not
function
correctly.

%COMMONPROGRAMFILES%\Microsoft
Shared\Web Server Extensions\15\CONFIG

Full control

Yes

If this directory
or its contents
are altered,
Web
Application
provisioning will
not function
correctly.

%COMMONPROGRAMFILES%\Microsoft
Shared\Web Server Extensions\15\LOGS

Full control

No

This directory
contains setup
and run-time
tracing logs. If
the directory is
altered,
diagnostic
logging will not
function
correctly.

75

File system path

Permissions

Inherit

Description

%windir%\temp

Full control

Yes

This directory is
used by
platform
components on
which
SharePoint
2013 depends.
If the access
control list is
modified, Web
Part rendering,
and other
deserialization
operations
might fail.

76

File system path

Permissions

%windir%\System32\logfiles\SharePoint Full control

Inherit

Description

No This
directory
is used by
SharePoint
Server for
usage
logging. If
this
directory
is
modified,
usage
logging
will not
function
correctly.
This
registry
key
applies
only to
SharePoint
Server.

Network service
The following table shows the network service registry entry permission:

Key name

Permissions

HKEY_LOCAL_MACHINE\Software\Microsoft\Office Read
Server\15.0\Search\Setup

Inherit

Description

Not Applicable Not Applicable

77

Administrators
The following table shows the administrators registry entry permissions:

Key name

Permissions

Inherit

Description

HKEY_LOCAL_MACHINE\Software\Microsoft\Shared Full control
Tools\Web Server Extensions\15.0\Secure

No

This key
contains the
connection
string and the
ID of the
configuration
database to
which the
machine is
joined. If this
key is altered,
the SharePoint
2013
installation on
the machine
will not
function.

HKEY_LOCAL_MACHINE\Software\Microsoft\Shared Full control
Tools\Web Server
Extensions\15.0\Secure\FarmAdmin

No

This key
contains the
encryption key
that is used to
store secrets
in the
configuration
database. If
this key is
altered,
service
provisioning
and other
features will
fail.

78

Key name

Permissions

HKEY_LOCAL_MACHINE\Software\Microsoft\Shared Full control
Tools\Web Server Extensions\15.0\WSS

Inherit

Description

Yes

This key
contains
settings that
are used
during setup.
If this key is
altered,
diagnostic
logging may
fail and setup
or post-setup
configuration
may fail.

The following table shows the administrators file system permissions:

File system path

Permissions

Inherit

Description

%AllUsersProfile%\ Microsoft\SharePoint

Full control

No

This directory
contains the
file-systembacked cache of
the farm
configuration.
Processes might
fail to start and
administrative
actions might
fail if this
directory is
altered or
deleted.

79

File system path

Permissions

Inherit

Description

C:\Inetpub\wwwroot\wss

Full Control

No

This directory
(or the
corresponding
directory under
the Inetpub
root on the
server) is used
as the default
location for IIS
Web sites.
SharePoint sites
will be
unavailable and
administrative
actions might
fail if this
directory is
altered or
deleted, unless
custom IIS web
site paths are
provided for all
IIS web sites
that are
extended with
SharePoint
2013.

80

File system path

Permissions

Inherit

Description

%COMMONPROGRAMFILES%\Microsoft
Shared\Web Server Extensions\15\ADMISAPI

Full control

Yes

This directory
contains the
SOAP services
for Central
Administration.
If this directory
is altered,
remote site
creation and
other methods
exposed in the
service will not
function
correctly.

%COMMONPROGRAMFILES%\Microsoft
Shared\Web Server Extensions\15\CONFIG

Full control

Yes

If this directory
or its contents
are altered,
web application
provisioning will
not function
correctly.

%COMMONPROGRAMFILES%\Microsoft
Shared\Web Server Extensions\15\LOGS

Full control

No

This directory
contains setup
and runtime
tracing logs. If
the directory is
altered,
diagnostic
logging will not
function
correctly.

81

File system path

Permissions

Inherit

Description

%windir%\temp

Full control

Yes

This directory is
used by
platform
components on
which
SharePoint
2013 depends.
If the ACL is
modified, Web
Part rendering,
and other
deserialization
operations
might fail.

