Рекомендации по установке SharePoint Servers 2016 и 2019 Best practices for installation for SharePoint Servers 2016 and 2019

ПРИМЕНИМО К: 2013 2016 2019 SharePoint в Microsoft 365 APPLIES TO: 2013 2016 2019 SharePoint in Microsoft 365

Введение Introduction

Установка новой версии дает возможность просмотреть, что вы делали в прошлом, что нужно сделать в настоящее время, а также получить представление о ваших целях на будущее. Installing a new version gives the opportunity to review what you have done in the past, currently and envision your goals going forward.

При подготовке к установке необходимо учитывать следующее: As you prepare for your installation, consider the following:

• У вас есть возможность использовать Server (локально) в обозримом будущем? • Are you staying on Server (on-premises) for the foreseeable future?

• В настоящее время вы имеете существующие элементы системы в облаке? • Do you currently have existing pieces of your system in the cloud?

• Какие настройки или возможности вы больше не используете? • What customizations or features do you no longer use?

• Вы готовы к современным методам работы? • Are you ready for a modern approach?

• Что работает хорошо в настоящее время, а что нет? • What is working well now, and what isn’t?

Оцените, какие функции или службы больше не поддерживаются Evaluating what features or services are no longer supported

Во время установки новой версии SharePoint Server выделите время на оценку любого из сервисных приложений или функций, которые вы в настоящее время используете, но которые больше не поддерживается или включены в список «Не рекомендуется к использованию». As you install a new version of SharePoint Server, take time to evaluate any service applications or features that you currently rely on that are no longer supported or listed as “deprecated”.

Если вам необходимы какие-либо из данных приложений или функций, составьте план того, как вы предполагаете заменить соответствующие функции, или же примите решение об отказе от этих функций, если они больше не используется активно вашей компании. If you have a reliance on any of the following, plan what you intend to replace that functionality with or if it is no longer being used actively by your company and it is time to phase it out.

Воспользуйтесь поддерживаемыми сервисными приложениями и рассмотрите возможность поэтапного отказа от использования не рекомендованных к использованию сервисных приложений. Для любых инструментов SharePoint BI вы можете использовать в качестве замены Power BI: Use supported service applications and consider phasing out the use of these deprecated service applications. For any of the SharePoint BI tools, you can use PowerBI as a replacement:

Не рекомендованная к использованию функция или служба Deprecated feature or service
Access Services и Access Services 2010 Access Services and Access Services 2010
Службы преобразования документов Document Conversions services
Соединитель Lotus Notes Lotus Notes Connector
Службы машинного перевода Machine Translation Services
PerformancePoint Service PerformancePoint Service
Служба преобразования PowerPoint PowerPoint Conversion Service
Служба графики Visio Visio Graphics Service
Службы автоматизации Word Word Automation Services
InfoPath InfoPath
Workflow Manager Workflow Manager

Настройки Customizations

Если у вас уже установлен SharePoint Server, скорее всего, вы уже внесли некоторые изменения в соответствии с потребностями вашего бизнеса. If you currently have SharePoint Server installed, chances are you have made some customizations to suit your business needs.

Если часть вашей организации уже использует облачные технологии или вы планируете использовать их в будущем, необходимо учитывать, что определенные настройки нельзя перенести в SharePoint. Вот список некоторых из них: If you already have a portion of your company in the cloud or plan to do so in the future, know that certain customizations will not transfer to SharePoint. Here is a list of few of those:

• Рабочие процессы, оповещения пользователя и пользовательские эталонные страницы нельзя перенести в SharePoint. Мы рекомендуем использовать службу Power Automate для переноса рабочих процессов, выполнить перенастройку оповещений после миграции и использовать стандартные средства настройки для изменения внешнего вида и функций сайта. • Workflows, User Alerts, and custom master pages will not transfer to SharePoint. We recommend you use Power Automate for workflows, reconfigure alerts once migrated, and use the out of the box customization for site look and feel changes.

• Настраиваемая схема поиска не будет передана в SharePoint. Если выполняется миграция контента в SharePoint, может потребоваться повторное применение какой-либо нужной вам настраиваемой конфигурации схемы поиска. • Custom Search schema will not transfer to SharePoint. When content is migrated to SharePoint, you may want to re-implement any custom Search schema configuration necessary.

• Использование надстроек для SharePoint с моделью низкого доверия. Дополнительные сведения см. в статье Создание надстройки SharePoint, использующей авторизацию с низким уровнем доверия. • Use SharePoint Add-ins with the Low Trust model. To learn more, see Creating SharePoint add in that use low trust authorization.

