Module 6: Managing Users and Sites
Module 6: Managing Users and Sites
Contents Overview Lesson: Managing Profile Databases Lab A: Managing Profile Databases Lesson: Managing Audiences Lesson: Managing Personal Sites 1 2 12 16 21
Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, e-mail address, logo, person, place or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property. 2004 Microsoft Corporation. All rights reserved. Microsoft, MS-DOS, Windows, Windows NT, Windows Server, Active Directory, BizTalk, FrontPage, InfoPath, Microsoft Press, MSDN, OneNote, Outlook, PowerPoint, SharePoint, Visual Basic, Visual Studio, and Windows Media are either registered trademarks or trademarks of Microsoft Corporation in the U.S.A. and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners.
iii
Instructor Notes
Presentation: 1 hour 45 minutes Lab: 30 minutes This module describes how students can manage the portal sites user profiles, audiences, and personal sites. User profiles provide detailed information about individuals in an organization. A user profile organizes and displays all of the properties related to each user, as well as documents and other items related to that user. Audiences allow organizations to target content to users based on their job or task, as defined by their membership in a Microsoft Windows 2003 security group, distribution list, organizational reporting structure, or the public properties in their user profiles. Every Microsoft SharePoint Portal Server user has the option of creating a personal site called My Site. My Site is a place to save and share your work, a way to find and connect with other people in the organization, a way to see another users work, and a way to customize how other people in the organization view a users work. After completing this module, students will be able to:
! ! !
Required materials
Microsoft PowerPoint file 2012B_06.ppt. Creating and Editing a User Profile.swf and its associated multimedia documents.
Important It is recommended that you use PowerPoint 2002 or later to display the slides for this course. If you use PowerPoint Viewer or an earlier version of PowerPoint, all the features of the slides may not be displayed correctly. Preparation tasks To prepare for this module:
! !
Read all of the materials for this module. Complete the practices and demos.
iv
Remind students that any profiles that need to be imported must be part of the Active Directory on their specified source domain. Incremental import saves time; however administrators should remember that any new profiles in the Active Domain will be imported to the profile database at the scheduled date and time. Therefore, if there are profiles in Active Directory that should not be authenticated in the portal profile databases, those profiles will have to be removed manually after they have been imported.
Lab Results
Performing the labs in this module will introduce the following configuration change:
!
Exercise 1: Importing Profiles: At the end of this exercise, students will import user profiles from Active Directory on the domain ADVWORKS into the portal site http://paris on the virtual server PARIS. Exercise 2: Configuring a Regular Profile Import: By the end of this exercise, students will have configured a profile import to perform a full import every week on Sunday and an incremental import every day at 12:00 a.m. The import is from the Active Directory profile on domain ADVWORKS into the portal site http://PARIS.
Overview
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Introduction In this module, you will learn how to manage user profile databases, audiences, and personal sites for MicrosoftSharePoint Products and Technologies. User profiles provide detailed information about individuals in an organization. A user profile organizes and displays all of the properties related to each user, as well as documents and other items related to that user. Audiences allow organizations to target content to users based on their jobs or tasks, as defined by their membership in Microsoft Windows 2003 security groups, distribution lists, organizational reporting structures, or the public properties in their user profiles. Every SharePoint Portal Server user also has the option of creating a personal site called My Site. My Site is a place to save and share the users work, a way to find and connect with other people in the organization, a way to see another users work, and a way to customize how other people in the organization view the users work. Objectives After completing this module, you will be able to:
! ! !
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Introduction SharePoint Portal Server presents user profiles in three distinct views:
! ! !
The personal view of a personal site is the view that only that user can see. The public view of a personal site is the view seen by all other portal users. The edit view allows users to make changes to their user profiles.
User profiles are managed from the Manage User Profiles page. If you have Manage Profiles rights, you can add, edit, or delete user profiles. You can also import user profiles from the Active Directory directory service. People may or may not be able to edit some of the properties of their user profiles from their personal pages. The Manage User Profiles page also contains a brief summary of user profiles for the site, as well as links for adding, editing, and deleting the properties found in user profiles. You can also group users into audiences based on common properties, such as job role or tasks within the organization, and then target content to these groups appropriately. You create audiences by establishing membership rules and then compiling the audience from the user profile database. Since the rules for audiences and the users who match them can change over time, you must compile audiences regularly to determine current membership.
Caution Creating user profiles on the local server may have security implications. Active Directory is the preferred method for managing user profiles. See http://www.microsoft.com/security/ for the best-practices in managing user profiles. Lesson objectives After completing this lesson, you will be able to:
! ! !
Add and edit a user profile. Import user profiles. Add, edit, and view user profile properties.