%windir%\System32\logfiles\SharePoint Full control

No This
directory
is used by
SharePoint
Server for
usage
logging. If
this
directory
is
modified,
usage
logging
will not
function
correctly.
This
registry
key
applies
only to
SharePoint
Server.

82

WSS_RESTRICTED_WPG
WSS_RESTRICTED_WPG can read the encrypted farm administration credential registry entry.
WSS_RESTRICTED_WPG is only used for encryption and decryption of passwords that are stored in the
configuration database. The following table shows the WSS_RESTRICTED_WPG registry entry
permission:
Key name

Permissions

HKEY_LOCAL_MACHINE\Software\Microsoft\Shared Full control
Tools\Web Server
Extensions\15.0\Secure\FarmAdmin

Inherit

Description

No

This key
contains the
encryption key
that is used to
store secrets
in the
configuration
database. If
this key is
altered,
service
provisioning
and other
features will
fail.

83

Users group
The following table shows the users group file system permissions:
File system path

Permissions

Inherit

Description

%ProgramFiles%\Microsoft
Office Servers\15.0

Read, execute

No

This directory is the
installation location
for SharePoint 2013
binaries and data. It
can be changed
during installation.
All SharePoint 2013
functionality will fail
if this directory is
removed, altered, or
moved after
installation.

%ProgramFiles%\Microsoft
Read, execute
Office
Servers\15.0\WebServices\Root

No

This directory is the
root directory where
back-end root Web
services are hosted.
The only service
initially installed on
this directory is a
search global
administration
service. Some search
administration
functionality that
uses the serverspecific Central
Administration
Settings page will not
work if this directory
is removed or
altered.

84

File system path

Permissions

Inherit

Description

%ProgramFiles%\Microsoft
Office Servers\15.0\Logs

Read, write

Yes

This directory is the
location where the
run-time diagnostic
logging is generated.
Logging will not
function properly if
this directory is
removed or altered.

%ProgramFiles%\Microsoft
Office Servers\15.0\Bin

Read, execute

No

This directory is the
installed location of
SharePoint 2013
binaries. All of the
SharePoint 2013
functionality will fail
if this directory is
removed or altered.

All SharePoint 2013 service accounts
The following table shows the all SharePoint 2013 service accounts file system permission:
File system path

Permissions

%COMMONPROGRAMFILES%\Microsoft Modify
Shared\Web Server
Extensions\15\LOGS

Inherit

Description

No

This directory
contains setup and
runtime tracing
logs. If this
directory is
altered, diagnostic
logging will not
function correctly.
All SharePoint
2013 service
accounts must
have write
permission to this
directory.

85

See also
Install and configure SharePoint 2013

86

Configure SQL Server security for
SharePoint 2013 environments
Applies to: SharePoint Server 2013, SharePoint Foundation 2013
Topic Last Modified: 2014-10-22
Summary: Learn how to improve the security of SQL Server for SharePoint 2013 environments.

When you install SQL Server, the default settings help to provide a safe database. In addition, you can
use SQL Server tools and Windows Firewall to add additional security to SQL Server for SharePoint
2013 environments.
In this article:


Before you begin



Configuring a SQL Server instance to listen on a non-default port



To configure a SQL Server instance to listen on a non-default port



Blocking default SQL Server listening ports



Configuring Windows Firewall to open manually assigned ports




To configure Windows Firewall to open manually assigned ports

Configuring SQL Server client aliases



To configure a SQL Server client alias

Before you begin
Before you begin this operation, review the following tasks about how to secure your server farm:


Block UDP port 1434.



Configure named instances of SQL Server to listen on a nonstandard port (other than TCP port
1433 or UDP port 1434).

87



For additional security, block TCP port 1433 and reassign the port that is used by the default
instance to a different port.



