SharePoint access for live@edu

Live@edu is a service that Microsoft offers for students. As a student you can direct your IT administrator to this site. He can register your school, so you can take advantage of the services that Microsoft offers like:

  • Exchange Online (10GB)
  • Sky Drive (25 GB)
  • Office Live Workspaces

But now Microsoft is announcing the addition of SharePoint Online. The Service will be available starting in the second half of 2010. You can read more here.

View Permissions for Reporting Services in SharePoint Integrated Mode

Setting up security for SSRS in SharePoint integrated mode can be a bit tricky, particularly if you want to set up some of your users to only be able to run reports, but not to be able to modify or change them. I found a great post explaining how to create a Reporting group in SharePoint:

http://agilebi.com/cs/blogs/jwelch/archive/2009/07/10/view-permissions-for-reporting-services-in-sharepoint-integrated-mode.aspx

Access SharePoint with your iPhone

This morning I read an interesting blog article from Hans Blauw. He spoke about a software company named Webstate. They put together some nice software to access your SharePoint environment with your iPhone. You might think why this is so important to talk about, you could already access your SharePoint environment.
iSharepone (the name of the software) connects to your SharePoint Environment in a very nice way. It is easier to navigate through IsharePhone than with the normal mobile view of SharePoint.

One thing though! You need a additional software to connect your iPhone to Sharepoint. This software is iSharePhone Server. I haven’t tried the software myself cause I don’t have an iPhone :-(

EWA: Error Data Refresh Failed

I’ve been struggling for quite a long time with Excel Web Access in combination with a SQL Analysis Server and SharePoint.
The problem is that I am able to display an excel file (which is in a SharePoint web part), but whenever I choose to refresh the connection I get the following error:

Unable to retrieve external data for the following connections:
[ODC File]
The data sources may be unreachable, may not be responding, or may have denied you access.
Verify that data refresh is enabled for the trusted file location and that the workbook data authentication is correctly set.

Here is a screenshot:

EWA: Data Refresh Failed

Finally today I got this error resolved.

First of all I did all the action that MVP – Ton Stegeman did in his blog about this subject. Check it out here (follow all 4 parts). He ends in part 3 with the error I have, but there was no solution provided.

First of all I needed to make sure that Kerberos is working and did not have a double hop problem, and that I could access the SSAS server and his cube. For that I added a SQL Server 2005 Analysis Services Filter Web Part and specified the same ODC file. It worked great (I could select a dimension and a Hierarchy).

The problem with this error is that I am running MOSS and SSAS both on a Windows 2008 Server (2 different servers btw.). You might think that it should not be any different than a 2003 server, but Server 2008 is “AES aware” (Advanced Encryption System). There is a problem with AES aware systems like W2K8, Vista and the use of Kerberos.
To get it to work, you will have to follow the steps below:

  1. Open the following file in Notepad: “c:\Program Files\Microsoft SQL Server\MSAS10.MSSQLSERVER\OLAP\Config\msmdsrv.ini”
  2. There is a section called Security, which looks like this:
        <Security>
            <DataProtection>
                <RequiredProtectionLevel>1</RequiredProtectionLevel>
            </DataProtection>
            <AdministrativeDataProtection>
                <RequiredProtectionLevel>1</RequiredProtectionLevel>
            </AdministrativeDataProtection>
            <RequireClientAuthentication>1</RequireClientAuthentication>
            <SecurityPackageList/>
            <DisableClientImpersonation>0</DisableClientImpersonation>
            <BuiltinAdminsAreServerAdmins>1</BuiltinAdminsAreServerAdmins>
            <ServiceAccountIsServerAdmin>1</ServiceAccountIsServerAdmin>
            <ErrorMessageMode>2</ErrorMessageMode>
            <CellPermissionMode>0</CellPermissionMode>
        </Security>

  3. Change the tag <DataProtection> and <AdministrativeDataProtection>, so it looks like this:

        <Security>
            <DataProtection>
                <RequiredProtectionLevel>0</RequiredProtectionLevel>
            </DataProtection>
            <AdministrativeDataProtection>
                <RequiredProtectionLevel>0</RequiredProtectionLevel>
            </AdministrativeDataProtection>
            <RequireClientAuthentication>1</RequireClientAuthentication>
            <SecurityPackageList/>
            <DisableClientImpersonation>0</DisableClientImpersonation>
            <BuiltinAdminsAreServerAdmins>1</BuiltinAdminsAreServerAdmins>
            <ServiceAccountIsServerAdmin>1</ServiceAccountIsServerAdmin>
            <ErrorMessageMode>2</ErrorMessageMode>
            <CellPermissionMode>0</CellPermissionMode>
        </Security>

  4. Stop and restart Analysis Services
  5. Then edit your ODC file and add the following to the connection strong:

    ”;SSPI=Kerberos;Protection Level=Connect” (without the quotes)

Now try again.