• Используйте решения SharePoint Framework для настраиваемых бизнес-решений. Чтобы приступить к работе, см. статью Общие сведения о SharePoint Framework. • Use SharePoint Framework solutions for custom business solutions. To get started, see SharePoint Framework Overview.

Подключение ваших данных современными методами Connect your data the modern way

Вы используете службу подключения к бизнес-данным (Business Data Connectivity Services, BCS) для подключения к данным? Доступны ли источники данных через веб-службу? Убедитесь, что все источники данных доступны через другие средства, например, веб-службы. Do you use Business Data Connectivity Services (BCS) for any of your data connections? Are your data sources available by using a web service? verify all data sources are available via other means, such as a web service.

• Где находятся данные? Где они будут размещены? • Where is your data? Where will it reside?

Вместо того чтобы использовать BCS для отображения ваших данных, вы можете использовать Power BI и шлюз управления данными. Instead of using BCS to display your data, you could use PowerBI and a Data Management Gateway.

Внедрение современных возможностей Adopt the modern features

Если часть ваших сайтов уже находится в облаке, либо если вы собираетесь перейти в онлайн в будущем, использование современных функций уже сейчас поможет избежать проблем в будущем. If a portion of your sites are already in the cloud, or if you intend on moving online in the future, adopting the modern features now will help “futureproof” your installation.

• Использование групп Microsoft 365 и Power Automate. Прекращение использования электронной почты, почтовых ящиков сайта и мобильных учетных записей (SMS и текстовые сообщения) • Use Microsoft 365 Groups and Power Automate. Retire the use of email, Site mailboxes, or Mobile Accounts (SMS/Text Messaging)

• Для решений, которые создают помехи и/или изменяют канал HTTP, можно использовать политики условного доступа Azure, застраховавшись от проблем в будущем с помощью прокси-приложения Microsoft Azure AD. Дополнительные сведения по использованию AD FS см. в статье Политики управления доступом в Windows Server 2016 AD FS. • Solutions that intercept and/or modify the HTTP pipeline you could use Azure Conditional Access Policies by fronting the farm by using the Azure AD App Proxy. For more information on how to use AD FS, see Access Control Policies in Windows Server 2016 AD FS.

• Внедряйте только необходимые политики для веб-приложений, такие как самостоятельное создание сайтов, кэш объектов и учетные записи программы-обходчика для поиска, но постарайтесь избежать дальнейшего использования политик веб-приложений, поскольку они недоступны в SharePoint. • Implement only the necessary Web Application Policies, such as self-service site creation, Object Cache, and Search Crawler accounts, but try to avoid further usage of Web Application Policies as they are not available in SharePoint.

• В целях обеспечения безопасности постепенно отказывайтесь от использования анонимных сайтов на SharePoint Server. Кроме того, обратите внимание на то, что в SharePoint в Microsoft 365 доступ к анонимным сайтам не предоставляется. • For security purposes, phase out the use of anonymous SharePoint Server sites. Also note that anonymous site access is not available in SharePoint in Microsoft 365.

Install SharePoint Servers 2016 or 2019 on one server

APPLIES TO: 2013 2016 2019 SharePoint in Microsoft 365

You can install and configure SharePoint Servers 2016 or 2019 on a single server if you are hosting only a few sites for a limited number of users or if you want to create a trial or development environment. This configuration is also useful if you want to configure a farm to meet your needs first, and then add servers to the farm at a later stage.

In previous versions of SharePoint, a single server installation automatically installed SQL Server Express. In SharePoint Servers 2016 and 2019, a single server installation contains only SharePoint. SQL Server can be installed on the same server or on a separate server; both scenarios are supported. For better performance we recommend installing SQL Server on a separate server.

Overview

After you have completed setup and the SharePoint Products Configuration Wizard, you will have installed binaries, configured security permissions, configured registry settings, configured the configuration database, configured the content database, and installed the SharePoint Central Administration web site. Next, you can choose to run the Farm Configuration Wizard to configure the farm, select the services that you want to use in the farm, and create the first site collection, or you can manually perform the farm configuration at your own pace.

Before you install SharePoint Servers 2016 or 2019 on a single server

Before you begin to install and configure SharePoint Servers 2016 or 2019, do the following:

For SharePoint Server 2016, ensure that you have met all hardware and software requirements. You must have a 64-bit version of Windows Server 2012 R2. To host SharePoint databases, you must also have a 64-bit version of SQL Server 2014 SP1. For more information about these requirements, such as specific updates that you must install, see Hardware and software requirements for SharePoint Server 2016.