Configure SQL Server client aliases on all front-end web servers and application servers in the
server farm. After you block TCP port 1433 or UDP port 1434, SQL Server client aliases are
necessary on all computers that communicate with the computer that is running SQL Server.
Note:
Because SharePoint 2013 runs as websites in IIS, administrators and users depend on the
accessibility features that browsers provide. SharePoint 2013 supports the accessibility
features of supported browsers. For more information, see the following resources:


Plan browser support



Accessibility for SharePoint 2013



Accessibility features in SharePoint 2013 Products



Keyboard shortcuts



Touch

Configuring a SQL Server instance to listen on a nondefault port
SQL Server provides the ability to reassign the ports that are used by the default instance and any
named instances. In SQL Server 2008 R2, and SQL Server 2012, you reassign the TCP port by using SQL
Server Configuration Manager. When you change the default ports, you make the environment more
secure against hackers who know default assignments and use them to exploit your SharePoint
environment.
To configure a SQL Server instance to listen on a non-default port
1. Verify that the user account that is performing this procedure is a member of either the sysadmin
or the serveradmin fixed server role.
2. On the computer that is running SQL Server, open SQL Server Configuration Manager.
3. In the navigation pane, expand SQL Server Network Configuration.
4. Click the corresponding entry for the instance that you are configuring.

88

The default instance is listed as Protocols for MSSQLSERVER. Named instances will appear as
Protocols for named_instance.
5. In the main window in the Protocol Name column, right-click TCP/IP, and then click Properties.
6. Click the IP Addresses tab.
For every IP address that is assigned to the computer that is running SQL Server, there is a
corresponding entry on this tab. By default, SQL Server listens on all IP addresses that are assigned
to the computer.
7. To globally change the port that the default instance is listening on, follow these steps:


For each IP address except IPAll, clear all values for both TCP dynamic ports and TCP
Port.



For IPAll, clear the value for TCP dynamic ports. In the TCP Port field, enter the port
that you want the instance of SQL Server to listen on. For example, enter 40000.

8. To globally change the port that a named instance is listening on, follow these steps:


For each IP address including IPAll, clear all values for TCP dynamic ports. A value of 0
for this field indicates that SQL Server uses a dynamic TCP port for the IP address. A blank
entry for this value means that SQL Server will not use a dynamic TCP port for the IP
address.



For each IP address except IPAll, clear all values for TCP Port.



For IPAll, clear the value for TCP dynamic ports. In the TCP Port field, enter the port
that you want the instance of SQL Server to listen on. For example, enter 40000.

9. Click OK.
A message indicates that that the change will not take effect until the SQL Server service is
restarted. Click OK.
10. Close SQL Server Configuration Manager.
11. Restart the SQL Server service and confirm that the computer that is running SQL Server is
listening on the port that you selected.
You can confirm this by looking in the Event Viewer log after you restart the SQL Server service.
Look for an information event similar to the following event:
Event Type:Information
Event Source:MSSQL$MSSQLSERVER

89

Event Category:(2)
Event ID:26022
Date:3/6/2008
Time:1:46:11 PM
User:N/A
Computer:computer_name
Description:
Server is listening on [ 'any' 50000]
12. Verification: Optionally, include steps that users should perform to verify that the operation was
successful.

Blocking default SQL Server listening ports
Windows Firewall with Advanced Security uses Inbound Rules and Outbound Rules to help secure
incoming and outgoing network traffic. Because Windows Firewall blocks all incoming unsolicited
network traffic by default, you do not have to explicitly block the default SQL Server listening ports.
For more information, see Windows Firewall with Advanced Security and Configuring the Windows
Firewall to Allow SQL Server Access.

Configuring Windows Firewall to open manually
assigned ports
To access a SQL Server instance through a firewall, you must configure the firewall on the computer
that is running SQL Server to allow access. Any ports that you manually assign must be open in
Windows Firewall.
To configure Windows Firewall to open manually assigned ports
1. Verify that the user account that is performing this procedure is a member of either the sysadmin
or the serveradmin fixed server role.
2. In Control Panel, open System and Security.
3. Click Windows Firewall, and then click Advanced Settings to open the Windows Firewall with
Advanced Security dialog box.

90

4. In the navigation pane, click Inbound Rules to display the available options in the Actions pane.
5. Click New Rule to open the New Inbound Rule Wizard.
6. Use the wizard to complete the steps that are required to allow access to the port that you
defined in Configure a SQL Server instance to listen on a non-default port.
Note:
You can configure the Internet Protocol security (IPsec) to help secure communication to
and from your computer that is running SQL Server by configuring the Windows firewall.
You do this by selecting Connection Security Rules in the navigation pane of the Windows
Firewall with Advanced Security dialog box.

