Security account requirements
To install MOSS 2007 in a server farm environment, at-least 2 accounts are required.
(Only one account required when WFE and Database are on a Single computer.)
One as Domain User with Admin power in both the WFE and DB Server. This user should be manually added in to the SQL Server Users from the Management Studio. This should be able to login to SQL Server with Windows authentication should have DB Creator and Security Admin rights on SQL Server. This will be used for Installing MOSS and will be acted as SERVICE ACCOUNT for all the related services of MOSS.
Do not use the main domain\administrator account. This causes a problem if ever you wish to install Project Server 2007 on the same machine.
Account 1 (We call it as MOSSADMIN)
A user account that you can use to install Office SharePoint Server 2007 and run the SharePoint Products and Technologies Configuration Wizard. This account must be:
§ A domain user account.
§ A member of the Administrators group on each of your front-end servers.
§ A member of the SQL Server Logins, which grants login access to your SQL Server instance.
§ A member of the SQL Server Database Creator server role, which grants permission to create and alter databases.
§ A member of the SQL Server Security Administrators server role, which grants permission to manage server logins.
Account 2 (We Call this as MOSSUSER)
A unique domain user account that you can specify as the Office SharePoint Server 2007 service account. This user account is used to access your SharePoint configuration database. It also acts as the application pool identity for the SharePoint Central Administration application pool and it is the account under which the Windows SharePoint Services Timer service runs. The SharePoint Products and Technologies Configuration Wizard adds this account to the SQL Server Logins (We don’t need to manually add this in to SQL Server, Just provide when MOSS Technologies Configuration wizard asks), the SQL Server Database Creator server role, and the SQL Server Security Administrators server role. It is recommended that you follow the principle of least privilege and do not make this user account a member of any particular security group on your front-end servers or your back-end servers.
SQL Server Installation.
This has to be a different server.
(Preferably, SQL Server 2005 should be installed with Local System account (Local Administrator of that machine). If you install it with Domain Admin User, SQL Server uses Kerberos Security. I don’t prefer this as MOSS Configuration Wizard’s default installation would be on NTLM, not Kerberos. So, I just login as Local System Admin for installation rather than going with domain Admin.)
Select Database Engine and Analysis Services in the Wizard, No need of selecting the other features like integration Services. Click Advanced, Select Client Component Tools (This is for getting the Management Studio). Service pack 3 is a must for SQL Server for MOSS. Open up Management Studio and add the Service account in to the Users, assign permissions as DB Creator and Security Admin rights on SQL Server.
Log off from DB Server if you are logged in as LOCAL ADMIN and Login as MOSSADMIN and Connect to Database Engine through SQL Server Management Studio with Windows Authentication. Give DB Creator and Security Admin roles to this user .
Make sure that Collation settings is of Latin1_General_CI_AS_KS_WS
Enable the remote connection to the SQL Server through Serface Area Configuration wizard. Click Surface Area Configuration for Services and Connections. Select Remote Connections
Read out these carefully to prepare a new DB Server for MOSS
http://technet.microsoft.com/en-us/library/cc263187.aspx
Configure surface area settings in SQL Server 2005
1. Click Start, point to All Programs, point to Microsoft SQL Server 2005, point to Configuration Tools, and then click SQL Server Surface Area Configuration.
2. In the SQL Server Surface Area Configuration dialog box, click Surface Area Configuration for Services and Connections.
3. In the tree, open your instance of SQL Server, open Database Engine, and then click Remote Connections.
4. Click Local and Remote Connections, click Using both TCP/IP and named pipes, and then click OK
How do i know the Version of SharePoint installed on my server?
To check this on a moss installed server, go to Central Administration(CA) > Operations > Servers in the farm. You can see the version of the MOSS there.
Also, To know the Edition of MOSS(Standard/Enterprise) you installed
Go to the Central administration -> Operations-> Enable Enterprise features. This will show you whether it is standard or enterprise. If it is enterprise edition, Button would be disabled.
Name
Version
MOSS 2007/WSS 3.0 Service Pack 1 (Contains the below)
12.0.0.6219
MOSS 2007/WSS 3.0 October 2007 Public Update
12.0.0.6039
MOSS 2007/WSS 3.0 August 2007 Hotfix
12.0.0.6036
MOSS 2007/WSS 3.0 RTM
12.0.0.4518
Framework 2.0 and 3.0 on the front end server (Where MOSS is going to be installed)
IIS on the Front end server with the rights
As the front end server runs with Windows Server 2008 Operating system(OS), Installing and configuring will not be as easy as on a 2003 OS.
For installing IIS refer http://learn.iis.net/page.aspx/29/install-iis-7-on-windows-server-2008-or-windows-server-2008-r2/
IIS 7 will get installed with .Net Framework 2.0. We need Framework 3.0 also to be installed on Moss WFE. Go to IIS Manager, Application Pools and see the version of Framework version in the right pane.
IIS Isolation mode settings (IF IIS 6.0)
1. Click Start, point to All Programs, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
2. In the IIS Manager tree, click the plus sign ( ) next to the server name, and then right-click the Web Sites folder and select Properties.
3. In the Web Sites Properties dialog box, click the Service tab.
4. In the Isolation mode section, clear the Run WWW service in IIS 5.0 isolation mode check box, and then click OK.
IF IIS 7.0, This is to be as CLASSIC MODE (There is no Isolation mode in IIS 7, Instead it is Pipeline Mode)
1. Select Application Pools in IIS Manager in the left pane in IIS 7.0, In the middle pane, MODE will be displayed as INTEGRATED/CLASSIC. ASP.Net should be in CLASSIC Mode and Default Application Pool on INTEGRATED MODE
Enable ASP.NET 2.0 in IIS 6.0
You must enable ASP.NET 2.0 on all Office SharePoint Server 2007 servers.
Enable ASP.NET 2.0
1. Click Start, point to All Programs, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
2. In the IIS Manager tree, click the plus sign (+) next to the server name, and then click the Web Service Extensions folder.
3. In the details pane, click ASP.NET v2.0.50727, and then click Allow.
Enabling ASP.Net 2.0 is not required for IIS 7.0 I Guess. By default it does this configuration during installation.
Login as MOSSADMIN User in the WFE server and click on the MOSS Setup exe file. This is the account will be used to Run MOSS and Run SharePoint Technologies Configuration Wizard. Service Account (MOSSUSER) will be given only when SharePoint Technologies Configuration Wizard asks for creating Sharepoint_config database.
Set up will ask for running the Sharepoint Technologies Configuration Wizard once the installation of Sharepoint is over. Provide the database server name and Service account credentials (MOSSUSER) here, Configuration Wizard creates the connection to the database server and create Configuration database (Sharepoint_Config) and other Configuration DBs like SSP, Search etc.