Groove Server Setup Worksheets
This appendix provides worksheets to facilitate the setup and ongoing adminsitration of Groove Server Manager and Relay. This document is to be used used with the Groove 2007 Planning and Deployment Guide, available at: 2007 Deployment Guide.doc
This document contains the following worksheet templates:
- Groove Manager IIS Front End Worksheets
- Groove Manager SQL Back End Worksheets
- Groove Relay Worksheets
- Groove Data Bridge Worksheets
Groove Manager IIS Front End Worksheets
The following worksheets are for use before, during, and after Groove Manager installation:
- Groove Manager IIS Front EndSpecification Worksheet
- Groove Manager IIS Front End Installation Worksheet
- Groove Manager IIS FrontEnd - Post-Installation Worksheet
Groove Manager IIS Front End- Specification Worksheet
The following worksheet is for recording the specific parameters of the Groove Manager IIS server front end, for use during configuration.
Groove Manager – IIS Front End
Hostname:______
Server Make / Model:
______
Operating System / Service Pack:
______
(Note – Only Windows Server 2003 Standard / Enterprise supported)
Additional Prerequisites
oASP.NET 2.0.50727.5 or later
oIIS 6.0
oSMTP Service
oWorld Wide Web Service (with Active Server Pages)
Processor(s):
MHz
______
[# procs] x [# cores] [ AMD64 or EM64T] x,xxx MHz
RAM:
MB
Disk Controller Model(s):
Disk Partition(s):
C:\GB
D:\ GB
E:\ GB
F:\ GB
G:\ GB
DNS and IP Address(es):
______
______
______
System Information:
(paste output from c:\systeminfo here)
Groove Manager IIS FrontEnd - Installation Worksheet
Use the following worksheet as a recording aid during Groove Manager software installation. Italic text indicates defaults, examples, and explanatory information.
ASPNET Registration
ASPNET registered.
If ASPNET is not registered, register it from the command line as follows:
C:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\aspnet_regiis –I”
Groove Manager
Version:Previous Version (upgrade):/ Product Key:
/
Installation Type
Select – AdvancedSelect – Server Type: Complete
File Location:
C:\Program Files\Microsoft Office Server
/
Groove Manager Configuration
Install Groove Server Manager{Selected}
Install Groove Server Manager and Groove Auditing
{Deselected}
/
Groove Manager Configuration
Administrator’s Email Address:Organization Name:
GMSdomain
URL of Management Server:
Certificate Authority Name:
GMSdomain.maildomain.xxx
/
Enter Database Login Information
Use the Following SQL Server Login:Username:
Password:
Database information:
SQL Server Name:
SQLServerName
Database Name:
gmsDB
/
Enter Database Login Information
Master Password:Note – This must be the same for all front ends
Groove Manager IIS Front End – Post Installation Worksheets
Use the following checklist worksheet to perform Groove Manager IIS configuration tasks after installation:
- IIS Memory and ProcessorOptions
- IIS SSL Support (optional)
- IIS Web Site Authentication
- IIS Web Services Extensions
- IIS Application Pool Properties
- IIS Virtual SMTP Server
- IIS IP Port Filters
- IIS Registry Backup
- IIS Certificate Backup
IIS Memory and Processor Options
Memory and processor options configured via the System Properties, Advanced Settings area, as follows:
Go to System Properties/Advanced Settings:
Set the Processor scheduling performance to be Best for Background services
Set Memory usage to Adjust for best performance of ‘System cache’
Via the System Properties, Advanced Settings area, set the virtual memory Initial size equal to the Maximum size. The maximum size is typical set to 1-2X physical RAM installed.
IIS SSL Support(optional)
SSL Certificateobtained as follows:
Create a new SSL ( x.509) certificate for the Groove Manager Website
CA sign the Groove Manager Web site public certificate
Import signed Groove Manager Web site certificate
Enable SSL (128bit encryption) for the GMS directory of the Groove Manager Web site
IIS Web Site Authentication
Groove Manager IIS Web site authentication enabled as follows:
Set the Groove ManagerWebsite Root authentication to Anonymous access only and disable all others
Set the GMS directory ofthe Groove Manager Web site to Integrated Windows authentication (recommended over less secure options) onlyand disable Anonymous access.
Set the aspnet_client directory authentication to Anonymous access only and disable all others.
(optional) Set the AutoActivate directory to Integrated Windows authentication only and disable all others including Anonymous access.
(optional) For the AutoActivate directory, enable SSL (128bit encryption) if the new Groove 2007 auto-configuration feature is to be used. Leave SSL disabled if the per Groove 2007 auto-activation feature is to be used.