Configuring SQL Server client aliases
If you block UDP port 1434 or TCP port 1433 on the computer that is running SQL Server, you must
create a SQL Server client alias on all other computers in the server farm. You can use SQL Server
client components to create a SQL Server client alias for computers that connect to SQL Server.
To configure a SQL Server client alias
1. Verify that the user account that is performing this procedure is a member of either the sysadmin
or the serveradmin fixed server role.
2. Run Setup for SQL Server on the target computer, and install the following client components:


Connectivity Components



Management Tools

3. Open SQL Server Configuration Manager.
4. In the navigation pane, click SQL Native Client Configuration.
5. In the main window under Items, right-click Aliases, and select New Alias.
6. In the Alias - New dialog box, in the Alias Name field, enter a name for the alias. For example,
enter SharePoint_alias.
7. In the Port No field, enter the port number for the database instance. For example, enter 40000.
Make sure that the protocol is set to TCP/IP.
8. In the Server field, enter the name of the computer that is running SQL Server.
9. Click Apply, and then click OK.

91

10. Verification: You can test the SQL Server client alias by using SQL Server Management Studio,
which is available when you install SQL Server client components.
11. Open SQL Server Management Studio.
12. When you are prompted to enter a server name, enter the name of the alias that you created, and
then click Connect. If the connection is successful, SQL Server Management Studio is populated
with objects that correspond to the remote database.
13. To check connectivity to additional database instances from SQL Server Management Studio, click
Connect, and then click Database Engine.
See also
Securing SharePoint: Harden SQL Server in SharePoint Environments
How to: Configure a Windows Firewall for Database Engine Access
How to: Configure a Server to Listen on a Specific TCP Port (SQL Server Configuration Manager)

92

Install prerequisites for SharePoint 2013
from a network share
Applies to: SharePoint Server 2013, SharePoint Foundation 2013
Topic Last Modified: 2014-07-22
Summary: Learn how to how to install SharePoint 2013 prerequisites from an offline shared network

location by using the prerequisite installer (PrerequisiteInstaller.exe) tool.
Installing prerequisites from an offline location is typically required when the servers on which you
want to install SharePoint 2013 are isolated from the Internet. Even if this is not the case, installing
prerequisites from an offline central location enables you to make sure of farm server consistency by
installing a well-known and controlled set of images.
Note:
The Microsoft SharePoint Products Preparation Tool is a user interface built on
PrerequisiteInstaller.exe. The Microsoft SharePoint Products Preparation Tool accepts no user
input.
In this article:


Installer switches and arguments



Download and combine the SharePoint 2013 prerequisites on a file share



Install the SharePoint 2013 prerequisites at the command prompt



Install the SharePoint 2013 prerequisites using an arguments file



Known issues

Important:
The steps in this article apply to SharePoint Foundation 2013 and SharePoint Server 2013.

Installer switches and arguments
By using PrerequisiteInstaller.exe with switches and arguments, you control the versions of the
required software that are installed and the location from which they are installed.
PrequisiteInstaller.exe accepts single or multiple switch and argument pairs. A switch identifies the
prerequisite and the argument specifies the action and the location of the prerequisite.
A switch and argument pair uses the following format:

93

/switch: 

Where:


/switch is a valid switch to identify a prerequisite. For example, /SQLNCli: is the switch for the

Microsoft SQL Server 2008 R2 SP1 Native Client.


 is expressed as the path of a local file or the path of a file share, for example,

"C:\foldername\sqlncli.msi" or "\\\\sqlncli.msi".
Each switch and its argument are separated by a colon and a space. The argument is enclosed in
quotation marks.
The switch and argument pairs can be passed to PrerequisiteInstaller.exe at the command prompt or
read from an arguments text file.

