Windows 7 / Getting Started

---

Control Access to WSS Central Administration

The first thing you should do is make it easier for you to access the Central Administration web site. IE can automatically pass credentials to web sites through a single sign-on (SSO) operation. IE controls this through the different zones that connections fall into. In order to use SSO to get to the Central Administration web site, you need to add the connection to the Intranet zone.

1. To do this, move to the Tools | Internet Options menu in IE.
2. Click the Security tab.
3. Select Local Intranet and click Sites.
4. Add the server's address to this zone. You will get a warning message that it already exists in the Trusted Sites zone. Click Yes and click Close.
5. Click OK to close the Internet Options dialog box.

If you look at the lower-right area of your IE screen, you will see that this site is now in the Local Intranet zone. This means you will not be prompted for credentials next time you go to this site because IE will pass your current credentials to the site automatically.

Finalize WSS Configuration

Several tasks are listed for server finalization. They include:

• Read deployment instructions
• Incoming e-mail settings
• Outgoing e-mail settings
• Create SharePoint sites
• Configure workflow settings
• Change service accounts
• Configure diagnostic logging
• Add antivirus protection

To complete an item, click its link, perform the operation, and then click Edit Item. In the Editing window, change the status to Completed, and click OK. You can also delete the item if you want to, but marking it as Completed lets you track the changes you've made to the system.

TIP: Make sure you use an antivirus program that is designed for SharePoint Services. Find out from your antivirus manufacturer if this is the case before you configure it to work with WSS.

You should enable sites to receive e-mail and configure them with appropriate settings. You can rely on the SharePoint Directory Management Service to integrate the groups in ADDS with your WSS implementation. Point to the appropriate OU in your production domain; this should be somewhere in your People OU structure. Use relative distinguished names to list the OU (for example, DC=net,DC=TandT,DC=Intranet,OU=People). This will let you manage group contents in one single location.

You should also use the predefined accounts to run the Central Administration web site. Normally, this should be NetworkService. You can also create a special service account, which will need local administration rights on this server.

When you set antivirus properties, you should be able to scan documents on upload and attempt to clean infected documents. If the documents are cleaned on upload, then they don't really need to be cleaned on download.

Finally, create as many sites as you need. The process is simple and straightforward. Your WSS environment will be ready for use once done.

TIP: By default, WSS installs to the default web site on the target server. However, users find it easier to access a site with a more "Internet-sounding" name than with the server name. You can map the site to a proper DNS name. Create an alias (CName) within the production domain DNS zone, for example, Collaboration.Intranet.TandT.Net. You might also create a user GPO that changes the IE home page to this address so that they go to the Collaboration web site by default when they open IE. You can then add the new address in Central Administration | Operations | Global Configuration | Alternate Site Mappings. Select Add An Internal Mapping, and set the new name to Collaboration on port 80 or, if you want secure communications, port 443. You will also need to install a PKI certificate on the server to use port 443.

Change WSS Administration Port Number

By default, SharePoint uses a random port to connect to the administration web site. This port is listed in the Connection link at the top of the Internet Explorer window. Ideally, you will want to standardize all of the administrative ports for each of your WSS installations.

For example, you might standardize all systems running WSS to port 8088.

1. Open a command prompt.
2. Navigate to Program Files\Common Files\Microsoft Shared\Web Server Extensions\12\BIN.
3. Type:
   stsadm.exe -o setadminport -port 8088
   And then press enter.
4. Close the command prompt. This will automatically change all of the shortcuts that reference this administration site.

This will make it easier to manage each SharePoint site, since you only need to remember that to access Central Administration, you just type http://servername:8088 in any Web browser.