Setup Groove Manager administrator IIS logon accounts (local or domain logons as needed)
IIS Web Services Extensions
Web Services Extensions set, as follows:
Note: Actual .dll paths may vary
Set “Active Server Pages” to Allowed
o C:\Windows\System32\intetsrv\asp.dll
Set “ASP.NET v2.0.50727” to Allowed
o C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
Set Groove to Allowed
o C:\Inetpub\wwwroot\gms.dll
o C:\Inetpub\wwwroot\AutoActivate\gms.dll
IIS Application Pool Properties
These settings apply to Windows 2003, IIS 6.0
/Recycling
Recycle worker processes (in minutes):Disabled
Enabled1740
Recycle worker process (number of requests):
Disabled
Disabled35000
Recycle worker processes at the following times:
Disabled
Disabled
Maximum virtual memory (in megabytes):
Disabled
Disabled500
Maximum used memory (in megabytes):
Disabled
Disabled192
Note – italicized values are IIS defaults and are provided as a point of reference
/Performance
Shutdown worker processes after being idle for (time in minutes):Disabled
Enabled20
Limit the kernel request queue (number of requests):
Enabled4000
Enabled4000
Enable CPU Monitoring:Disabled
Enabled
Maximum CPU use (percentage):
100
Refresh CPU usage numbers (in minutes):
5
Action performed when CPU usage exceeds maximum CPU use:
No Action
Maximum number of worker processes:
1
1
Note – italicized values are IIS defaults and are provided as a point of reference
/Health
Enable Pinging: EnabledEnabled
Ping worker process every (frequency in seconds)
60
30
Enable rapid-fail protection: Disabled
Enabled
Failures:
5
Time period (time in minutes):
5
Worker process must startup within (time in seconds):
180
90
Worker process must shutdown within (time in seconds):
180
90
Note – italicized values are IIS defaults and are provided as a point of reference
/Identity
Predefined: SelectedSelected
Network Service
Network Service
Configurable:Deselected
Deselected
User name:
IWAM_[hostname]
Password:
Note – italicized values are IIS defaults and are provided as a point of reference
IIS Virtual SMTP Server
Groove Manager IIS virtual SMTP server properly configured as follows:
Customize server name to: Groove SMTP Virtual Server
Enable Logging
Access\Connection Control
Set to Only the list below: 127.0.0.1
Access\Relay Restrictions
Set to only the list below: <null list>
Disallow all computers...
Delivery\Advanced Delivery
Set fully qualified domain name:
Set Smarthost:
IIS IP Port Filters
TCP Ports – Permit only following:
80 (for the Groove Manager Web site)
443 (for the GMS and AutoActivation directories of the Groove Manager Web site)
3389 (optional, for Remote Desktop administration)
UDP Ports – Permit All
IP Protocols – Permit only following:
6 – TCP
17 – UDP
IIS Registry Backup
Followingregistry keys exported, backed-up, and stored securely off the server:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\12.0\Groove\ManagementServer]
Backup Directory with file name:
[HostName]-ManagerFrontEnd.reg
IIS Certificate Backup
Current IIS X.509 Server Certificate (if it exists) exported to a .pfx file using the IIS Certificate Wizard, and stored securely off the server:
Exported Certificate File Name:
Password:
Certificate Details:
{paste details here}
Groove Manager SQL Backend Worksheets
The following worksheets apply to Groove Manager SQL Back End installation and configuration:
- Groove Manager SQL Back End - Specification Worksheet
- Groove Manager SQL Back End – Memory and Processor Options Worksheet
- Groove Manager SQL Back End –IP Port Filters Worksheet
- Groove Manager SQL Back End –Authentication Options Worksheet
Groove Manager SQL Back End – Specifications Worksheet
The following worksheet is for recording the specific parameters of the Groove Manager SQL server back end.
Groove Manager-SQL Back EndHostname:
Server Make / Model:
Operating System / Service Pack:
(Note – Only Windows Server 2003 Standard / Enterprise supported)
SQL Server:
(Note – Only SQL Server 2000 / 2005 Standard / Enterprise supported)
Processor(s):
[# procs] x [# cores] [ AMD64 or EM64T] x,xxx MHz
RAM:
MB
Disk Controller Model(s):
Disk Partition(s):
C:\GB
D:\ GB
E:\ GB
F:\ GB
G:\ GB
DNS and IP Address(es):
______
______
______
System Information:
(paste output from c:\systeminfo here)
Memory and Processor Options
Memory and processor options configured via the System Properties, Advanced Settings area, as follows:
Set the Processor scheduling performance to be “Best for Background services”
Set Memory usage to Adjust for best performance of “System cache”
Via the System Properties, Advanced Settings area, set the virtual memory Initial size equal to the Maximum size. The maximum size is typical set to 2X physical RAM installed.