Download and combine the SharePoint 2013
prerequisites on a file share
The process for downloading and combining prerequisites consists of the steps that were described in
the following procedures.
To identify prerequisites
1. Refer to Hardware and software requirements for SharePoint 2013, which lists all the required
and optional software for SharePoint 2013. Additionally, this document provides the download
location for each prerequisite that is available for download on the Internet.
2. From the command prompt, navigate to the root of the SharePoint 2013 installation media or
folder location.
3. At the command prompt, type the following command and then press ENTER:
PrerequisiteInstaller.exe /?

This displays a list of the command-line options and switches and their corresponding arguments
for installing a prerequisite from the command-line.
Tip:
To copy the contents of the active About window to the Clipboard, press CTRL+C.
4. Verify that you have an accurate list of the required software. Compare the output from the
prerequisite installer to the list of prerequisites in step 1.

94

5. Download the prerequisites to a computer that has Internet access.
Next, follow these steps to create a central location that you can use for installing SharePoint 2013
prerequisites on all the farm servers.
To combine prerequisites
1. Create a shared folder on a computer that can be accessed by the servers on which the
prerequisites will be installed.
2. Copy the files that you downloaded from the Internet to the shared folder.
After you finish creating an available network location for the prerequisites, use the procedure in the
following section to install SharePoint 2013 prerequisites on a server.

Install the SharePoint 2013 prerequisites at the
command prompt
You can install one or more of the prerequisites from the command line using the following
procedure.
To install from the command line
1. From the Start menu, open the Command Prompt window using the Run as administrator
option.
2. Navigate to the SharePoint 2013 source directory.
3. Type the prerequisite program switch and corresponding argument for the program that you want
to install, and then press ENTER, for example:
PrerequisiteInstaller.exe /SQLNCli: "\\o15-sf-admin\SP_prereqs\sqlncli.msi"

Note:
To install more than one prerequisite, type each switch and argument pair. Be sure to
separate each pair by a space, for example:
PrerequisiteInstaller.exe /IDFX: "\\\Windows6.1-KB974405-x64.msu" /sqlncli:
"\\\sqlncli.msi" /Sync: "\\\Synchronization.msi"

95

Install the SharePoint 2013 prerequisites by using an
arguments file
You can install the prerequisites from the file share using an arguments file that consists of switches
and corresponding path statements to the programs that have to be installed.
When you run PrerequisiteInstaller.exe with an arguments file, the following happens:
1. PrerequisiteInstaller.exe reads the argument file to verify that each switch is valid and that the
program identified in the path statement exists.
Note:
If you specify an argument, PrerequisiteInstaller.exe ignores the arguments file and only
processes the command-line argument.
2. PrerequisiteInstaller.exe scans the local system to determine whether any of the prerequisites are
already installed.
3. PrerequisiteInstaller.exe installs the programs in the argument file and returns one of the
following exit codes:


0 - Success



1 – Another instance of this application is already running



2 – Invalid command line parameter



1001 – A pending restart blocks installation



3010 – A restart is needed

4. If a prerequisite requires a restart, a 3010 code is generated and you are prompted to click Finish
to restart the system. The behavior of the installer after a 3010 code is different depending on
which of the following conditions are true on the computer:


If the component that requires a restart is already installed on the system, the 3010 code
is generated and the remaining prerequisites are installed. After the last prerequisite is
installed you are prompted to restart the system.



If the component that requires a restart is installed on the system by
PrerequisiteInstaller.exe, the installer generates the 3010 code, and the installation of the
remaining prerequisites is skipped. You are prompted to restart the system.
After the system restarts, PrerequisiteInstaller.exe starts to run again because the startup
file that is created before the restart contains a /continue flag.

96

Multiple components may require a restart. So PrerequisiteInstaller.exe may have to be
restarted several times. After a restart, PrerequisiteInstaller.exe ignores the arguments
file and attempts to download and install the remaining prerequisites from the Internet.
For more information, see Known issues.
Use the following procedure to create an arguments file.
To create an arguments file
1. Using a text editor, create a new text document named PrerequisiteInstaller.Arguments.txt. Save
this file to the same location as PrerequisiteInstaller.exe. This file will contain the switches and
arguments that are used when you run the Microsoft SharePoint Products Preparation Tool.
2. Using a text editor, edit PrerequisiteInstaller.Arguments.txt and provide file paths to the
installation source for each prerequisite switch by using the following syntax:
/switch: 