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Introduction If a user profile is not available by using Active Directory as an import source, you must manually enter data by adding a user profile. Once your profile is added or imported, you can update information by editing your profile. You can add new profiles using the default user profile as a starting point. Editing the default profile does not change the set of properties displayed in that user profile. To do that, you must add, edit, or delete the individual profile properties from the default user profile. Caution The best security practice is to manage user profiles directly from Active Directory. In this instructor-led practice, use the following values:
Variable Virtual Computer Virtual Computer - Domain controller Virtual Computer - SQL server account_name Value Madrid Glasgow Melbourne Jon Morris
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Introduction You can import user profile information from Active Directory. Profile information can include forest permissions and settings, domain settings as well as other Active Directory constructs. This saves time in entering user information for every user in the organization, but may not include all of the properties you want to show for each user. To import user profile information, you must first configure the import settings. After you have configured the import settings, you can import user profile information from the list of actions in the Profile and Import Settings section on the Manage Profile Database page. You can also stop any import currently in progress, and view a log of past imports. In order to do incremental imports, the account that you use to access Active Directory must have Replicate Changes rights. In this instructor-led practice, use the following values:
Variable Virtual Computer Virtual Computer - Domain controller Virtual Computer - SQL server Value Madrid Glasgow Melbourne
3. On the Manage Profile Database page, in the Profile and Import Settings section, ensure the Source of user set is set to Current domain (advworks). Note To select a different set of users, click Configure profile import. 4. After verifying the Source of user set, do NOT proceed. Ordinarily you would click Start full import to apply these settings, but the current configuration on Madrid needs to be preserved for use in later practices and labs. Starting an incremental import
Imported user profiles are displayed on the View User Profiles page. This page has two views:
!
The Active view includes all active user profiles that were imported during the last full import. The Missing from import view includes the user profiles that were imported in the past but were not imported in the previous three full imports because the user profile information was not available from Active Directory.
The following procedure is not necessary to complete as part of the instructorled practice.
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Introduction The set of properties that are included in the user profile might not contain all of the information about users in the organization that you want to include on the site. You can add new properties to enhance those included in the user profile. You can also edit existing properties to change how those properties are displayed in the user profile. You can also map properties in the Active Directory. Note When you add or edit a property mapping, you must run a full import before the changes take effect. In this instructor-led practice use the following values:
Variable Virtual Computer Virtual Computer - Domain controller Virtual Computer - SQL server property_to_add property_type property_length property_to_edit edited_display_name property_to_map Value Madrid Glasgow Melbourne Location string 256 Title Department Title Title
On the View Profile Properties page, the properties available for user profiles are listed and organized by sections. You can add, delete, and edit properties from this page. You can also add, edit, and delete sections, and move properties within and between sections.
10
11
12
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Objective After completing this lab, you will be able to import user profile information from Active Directory onto your portal using the Microsoft SharePoint Portal Server Wizard. Additionally, you will also be able to configure import frequency and import type (full versus incremental) to keep your portal profile database and Active Directory profiles synchronized. Before working on this lab, you must have introductory-level knowledge of:
! ! ! ! ! !
Prerequisites
Microsoft Windows Server 2003. Active Directory Service. Networking Fundamentals. DNS/DHCP. TCP/IP. SharePoint Products and Technologies.
Scenario
You are Suzan Fine, a server administrator at Adventure Works. You need to start a full import of profile data from the Active Directory of the Advworks domain to populate users on the corporate intranet portal site. Additionally, you will need to configure the profile import to perform a full import every week on Sunday and an incremental import every day at 12:00 a.m. For this lab, you should only have the following virtual computers running: 1. 2012_0-Glasgow_DomainController. 2. 2012_1-Dublin_Simple SPS Server. 3. 2012_2-Paris_SPS Server Farm. 4. 2012_3-Melbourne_SQL Server.
Lab setup
13
14
15
12. In the Profile and Import Settings section, you can view your schedules for full and incremental imports. Click Site Settings from the path links above the Manage Profile Database page title. The Site Settings page displays and you can continue your administrative tasks.
16
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Introduction You can target content to audiences in two ways. You can target content within Web Parts so that members of different audiences see different content. Or, you can target items or links in an area to one or more audiences, so that only those audiences view the targeted items. For example, in a default area called Human Resources, a site administrator or the manager of that area may choose to add a news item targeted to all new employees directing them to the New Employee Benefits site. Audiences are managed centrally across one or more server farms hosting SharePoint Portal Server. Audiences apply across one or more portals in a deployment. You must have the Add, Change, or Delete Audiences right to manage audiences. As an audience manager, you can view all members of a specific audience and find the audiences to which a specific user belongs, as well as manage the rules defining audiences and compile audiences as the rules and members of an audience change. Note Audiences are not used to assign rights and permissions. SharePoint Products and Technologies use site groups to grant rights and permissions to users within the portal. Audiences are used to manage how content is distributed, not to enforce security. They push information to a user, not restrict or permit access to information. Lesson objectives After completing this lesson, you will be able to:
! !