IP Port Filters
IP port filters set as follows:
TCP Ports – Permit only following:
1433 – SQL Server
1434 – SQL Server
3389 – Remote Desktop, administration only (optional)
UDP Ports – Permit All
IP Protocols – Permit only following:
6 – TCP
17 – UDP
Authentication Options Worksheet
Configure SQL authentication on the server properties page as follows:
Support both SQL Authentication and Windows Authentication mode (mixed mode).
Groove Relay Worksheets
The following worksheets apply to Groove Relay installation and configuration:
- Groove Relay - Specifications Worksheet
- Groove Relay - Installation Worksheet
- Groove Relay - Post-Installation Worksheet
Groove Relay – Specifications Worksheet
The following worksheet is for recording the specific parameters of each Groove Relay server.
Relay Server HardwareHostname:
Server Make / Model:
Operating System / Service Pack:
(Note - Only Windows Server 2003 Enterprise/Standard x64 supported)
Processor(s):
[# procs] x [# cores] [ AMD64 or EM64T] x,xxx MHz
RAM:
Disk Controller Model(s):
Disk Partition(s):
C:\GB
D:\ GB
E:\ GB
F:\ GB
G:\ GB
Backend IP Address(es):
Backend DNS Address
Backed DNS Alias(es)
Frontend IP Address(es):
Frontend DNS Address
Frontend DNS Alias(es)
System Information:
(paste output from “systeminfo” here):
______
Groove Relay – Installation Worksheet
Use the following worksheet as a recording aid during Groove Relay software installation. Italic text indicates defaults, examples, and explanatory information.
Enterprise Relay Server
Version:Upgraded From Version:For Data:
dbwritetest.exe –p [Data Vol Path] /
Disk I/O Qualification
DataBytes/Sec:
{ must be > 200,000 Bytes/s}
Cluster Size:
{must be =4096}
/
Enter Product Key:
/Installation Type
Select – AdvancedSelect – Server Type: Complete
File Location:
C:\Program Files\Microsoft Office Server
/
Relay Server Information
Relay Server Name:[Fully Qualified DNS Name]
Administrative User Name:
ServerAdmin
Administrative Realm:
server@hostname
Administrative Password:
Private Key File Name:
[hostname]-privkey.dat
Certificate File Name:
[hostname]-RelayCertificate.cer
Unattended startup
{selected}
Private Key Password (after “Generate Files”):
/
SOAP Interface Information
Relay SOAP Interface Name:Qualified DNS Name]
Private Key File Name:
[hostname]-ServerSOAPKeyStore.xml
Certificate File Name:
[hostname]-ServerSOAPCertificate.cer
Export ID File Name:
[hostname]-ServerID.xml
Enable SOAP Access for Remote Management
{Selected}
/
Tuning Information
Require Pre-Authentication for Registration (via Groove Manager){Selected}
/
Tuning
Data Directory:C:\Program Files\Microsoft Office Server\12.0\Groove\Groove Relay Server\Data\
Enable Delayed Log Writes
{Deselected}
Maximum SSTP Message Size:
megabytes
250
Sign up for the Customer Experience Improvement Program?
- Yes, I am willing to participate anonymously in the Customer Experience Improvement Program (recommended)
- No, I don’t wish to participate
- Download a file periodically that helps determine system problems
Return Customer Experience Improvement Program events
- Ignore errors and don’t collect information
/
Backup Files
Relay Backup Files:C:\
Comments:
Groove Relay – Post-Installation Worksheet
Use the following checklist worksheet to perform the following Groove Relay configuration tasks after installation:
- Relay Memory Tuning
- Relay Memory and Processor Options
- Relay Network Interface Binding (optional)
- Relay Registry Backup
- Relay Service Start Settings
- Relay IP Port Filters
Relay Memory Tuning
Merge the provided file, “HeapDeCommit.reg”. This registry file sets the following registry value:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SessionManager
HeapDeCommitFreeBlockThreshold=dword:00040000
(After setting this value you must restart the operating system for the changes to take effect.)
Relay Memory and Processor Options
Via the System Properties, Advanced Settings area:
Set the Processor scheduling performance to be “Best for Background services”
Set Memory usage to Adjust for best performance of “System cache”
Via the System Properties, Advanced Settings area, set the virtual memory Initial size equal to the Maximum size. The maximum size is typical set to 1 - 2X physical RAM installed.
Relay Network Interface Binding (optional)
If the Relay is configured with dual network interfaces; one for the public DMZ and the other for a Private “Admin” network, then the Admin Web site port and the SOAP port may need to be bound to a particular NIC.
By default, the Admin Web site port is only available on localhost (127.0.0.1). For remote access to the Admin Web site, the Admin Website Interface must be bound to the appropriate NIC’s IP address.
Bind Admin Website Interface
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office Server\Groove\Groove Relay\Parameters]
"AdminInterface"="xxx.xxx.xxx.xxx"
Where the "xxx.xxx.xxx.xxx" is the IP address of the NIC to bind to.