Where /switch is a valid switch and  is a path of the installation source.
The following example shows a complete arguments file that uses a file share as a common
installation point. Do not include carriage returns in your file.
/PowerShell:"\WINDOWS6.1-KB2506143-x64.msu"
/NETFX:"\netfx_full_x64.msi" /IDFX:"\Windows6.1-KB974405x64.msu" /sqlncli: "\sqlncli.msi" /Sync:
"\Synchronization.msi"
/AppFabric:"\WindowsServerAppFabricSetup_x64.exe"
/IDFX11:"\MicrosoftIdentityExtensions-64.msi"
/MSIPCClient:"\setup_msipc_x64.msi"
/WCFDataServices:"\WcfDataServices.exe"
/KB2671763:"\AppFabric1.1-RTM-KB2671763-x64-ENU.exe"

3. After you finish editing PrerequisiteInstaller.Arguments.txt, save your edits, and verify that this file
is in the same directory as PrerequisiteInstaller.exe.
Use the following procedure to install the prerequisites.
To install the prerequisites using an arguments file
1. Run PrerequisiteInstaller.exe at the command prompt to install the prerequisites.
Caution:
If you are prompted to click Finish to restart the system, do not do so. Instead, click
Cancel. For more information, see Known issues you continue with the next step.
2. Restart the system manually.

97

3. At the command prompt type the following command and then press Enter:
PrerequisiteInstaller.exe

Known issues
There are two known issues that affect the use of an arguments file:


Using line breaks in the arguments file
If you create an arguments file and use line breaks to put each switch and argument on a separate
line, the prerequisite installer fails. The workaround is to enter all the switch and argument pairs
on a single line.



After a computer restart, the arguments file is not used
After a restart, PrerequisiteInstaller.exe executes the startup command file, which contains a
/continue flag. The /continue flag forces the installer to ignore the arguments file.
You must prevent a restart by deleting the startup task in this command file by using one of the
following options:
Option 1

1. Run PrerequisiteInstaller.exe by double-clicking it. The program will display the first screen
with the list of prerequisites.
2. Click Cancel. PrerequisiteInstaller.exe deletes the startup task.
Option 2

1. From the Start menu, choose Run and then type regedit to open the registry.
2. Open the key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell
Folders.
3. Check the value for "Common Startup". This shows the directory where the startup tasks are
listed.
4. Close the registry editor without making any changes.
5. Navigate to the startup directory, which is usually
\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup.
6. Delete the startup task by deleting "SharePointServerPreparationToolStartup_0FF1CE14-00000000-0000-000000000000.cmd".

98

See also
Capabilities and features in SharePoint 2013 Resource Center
Installation and Deployment for SharePoint 2013 Resource Center

99

Install SharePoint 2013
Applies to: SharePoint Server 2013, SharePoint Foundation 2013
Topic Last Modified: 2013-12-18
Summary: Introduces articles that describe how to install SharePoint 2013 in various topologies, on

both physical and virtual environments.
Testing and implementing SharePoint 2013 solutions at different stages of the deployment life cycle
requires deployments in various topologies.
The following articles on TechNet provide information about how to deploy SharePoint 2013 on one
or more servers to create different topologies that you can use for testing and implementing
SharePoint 2013 solutions at different stages of the deployment life cycle.

TechNet articles about how to install and configure
SharePoint 2013
The following articles about how to install and configure SharePoint 2013 are available to view online.
Writers update articles on a continuing basis as new information becomes available and as users
provide feedback.

Description

Content
Install SharePoint 2013 on a single server with
SQL Server

Describes how to install SharePoint 2013 on a
single server. This deployment uses SQL Server
and can easily be scaled out to create two- and
three-tier farm topologies.

Install SharePoint 2013 on a single server with a
built-in database

Explains how to install SharePoint 2013 on a
single server. This deployment uses SQL Server
Express and is typically used for evaluating
SharePoint 2013.

100

Description

Content
Install SharePoint 2013 across multiple servers for
a three-tier farm

Describes how to install SharePoint 2013 on
multiple servers. This deployment uses SQL Server
and the resulting three-tier topology provides the
foundation for implementing any solution.

