Quick Install Guide For SharePoint Foundation 2013

1. Introduction

This quick install guide will assist in installing SharePoint foundation 2013 server to address certain technical / business requirements. This type of installation will have some limitations and might not be fit for production deployments.

2. Preparation Tasks

The following preparation tasks will be required before starting the SharePoint 2013 Foundation installation:

• Download SharePoint 2013 Foundation
• Document SharePoint URL that users will use e.g. https://sharepoint.company.com
• Acquire / Install Certificate with correct URL, example “AD CS Install Guide for Azure AD Domain Services“

3. Assumptions

The following assumptions are made during the creation of this article:

• Active Directory or Azure AD Domain Services is up and running
• Active Directory Member server, running windows 2012 R2
• Unrestricted internet access
• SSL Certificate is available for site.
• Experience in SSL certificates
• Access to DNS Server to create records
  

  If using Azure AD Domain Services, changing DNS record will not be allowed.

2. Installation

The installation is broken up into two parts:

1. Framework installation
2. Configuration

2.1. Framework installation

1. Run the “sharepoint.exe” that was downloaded in the preparation tasks
2. 
3. Click “Install software prerequisites“
4. Click “Next“
5. Check “I accept the terms of the License Agreement(s)“
6. Click “Next”
   

   The process will install all required roles and software, during the installation the server will be reboot twice, logon with the same user account that was used to continue installation.

7. Run the “sharepoint.exe” that was downloaded in the preparation tasks
8. 
9. Click “Install SharePoint Foundation“
10. Choose “Stand-alone” installation
11. Click “Install Now“
12. Check “Run the SharePoint Products Configuration Wizard now.“
13. On the Welcome Screen, Click “Next“
14. On warning dialog, Click “Yes“
15. Click “Finish“

2.2 Configuration

Once the steps above have completed, SharePoint foundation will be installed and running. Users will be able to connect to the default SharePoint Team Site, by using http://<servername&gt; URL.

To change the default URL to the required URL, follow these steps:

1. Import SSL certificate into local computer store
2. Open “SharePoint 2013 Central Administration“
3. Under “System Settings“, Click “Configure alternate access mappings“
4. Click “Edit Public URLs“
5. In “Alternate Access Mapping Collection:” list, choose “SharePoint – 80“
6. In “Default“, Change http://<servername&gt; to https://<newURL&gt; e.g. https://sharepoint.company.com

IIS Manager Configuration

The following task should be done on IIS Manager to allow the configuration changes:

1. Open “Internet Information Services (IIS) Manager” console
2. Go to <SERVERNAME>\Sites\, click  “SharePoint – 80“
3. On the right hand site, click “Bindings…“
4. Click “Add…“
5. In Type, choose “HTTPS“
6. In Host name, enter the new dns address e.g. sharepoint.company.com
7. In SSL certificate, choose the imported SSL certificate
8. Click “OK“
9. Remove “http” binding
10. Click “Close“

User’s should be able to use the new secure URL to access the SharePoint team site. e.g. https://sharepoint.company.com

P.S. Make sure to include the new URL into user Internet Explorer local intranet zones

Conclusion

Basic SharePoint 2013 foundation team site will be running and available for business, the solution will be using windows internal database and have some limitations.

 

 

Filtering on Azure AD Connect

Introduction

This article will add a filter for Azure AD Connect for only syncing user accounts that have a valid email address. Additional options may be required by the organization and more detail can be found here.

Preparation Tasks

The following tasks should be completed before starting the process:

1. Azure AD Connect is installed and configured – see “Getting Started with Azure AD Free Edtion“
2. Administrator Access for Azure AD Connect Server

Adding the Filter

The following tasks should be preformed on the Azure AD Connect Server:

Disable scheduled task

To disable the scheduled task which will trigger a synchronization cycle every 3 hours, follow these steps:

1. Start Task Scheduler from the start menu.
2. Directly under Task Scheduler Library find the task named Azure AD Sync Scheduler, right-click and select Disable.
   
3. You can now make configuration changes and run the sync engine manually from the synchronization service manager console.

After you have completed all your filtering changes, don’t forget to come back and Enable the task again.

1. Open “Synchronization Rules Editor“
2. Click “Inbound“
3. 
4. Find “In From AD – User Join” rule, click “Edit“
5. 
6. Click “Yes“
7. In “Precedence“, enter “500“
8. Click “Next“
9. Only include user that a have email address
   1. Click “Add clause“
   2. Attribute Field choose “mail“
   3. Operator field choose “ISNOTNULL“
   4. 
10. Add Company email domain (Optional – checking if user have a email address solves most cases)
    1. This rule assumes you only have one email domain, will not work for multi-domain
    2. Click “Add clause“
    3. Attribute Field choose “mail“
    4. Operator field choose “ENDSWITH“
    5. Value enter “<email>.<domain-name>”
    6. 
11. Apply and Verify changes
12. Enable Scheduled task

Conclusion

Completion of this article, the organization will only sync user accounts that have a valid email address into Azure AD.