In case you downloaded the Group Policy for Microsoft Office 2010 earlier this month, Microsoft has updated the documentation, still available in your favorite three flavours of doc, pdf and xps.
Group Policy for Microsoft Office 2010 Version 2, released on 17 January 2011
Unfortunately a change log page is not included within the document, thereby preventing us from knowing exactly what changed.
Wake Up Bits…
It’s Monday morning, 10 January 2011… do you know what your group policy objects are configured to that may potentially affect the end user experience between SharePoint 2010 and your Office 2010 client users? If not, no need to sweat, Microsoft recently published a document on Group Policy for Microsoft Office 2010 (7 January 2011). It’s fairly well written, weighing in at a whopping 1.9 MB (303 pages) for the DOC file (where’s my light and low Cal docx edition???).
The document finely articulates the different capabilities of the Office system, describing the policy object settings and what their effects on the Office client family and SharePoint products and technologies are. Included in this document is information that pertains to the SharePoint Workspace product as well as the administrative templates that are associated with the product.
For instance, with regard to the Contact Card, there is an option to “Configure presence icon” with three options – Display All, Display some, Display None (page 161). While this might seem trivial, it’s definitely something to keep in mind when you’re working in an environment where you want to show presence and you have populated your SIP address or made it available to the User Profile Service for consumption.
So while knowing how the group policy objects within your Active Directory based domain are important, there are definitely individuals new to the SharePoint career that have been tasked with implementing SharePoint Foundation Server 2010 to begin assisting with a proof of concept, pilot or perhaps a full on collaboration system that has requirements that can’t justify the procurement of SharePoint Server 2010’s Standard or Enterprise licensing. Or perhaps you’re not a SharePoint Administrator / IT Pro at all and you’re looking for some additional documentation to help with planning and pushing forward with developing an implementation guide, then you’ll definitely want to pick up Microsoft’s updated “Getting Started with Microsoft SharePoint Foundation 2010” document (Originally Published November 2010, updated 7 January 2011).
The document provides great detail to assist in the planning phase of an SPF 2010 implementation and points out the key differences and features that have been removed from the Windows SharePoint Services version 3 platform.
Good morning, happy reading and good day!
We’ve all been there, we get a call from our client, customer, project manager or colleague at 630 in the morning stating that the portal is down. Typically this is done in such a manner that involves a terse conversation asking how long you’ve known the system was down and when you were going to alert other folks… Granted dependent on the systems monitoring software in your system you may or may not have received an alert. In my case you’re dreaming of a white sandy beach and wondering why there’s a ringing noise coming from the handle of Patron in your hand.
Nevertheless, once you get down to details though, I know that for me, I tend to find myself investigating such outage issues by looking in a few different buckets or areas first – all of which tend to deal with other systems that SharePoint relies on…
1 – Network Systems – did a network administrator change the VLAN or network route that the SharePoint products and technologies platform rides on top of to something that passes directly into a firewall that drops every frame trying to pass through? did a cable get gnawed through by an animal? did someone unplug the RJ45 altogether leaving your system not responding at all?
2 – DNS – is there a Domain Name Service issue where the names are no longer resolving properly? did someone remove a CNAME or A Record? did the MX record somehow get munged due to policy causing incoming e-mail to cease operating? did someone forget to renew your DNS record altogether? are your SSL certs invalid now because the CA chain is broken somehow thanks to DNS resolution (what’s that, you can’t access the CRL?)…
3 – Storage Fabric Operations – is there a problem with the storage fabric that’s hosting your SQL content databases? did someone cut the fiber inadvertently or blow away your storage zone? Or did a disk controller pass away in the night, overworked by backups? All fun things that are a ton of fun to explain… “It’s not the SharePoint platform, it’s just the storage where all of the databases that power the content seem to be gone…”
4 – Active Directory – did the service accounts running the SharePoint platform suddenly get changed such that their passwords expire after being told they were set never to expire? the accounts themselves are expired somehow? they were enabled for smartcard interactive login (which effectively scrambles the password to 256 random bits)? the service principal name (SPN) associated with a URI for Kerberos to work was removed?
5 – Group Policy – did the Network administrator controlling all of the domain policy suddenly get a zero day exploit update tossed on their plate that’s rated “Critical” by an Information Awareness Manager or Information Systems Security Officer? Did they push the patch without alerting you the IT Pro that’s watching over the health and welfare of your system? Or did someone perhaps just remove different policies assigned to OUs and decide to make an über-policy that trumps everything without checking what the RSOP was?
Rather than drone on regarding several other buckets I check, I’d say that on average those are the five that I check first… More often than not I find that the 5th is typically what happens where the resultant set of policy sets a policy such that either client systems accessing the SharePoint portal are no longer capable of integrating as they were meant to (“Hey where’d my SharePoint Sites in Word go?”) or such that the Windows Server operating system hosting SharePoint now has a setting that causes certain components to cease to operate (always fun when a network admin changes a system to disable loopback checking in turn killing search crawling, right?).
Fear not though, Microsoft has a tool out there in the Azure cloud to assist with tracking down the Global Policy Object that is causing your system grief – Global Policy Search. It’s available at: http://gps.cloudapp.net/
This is definitely one of my favorite cloud apps out there that assists in quick and easy searchable and filterable results to track down the GPO that’s the troublemaker to remediate issues. Give it a spin around the block and you’ll find that it’s quite helpful to have in your back pocket.
The Tech Blog of Dan Usher 