Install and configure a virtual environment for
SharePoint 2013

This article describes how to use Windows
PowerShell to install SharePoint 2013 in a Hyper-V
environment.

Install or uninstall language packs for SharePoint
2013

Describes language packs and how to download,
install, and uninstall them.

Add web or application servers to farms in
SharePoint 2013

Explains how to add a web or application server
to a farm. The procedures in this article apply to a
SharePoint 2013 farm that consists of at least two
tiers. They should not be used for converting a
single server deployment to a multiple server
farm.

Add a database server to an existing farm in
SharePoint 2013

Provides information about how to add a new
database server to an existing SharePoint 2013
farm.

Remove a server from a farm in SharePoint 2013

Describes how to remove a web server,
application server, or a database server from a
SharePoint 2013 farm.

Uninstall SharePoint 2013

Describes how to remove SharePoint 2013 from a
computer.

Install and configure a virtual environment for
SharePoint 2013

Learn about permissions, accounts, security
settings, and what you have to do to prepare your
Windows Server 2008 Hyper-V environment for
SharePoint 2013.

101

Additional resources about how to install and
configure SharePoint 2013
The following resources about how to install and configure SharePoint 2013 are available from other
subject matter experts.

Content

Description

Installation and Deployment for
SharePoint 2013 Resource
Center

Visit the Resource Center to
access videos, Community Sites,
documentation, and more.

See also
Capabilities and features in SharePoint 2013 Resource Center
Installation and Deployment for SharePoint 2013 Resource Center

102

Install SharePoint 2013 on a single server
with a built-in database
Applies to: SharePoint Server 2013, SharePoint Foundation 2013
Topic Last Modified: 2013-12-18
Summary: Learn how to install SharePoint 2013 with a built-in database on a single server.

You can quickly publish a SharePoint site by deploying SharePoint 2013 on a single server that has a
built-in database. This configuration is useful if you want to evaluate SharePoint 2013 features and
capabilities, such as collaboration, document management, and search. This configuration is also
useful if you are deploying only a few websites and you want to minimize administrative overhead.
This article contains required information and procedures to install and configure SharePoint 2013
with a built-in database on a single server.
In this article:


Overview



Before you begin



Install SharePoint 2013



Post-installation steps

Important:
The steps in this article apply to SharePoint Foundation 2013 and SharePoint Server 2013. The
procedures in this topic install Microsoft SQL Server 2008 R2 SP1 Express Edition. However,
User Profile synchronization does not work with the Express Edition. If you intend to use User
Profile synchronization with SharePoint Server 2013, you must choose a different installation
scenario.

Overview
When you deploy SharePoint 2013 on a single server that has a built-in database by using the default
settings, Setup installs Microsoft SQL Server 2008 R2 SP1 Express Edition and the SharePoint product.
The SharePoint Products Configuration Wizard creates the configuration database and content
database for the SharePoint sites. Additionally, the SharePoint Products Configuration Wizard installs
the SharePoint Central Administration website and creates your first SharePoint site collection.

103

Note:
This article does not describe how to install SharePoint 2013 in a farm environment, or how to
upgrade from previous releases of SharePoint 2013. For more information about how to
install SharePoint 2013 on a single-server farm, see Install SharePoint 2013 on a single server
with SQL Server. For more information about how to install SharePoint 2013 on a multiple
server farm, see Install SharePoint 2013 across multiple servers for a three-tier farm. For more
information about upgrade, see Upgrade to SharePoint 2013.
Note:
The Distributed Cache service gives you a complete social computing experience. For more
information about the Distributed Cache service, see Overview of microblog features, feeds,
and the Distributed Cache service in SharePoint Server 2013, Manage the Distributed Cache
service in SharePoint Server 2013, Plan for feeds and the Distributed Cache service in
SharePoint Server 2013, and What's new in authentication for SharePoint 2013
Consider the following restrictions of this method of installation:


You cannot use this method on a domain controller or in a workgroup environment.



This method is not supported for production on a domain controller.



If your computer is in a workgroup, you cannot install AppFabric for Windows Server.



A Microsoft SQL Server 2008 R2 SP1 Express Edition database cannot be larger than 10 GB.