For SharePoint Server 2019, ensure that you have met all hardware and software requirements. You must have a 64-bit version of Windows Server 2016. To host SharePoint databases, you must also have a 64-bit version of SQL Server 2016 or 2017. For more information about these requirements, such as specific updates that you must install, see Hardware and software requirements for SharePoint Server 2019.

Ensure that you perform a clean installation of SharePoint Servers 2016 or 2019.

Ensure that you are prepared to set up the required accounts by using appropriate permissions. For detailed information, see Initial deployment administrative and service accounts in SharePoint Server.

Ensure the Max degree of parallelism is set to 1. For additional information about max degree of parallelism see, Configure the max degree of parallelism Server Configuration Option.

Security note: As a security best practice, we recommend that you install SharePoint Servers 2016 or 2019 by using least-privilege administration.

If you decide to install prerequisites manually, you can still run the Microsoft SharePoint Products Preparation Tool to verify which prerequisites are required on each server.

Install SharePoint Servers 2016 or 2019 on a single server

To install and configure SharePoint Server 2016 or 2019 on a single server, you will follow these steps:

Run the Microsoft SharePoint Products and Technologies Preparation Tool, which installs all prerequisites to use SharePoint Server.

Run Setup, which installs binaries, configures security permissions, and edits registry settings for SharePoint Servers 2016 or 2019.

Run SharePoint Products Configuration Wizard, which installs and configures the configuration database, installs and configures the content database, and installs the SharePoint Central Administration web site.

Configure browser settings.

Run the Farm Configuration Wizard, which configures the farm, creates the first site collection, and selects the services that you want to use in the farm.

Perform post-installation steps.

To complete the following procedures, the account that you use must be a member of the Administrators group on the computer on which you are installing SharePoint Server. For information about user accounts, see Initial deployment administrative and service accounts in SharePoint Server.

Run the Microsoft SharePoint Products Preparation Tool

Because the prerequisite installer downloads components from the Microsoft Download Center, you must have Internet access on the computer on which you are running the installer. Use the following procedure to install software prerequisites for SharePoint Servers 2016 or 2019.

To run the Microsoft SharePoint Products Preparation Tool

Verify that the user account that is performing this procedure is the farm administrator user account. For information about the farm administrator user account, see Initial deployment administrative and service accounts in SharePoint Server.

In the SharePoint Server installation disc image software, mount the ISO file, and click the splash.hta file. The SharePoint Server splash screen is displayed.

Click Install software prerequisites.

On the Welcome to the SharePoint Products Preparation Tool page, click Next.

On the License Terms for software products page, review the terms, select the I accept the terms of the License Agreement(s) check box, and then click Next.

On the Your system needs to restart to continue page, click Finish to restart the computer.

Repeat steps 2-4.

On the Installation Complete page, click Finish.

Run Setup

The following procedure installs binaries, configures security permissions, and edits registry settings for SharePoint Server. At the end of Setup, you can choose to start the SharePoint Products Configuration Wizard, which is described later in this section.

To run Setup

Verify that the user account that is performing this procedure is the farm administrator user account. For information about the farm administrator user account, see Initial deployment administrative and service accounts in SharePoint Server.

On the SharePoint Server Start page, click Install SharePoint Server.

On the Enter Your Product Key page, enter your product key, and then click Continue.

On the Read the Microsoft Software License Terms page, review the terms, select the I accept the terms of this agreement check box, and then click Continue.

Optional: To install SharePoint Server at a custom location, or to store search index files at a custom location, click the File Location tab, and then either type the custom location or click Browse to find the custom location.

If you intend to use this computer as a search server, we recommend that you store the search index files on a separate storage volume or partition. Any other search data that needs to be stored is stored in the same location as the search index files. You can only set this location at installation time.

Click Install Now.

When Setup finishes, a dialog prompts you to complete the configuration of your server. Ensure that the Run the SharePoint Products Configuration Wizard now check box is selected.

Click Close to start the configuration wizard.

If Setup fails, check log files in the Temp folder of the user account you used to run Setup. Ensure that you are logged in using the same user account and then type %temp% in the location bar in Windows Explorer. If the path in Windows Explorer resolves to a location that ends in a «1» or «2», you have to navigate up one level to view the log files. The log file name is SharePoint Server Setup ( ).

Run the SharePoint Products Configuration Wizard

Use the following procedure to install and configure the configuration database and the content database, and to install the SharePoint Central Administration website.

To run the SharePoint Products Configuration Wizard

Verify that the user account that is performing this procedure is the farm administrator user account. For information about the farm administrator user account, see Initial deployment administrative and service accounts in SharePoint Server.