Tip: 
-  restart IIS every time you make a change in your ODC file.

Sharepoint: SP2 Expiration date problem fixed

As I blogged earlier, there was a problem with SP2 of Sharepoint.
This is now fixed.
You can find the KB including the installation instructions and download links for x86 and x64 here (translate the article to English, to get access to the download packages).

You can apply the package before or after the installation of SP2
According to Microsoft they will be updating the SP2 download package within 4-6 weeks.

SharePoint: Creating a calendar next events view

To create a view on a calendar in SharePoint which will display the 5 upcoming events, proceed as described below:

  • Add a column to your Calendar, name it “Begin”. This will be a calculated column. The formula used will be: “= [Start Time]” (without qoutes, but with [ and ] ). The data type returned will be “Date and Time”, and choose “Date Only” as the date time format.
  • Create a new view on the calendar named “Next events”. In this view I choose only to display Title, Start Time and End Time.
  • Sort this view by the column: Begin
  • The Filter of the view is set to:
    - Show items only when the following is true
    - Begin is greater than or equal to [Today]

Enable SharePoint for incoming email

Today I have been fighting with enabling SharePoint to receive email. Due to a misconfiguration of our farm it took me quite some longer than it should have done. Anyhow, here are the steps.

First of all I created an OU in our Active Directory. This OU will hold all the email addresses (contacts) from all the list I enable in SharePoint. I only have to create the OU and delegate control to the account that is running the Application Pool of SharePoint Central Administration.

  1. Create the OU (I named it SharePointEmail).
  2. Right Click the just created OU and choose [Delegate Control], you will be presented with the Delegation of Control Wizard (I have Server 2008). Just walk  through the wizard and add the account that is running the Application Pool of SharePoint Central Administration.
    When you come to the point that the wizard is asking which tasks to delegate, choose “Create a custom task to delegate”. The next screen is “Active Directory object type”, just leave the default of “This folder, existing objects in this folder, and creation of new objects in this folder”. On the “Permissions” screen choose Read, Write and Create all Child Objects. Press next and finish and you’re done.
  3. Create a new MX record in DNS. I created one called SharePoint, so eventually my mailing lists will have an email address like <list>.sharepoint.mydomain.local. This record will tell your mail server to forward mail to the designated server (which is your sharepoint server).
    Creating a MX Record named SharePoint 
  4. Log into your SharePoint server and install the SMTP feature.
  5. Now Configure the SMTP Server to accept messages coming from your exchange server. Therefore open IIS 6.0 Manager (even on a w2008 server), and right click on your SMTP Virtual Server. Click the [Access] tab, and then click the [Relay] button. Add the IP address from your exchange server here. Then Press OK twice, till your back in IIS manager.
     Grant your exchange server access to your SMTP service
  6. You have to add an alias to your SMTP Server.
    In the IIS manager select “Domains” below your SMTP Virtual Server and right click anywhere in the right section. Select [New] and then [Domain]. In the domain type select Alias, click next and fill in the name of your MX record you created earlier (mine was sharepoint.mydomain.local.
  7. Next steps are in Sharepoint Central Administrator, so fire it up.
  8. Select the [Operations] tab, and under the section “”Topology and Services”, click on [Incoming Email Settings].
    image 
  9. Select the following options:
    -  Enable sites on this server to receive email: Yes
    - Settings Mode: Automatic
    - Use the Sharepoint Directory Manager….(blah blah)…: Yes
    - Active Directory Container: OU=SharepointEmail,DC=mydomain,DC=Local
    this is the direction to the OU you created in step 1, SharePoint will automatically create the contacts in this OU (and you give it the right to do it, in step 2… see I love it when a plan comes together).
    -  SMTP mail server for incoming mail: <FQDN of your sharepoint server>
    - Accept messages from authenticated users only: Yes
    - Allow creation of distribution groups from SharePoint sites: Yes
    - Distribution group request approval settings: Select “Create new distribution group” and  “Delete distribution group”
    - E-mail server display address: sharepoint.mydomain.local
    - Accept mail from these safe…… : <the IP address of your exchange server>
    yes.. the IP address and not the FQDN
    Click [OK]

So that’s basically it. Now you can enable your lists for incoming mail and give it an email address.

SharePoint – Check out documents behavior

In SharePoint you can choose whether a document has to be checked out before you can edit it, or you can edit a document without checking it out.

When you check out a document, a checked out icon appears next to the document icon. This means nobody can make changes to the document except the person who did the checkout.

You can change the behavior by going to the document library settings, below General Settings choose  “Versioning Settings”. Change the last option on the next page (Require check out) to Yes or No.

changing checkout behavior