You cannot use user profile synchronization in this type of installation. If you want to use user
profile synchronization, you must use a server farm installation of SharePoint 2013. For more
information, see Install SharePoint 2013 on a single server with SQL Server or Install SharePoint
2013 across multiple servers for a three-tier farm, and Synchronize user and group profiles in
SharePoint Server 2013.

Before you begin
Before you begin installation, make sure that you have met all hardware and software requirements.
For more information, see Hardware and software requirements for SharePoint 2013. To make sure
that you perform a clean installation of SharePoint 2013, you must first remove any earlier version of
SharePoint 2013 and any pre-release prerequisites if installed.

Install SharePoint 2013
To install and configure SharePoint 2013, follow these steps:

104

1. Run the Microsoft SharePoint Products Preparation Tool.
2. Run Setup, which installs Microsoft SQL Server 2008 R2 SP1 Express Edition and the SharePoint
product.
3. Run the SharePoint Products Configuration Wizard, which installs and configures the configuration
database, the content database, and installs the SharePoint Central Administration website. This
wizard also creates your first SharePoint site collection.
4. Configure browser settings.
5. Perform post-installation steps.
Important:
To complete the following procedures, you must be a member of the Administrators group on
the computer on which you are installing SharePoint 2013.

Run the Microsoft SharePoint Products Preparation Tool
Because the prerequisite installer downloads components from the Microsoft Download Center, you
must have Internet access on the computer on which you are running the installer. Use the following
procedure to install software prerequisites for SharePoint 2013.
To run the Microsoft SharePoint Products Preparation Tool
1. Verify that the user account that is performing this procedure is the Setup user account. For
information about the Setup user account, see Initial deployment administrative and service
accounts in SharePoint 2013.
2. In the folder where you downloaded the SharePoint 2013 software, locate and then run
prerequisiteinstaller.exe.
3. On the Welcome to the Microsoft SharePoint Products Preparation Tool page, click Next.
4. On the License Terms for software products page, review the terms, select the I accept the
terms of the License Agreement(s) check box, and then click Next.
5. On the Installation Complete page, click Finish.
6. After you complete the Microsoft SharePoint Products Preparation Tool, you must also install the
following:


KB 2554876



KB 2708075

105



KB 2759112



KB 2765317

Run Setup
The following procedure installs Microsoft SQL Server 2008 R2 SP1 Express Edition and the SharePoint
product. At the end of Setup, you can choose to start the SharePoint Products Configuration Wizard,
which is described later in this section.
To run Setup
1. Verify that the user account that is performing this procedure is the Setup user account. For
information about the Setup user account, see Initial deployment administrative and service
accounts in SharePoint 2013.
2. On the SharePoint Server 2013 or SharePoint Foundation 2013 Start page, click Install
SharePoint Server or Install SharePoint Foundation.
3. On the Enter Your Product Key page, enter your product key, and then click Continue.
4. On the Read the Microsoft Software License Terms page, review the terms, select the I accept
the terms of this agreement check box, and then click Continue.
5. On the Server Type tab, click Standalone.
6. When Setup finishes, a dialog box prompts you to complete the configuration of your server.
Ensure that the Run the SharePoint Products Configuration Wizard now check box is selected.
7. Click Close to start the configuration wizard.
Note:
If Setup fails, check log files in the Temp folder of the user account that you used to run
Setup. Ensure that you are logged in using the same user account, and then type %temp%
in the location bar in Windows Explorer. If the path in Windows Explorer resolves to a
location that ends in a "1" or "2", you will have to navigate up one level to view the log
files. The log file name is SharePoint Server Setup (
Source Exif Data: 
File Type                       : PDF
File Type Extension             : pdf
MIME Type                       : application/pdf
PDF Version                     : 1.5
Linearized                      : No
Page Count                      : 1156
Language                        : en-US
Tagged PDF                      : Yes
Author                          : Microsoft Corporation
Creator                         : Microsoft® Word 2010
Create Date                     : 2014:11:12 10:44:52-08:00
Modify Date                     : 2014:11:12 10:44:52-08:00
Producer                        : Microsoft® Word 2010
EXIF Metadata provided by EXIF.tools

Navigation menu