If you have closed the SharePoint Products Configuration Wizard, you can access it by clicking Start, point to All Apps, click Microsoft SharePoint Products, and then click SharePoint Products Configuration Wizard. If the User Account Control dialog appears, click Continue.

On the Welcome to SharePoint Products page, click Next.

In the dialog that notifies you that some services might have to be restarted during configuration, click Yes.

On the Connect to a server farm page, click Create a new server farm, and then click Next.

On the Specify Configuration Database Settings page, do the following:

In the Database server box, type the name of the computer that is running SQL Server.

In the Database name box, type a name for your configuration database or use the default database name. The default name is SharePoint_Config.

In the Username box, type the user name of the farm administrator service account. Ensure that you type the user name in the format DOMAIN\username.

Security note: The farm administrator service account is used to access your configuration database. It also acts as the application pool identity account for the SharePoint Central Administration application pool, and it is the account under which the Microsoft SharePoint Foundation Timer service runs. The SharePoint Products Configuration Wizard adds this account to the SQL Server Login accounts, the SQL Server dbcreator server role, and the SQL Server securityadmin server role. The user account that you specify as the farm administrator service account has to be a domain user account. However, it does not have to be a member of any specific security group on your SharePoint servers or your database servers. We recommend that you follow the principle of least-privilege and specify a user account that is not a member of the Administrators group on your SharePoint servers or your database servers.

In the Password box, type the user password.

Click Next.

On the Specify Farm Security Settings page, type a passphrase, and then click Next.

Although a passphrase resembles a password, it is usually longer to improve security. It is used to encrypt credentials of accounts that are registered in SharePoint Server. For example, the SharePoint Server server farm administrator service account that you provide when you run the SharePoint Products Configuration Wizard. Ensure that you remember the passphrase, because you must use it every time that you add a server to the farm.

Ensure that the passphrase meets the following criteria:

Contains at least eight characters

Contains at least three of the following four character groups:

English uppercase characters (from A through Z)

English lowercase characters (from a through z)

Numerals (from 0 through 9)

Nonalphabetic characters (such as !, $, #, %)

On the Specify Server Role page, choose the appropriate role, click Next.

For a single server farm, we recommend choosing the Single Server Farm role, although you can select a Custom role if you want to individually manage the services instances that run on the server. You can change the role of a server later if you change your mind or want to expand your farm by adding additional servers.

On the Configure SharePoint Central Administration Web Application page, do the following:

Either select the Specify port number check box and type the port number that you want the SharePoint Central Administration web application to use, or leave the Specify port number check box cleared if you want to use the default port number.

Click either NTLM or Negotiate (Kerberos).

Click Next.

On the Completing the SharePoint Products Configuration Wizard page, review your configuration settings to verify that they are correct, and then click Next.

The Advanced Settings option is not available in SharePoint Servers 2016 and 2019.

On the Configuration Successful page, click Finish. When the wizard closes, setup opens the web browser and connects to Central Administration.

If the SharePoint Products Configuration Wizard fails, check the PSCDiagnostics log files, which are located on the drive on which SharePoint Servers 2016 and 2019 are installed, in the %COMMONPROGRAMFILES%\Microsoft Shared\Web Server Extensions\16\LOGS folder.

If you are prompted for your user name and password, you might have to add the SharePoint Central Administration web site to the list of trusted sites and configure user authentication settings in Internet Explorer. You might also want to disable the Internet Explorer Enhanced Security settings. If you see a proxy server error message, you might have to configure proxy server settings so that local addresses bypass the proxy server. Instructions for configuring proxy server settings are provided in the following section. For more information about how to configure browser and proxy settings, see Configure browser settings.

Configure browser settings

After you run the SharePoint Products Configuration Wizard, you should confirm that SharePoint Server works correctly by configuring additional settings in Internet Explorer.

If you are not using Internet Explorer, you might have to configure additional settings for your browser. For information about supported browsers, see Plan browser support in SharePoint Servers 2016 and 2019.

To confirm that you have configured browser settings correctly, log on to the server by using an account that has local administrative credentials. Next, connect to the SharePoint Central Administration web site. If you are prompted for your user name and password when you connect, perform the following procedures:

Add the SharePoint Central Administration website to the list of trusted sites

Disable Internet Explorer Enhanced Security settings

If you receive a proxy server error message, perform the following procedure:

• Configure proxy server settings to bypass the proxy server for local addresses

To add the SharePoint Central Administration website to the list of trusted sites

1. Verify that the user account that completes this procedure has the following credentials:

• The user account is a member of the Administrators group on the computer on which you are performing the procedure.