17
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Introduction Audiences are used to target content to users based on their jobs or tasks within the organization. Users in an audience will see audience-specific content on the site that is not available to other users. In this instructor-led practice, use the following values:
Variable Virtual Computer Virtual Computer - Domain controller Virtual Computer - SQL server audience_name Value Madrid Glasgow Melbourne Administrators
Creating an audience
! To create an audience
1. If you have not already, log the Madrid virtual computer onto the MADRID (this computer) as Administrator with a password of P@ssw0rd, and then navigate to http://madrid using Internet Explorer. 2. Click Site Settings (upper-right corner), and then in the User Profile, Audiences, and Personal Sites section, click Manage audiences. 3. On the Manage Audiences page, click Create audience. Note You can also click New Audience on the toolbar of the View Audiences page. To access the View Audiences page, click View audiences from the Manage Audiences page. 4. On the Create Audience page, type the audience_name in the Name box. Note You can also enter a description for the audience. 5. Click the Satisfy any of the rules radio button.
18
Important If you need a higher level of control, you can select Satisfy all of the rules. 6. Click OK. 7. The Add Audience Rule page displaysyou must add rules and compile the audience before targeting content to the audience. 8. To create the first audience rule, perform the following steps: a. In the Operand section, verify the User option is selected. b. In the Operator section, select Member of from the Operator dropdown list. c. In the Value section, type ADVWORKS\administrators in the Value box. d. Click OK. 9. To create the second audience rule, perform the following steps: a. From the View Audience Properties page, in the Audience Rules section, click Add rule. b. In the Operand section, select the Property option, and then select Title from the Property drop-down list. c. In the Operator section, verify the = (equals) operator is selected from the Operator drop-down list. d. In the Value section, type IT Administrator in the Value box. e. Click OK. Note Additional audience rules can be added from the View Audience Properties page. The audience needs to be compiled for these changes to take effect. However, do not compile the audience at this point; that will be done in the next practice. Editing an audience
! To edit an audience
1. On the View Audience Properties page, click Edit audience. 2. On the Edit Audience page, click Satisfy all of the rules to change how audience rules are used to include users in the audience. Note You can add, delete, or edit audience rules from the View Audience Properties page. 3. When you have finished editing the audience, click OK to return to the View Audience Properties page. 4. On the View Audience Properties page, review the statistics for this audience to see the number of current members and the compilation status.
19
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Introduction Changes made to audiences and audience rules are not reflected in audience membership until the audience is compiled. When you compile an audience, the property values in user profiles and membership in distribution lists, security groups, and reporting structure are checked to see if they match the audience rules that you have created. Users who match the audience rules for an audience are included in that audience and receive content targeted to that audience. In this instructor-led practice, use the following values:
Variable Virtual Computer Virtual Computer - Domain controller Virtual Computer - SQL server start_time Value Madrid Glasgow Melbourne 01:00 AM
Starting a compilation
! To start a compilation
1. If you have not already, log the Madrid virtual computer onto the MADRID (this computer) as Administrator with a password of P@ssw0rd, and then navigate to http://madrid using Internet Explorer. 2. Click Site Settings (upper-right corner), then in the User Profile, Audiences, and Personal Sites section, click Manage audiences. 3. On the Manage Audiences page, click Start compilation. All of the audiences are compiled automatically. It may take several minutes for the compilation to complete. Refresh the Manage Audiences page to view the compilation status. Compilation is complete when Compilation status displays Idle and Uncompiled audiences displays 0.
20
You can set a compilation schedule so that audiences are compiled automatically at regular intervals. You can start a compilation at any other time if you must update an audience before the next scheduled compilation. You can also view the compilation status and most recent compilation time, and see the number of uncompiled audiences.
21
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Introduction Lesson objectives You can manage default personal site settings, such as the personal site location and naming format, from the Manage Personal Site page. After completing this lesson, you will be able to:
! ! !
Click a location for personal site directories. Specify a site naming format for personal site directories. Control which users can view personal sites.
22
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Introduction File location The personal site location is the name of the directory where you want to create and store personal site directories for users. To start the Creating and Editing a User Profile presentation, open the Web page on the Student Materials compact disc, click Multimedia, and then click the title of the presentation. Do not open this presentation unless directed by your instructor.
23
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Introduction Selecting personal site location options The personal site location is the name of the directory where you want to create and store personal site directories for users. You have two options: Personal and Sites. The directory structure is created immediately under the root directory. For example, if you click Personal, all of the personal site directories are created under http://servername/personal. You can change this location at any time without affecting the location of existing personal sites. Note Personal and Sites are the two default options. If the administrator creates more inclusions in the SharePoint Portal Server Central Administration page, then more options will be available.
24
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Introduction The site naming format describes the naming convention to use when creating directories for the personal sites for specific users, and how to resolve conflicts with existing directories. This is important because user names can potentially conflict with one another across multiple domains. There are three formatting options:
!
Formatting options
User name (do not resolve conflict) Example: http://portal_site/location/username User name (resolve conflicts by using domain_username) Example: http://portal_site/location/username or http://portal_site/location/domain_username
Domain and user name (will not have conflicts) Example: http://portal_site/location/domain_username/
You can decide which users can view personal sites by adding accounts and groups to the Reader site group.