Bind SOAP Interface
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office Server\Groove\Groove Relay\Parameters]
"AdminGrooveSOAPInterface"="xxx.xxx.xxx.xxx"
Where the "xxx.xxx.xxx.xxx" is the IP address of the NIC to bind to.
Relay Registry Backup
Export and backup the following Registry keys and store securely off the server:
- Export:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office Server\Groove\Groove Relay\Parameters]
To Backup Directory with file name:
[RelayName]-Parameters.reg
Relay Service Start Settings
For Groove Relay Service – General (tab)
Start type: Automatic
Service status: Started
For Groove Relay Service – Recovery (tab)
First Failure: Restart the service
Second Failure: Restart the service
Third Failure: Restart the service
Reset fail count after: 999
Restart service after: 1 minute
Relay IP Port Filters
For the Public Network Interface
TCP Ports – Permit only following:
- 80 – Relay
- 443 – Relay
- 2492 – Relay
- 8009 – Relay
- 8010 – Relay
- 3389 – Remote Desktop
UDP Ports – Permit All
IP Protocols – Permit only following:
- 6 – TCP
- 17 – UDP
Groove Data Bridge Worksheets
The following worksheets apply to Groove Data Bridge installation and configuration:
- Groove Data Bridge - Specifications Worksheet
- Groove Data Bridge - Installation Worksheet
- Groove Data Bridge - Post-Installation Worksheet
Groove Data Bridge – Specifications Worksheet
The following worksheet is for recording the specific parameters of each Groove Data Bridge server.
Data Bridge Server HardwareHostname:
Server Make / Model:
Operating System / Service Pack:
(Note - Only Windows Server 2003 Enterprise/Standard x64 supported)
Processor(s):
[# procs] x [# cores] [ AMD64 or EM64T] x,xxx MHz
RAM:
MB
Disk Controller Model(s):
Disk Partition(s):
C:\GB
D:\ GB
E:\ GB
F:\ GB
G:\ GB
Backend IP Address(es):
Backend DNS Address
Backed DNS Alias(es)
Frontend IP Address(es):
Frontend DNS Address
Frontend DNS Alias(es)
System Information:
(paste output from c:\systeminfo here)
Groove Data Bridge – Installation and Account Configuration Worksheet
Use the following worksheet as a recording aid during Groove Manager software installation. Italic text indicates defaults, examples, and explanatory information.
Data Bridge Server:
Version:Upgraded From Version:/
Enter Product Key:
/Installation Type
Select – AdvancedFile Location:
C:\Program Files\Microsoft Office Server
/
Select Location for Server Data
To Groove Data Bridge working data folder[C:\GDB_Data]
/
Account Configuration
- Create a new Groove Server Data Bridge
- Restore an existing Microsoft Groove Data Bridge
/
Account Configuration
Server Name:[hostname]
Password:
Remember Password
[Unchecked]
Backup server’s account file
[Unchecked]
Backup Location:
Frequency (days):
1
Backup Time:
2:00 AM
Number of Backups to retain:
3
/
Account Configuration
Web Services key:/
Account Configuration
Create Identity- Unmanaged Identity
- Managed Identity
Email Address / Activation Code:
Invitation Processing
Acceptance conditions:
None
Must be invited as at least:
Manager
Local network listing:
No Listing
Scan new workspaces
[Checked]
Allow workspaces created for Groove 3.0 or later
[Unchecked]
Groove Data Bridge – Post-Installation Worksheet
Use the following checklist worksheet to perform the following Groove Data Bridge configuration tasks after installation:
- Data Bridge Proxy Settings
- Data Bridge Archive Scheduling
- Data Bridge Archive Workspace Invitation
- GFS Workspace Location
- Data Bridge Memory and Processor Options
- Data Bridge Service Start Settings
Data Bridge Proxy Settings
/ Proxy Server SettingsNo Proxy
[Checked]
- Proxy Server:Port:
- Proxy configuration URL:
Proxy Authentication:
User ID:
Password:
Domain:
Use Basic authentication instead of NTLM
[Unchecked]
Disable TCP connections to d server
[Unchecked]
Data Bridge Archive Schedule
/ Archive ScheduleEnable workspace archiving
[Unchecked]
Start Date:
Mm/dd/yyyy
Repeat Interval:
24 hours
Start Time:
1 AM
Archive Message:
For Groove backup support call extension xxxx
Archive Media Set:
GrooveMediaSetXXXX
Archive Event Comment:
Backup Interval is 24 hours
Archive Location:
[E:\Shared Space Archives]
Archive File Retention Period (in days):
0 {Note - 0 means indefinite}
Allow the workspace manager to set the password for the archive
[Checked]
Allow the archive agent to set the password for the archive
[Unchecked]
Archive Password:
Randomly Set Per Space
[Unchecked]
Archive Workspace Password:
Data Bridge Archive Workspace