In Internet Explorer, on the Tools menu, click Internet Options.

On the Security tab, in the Select a zone to view or change security settings area, click Trusted Sites, and then click Sites.

Clear the Require server verification (https:) for all sites in this zone check box.

In the Add this web site to the zone box, type the URL to your site, and then click Add.

Click Close to close the Trusted Sites dialog.

Click OK to close the Internet Options dialog.

To disable Internet Explorer Enhanced Security settings

1. Verify that the user account that completes this procedure has the following credentials:
• The user account is a member of the Administrators group on the computer on which you are performing the procedure.

Click Start, point to All Apps, point to Administrative Tools, and then click Server Manager.

In Server Manager, select the root of Server Manager.

In the Security Information section, click Configure IE ESC.

The Internet Explorer Enhanced Security Configuration dialog appears.

In the Administrators section, click Off to disable the Internet Explorer Enhanced Security settings, and then click OK.

To configure proxy server settings to bypass the proxy server for local addresses

1. Verify that the user account that completes this procedure has the following credentials:
• The user account is a member of the Administrators group on the computer on which you are performing the procedure.

In Internet Explorer, on the Tools menu, click Internet Options.

On the Connections tab, in the Local Area Network (LAN) settings area, click LAN Settings.

In the Automatic configuration area, clear the Automatically detect settings check box.

In the Proxy Server area, click the Use a proxy server for your LAN check box.

Type the address of the proxy server in the Address box.

Type the port number of the proxy server in the Port box.

Select the Bypass proxy server for local addresses check box.

Click OK to close the Local Area Network (LAN) Settings dialog.

Click OK to close the Internet Options dialog.

Run the Farm Configuration Wizard

You have now completed setup and the initial configuration of SharePoint Server. You have created the SharePoint Central Administration web site. You can now configure your farm and sites, and you can select services by using the Farm Configuration Wizard.

To run the Farm Configuration Wizard

Verify that the user account that is performing this procedure is the farm administrator user account. For information about the farm administrator user account, see Initial deployment administrative and service accounts in SharePoint Server.

On the SharePoint Central Administration home page, on the Quick Launch, click Configuration Wizards, and then click Launch the Farm Configuration Wizard.

On the Help Make SharePoint Better page, click one of the following options, and then click OK:

Yes, I am willing to participate (Recommended.)

No, I don’t want to participate.

On the Configure your SharePoint farm page, next to Yes, walk me through the configuration of my farm using this wizard, click Start the Wizard.

On the Service Applications and Services page, in the Service Account section, click the service account option that you want to use to configure your services.

Security note: For security reasons, we recommend that you use a different account from the farm administrator account to configure services in the farm.

If you decide to use an existing managed account — that is, an account of which SharePoint Server 2016 is aware — make sure that you click that option before you continue.

In the Services section, review the services that you want to use in the farm, and then click Next.

On the Create Site Collection page, do the following:

In the Title and Description section, in the Title box, type the name of your new site.

Optional: In the Description box, type a description of what the site contains.

In the Web Site Address section, select a URL path for the site.

In the Template Selection section, in the Select a template list, select the template that you want to use for the top-level site in the site collection.

To view a template or a description of a template, click any template in the Select a template list.

Click OK.

On the Configure your SharePoint farm page, review the summary of the farm configuration, and then click Finish.

Post-installation steps

After you install and configure SharePoint Server, your browser window opens to the Central Administration web site of your new SharePoint site. Although you can start adding content to the site or customizing the site, we recommend that you first perform the following administrative tasks.

Configure usage and health data collection You can configure usage and health data collection in your server farm. The system writes usage and health data to the logging folder and to the logging database.

Configure diagnostic logging You can configure diagnostic logging that might be required after initial installation or upgrade. The default settings are sufficient for most situations. Depending upon the business needs and life-cycle of the farm, you might want to change these settings.

Configure incoming e-mail You can configure incoming e-mail so that SharePoint sites accept and archive incoming e-mail. You can also configure incoming e-mail so that SharePoint sites can archive e-mail discussions as they occur, save e-mailed documents, and show e-mailed meetings on site calendars. In addition, you can configure the SharePoint Directory Management Service to provide support for e-mail distribution list creation and administration.

Configure outgoing email You can configure outgoing email so that your Simple Mail Transfer Protocol (SMTP) server sends email alerts to site users and notifications to site administrators. You can configure both the «From» email address and the «Reply» email address that appear in outgoing alerts.

Configure Search settings You can configure Search settings to crawl the content in SharePoint Server.

Читайте также:  What to do if linux crashes