Lab A (Module 10)
Implement Folder-Level Security

This document is provided “as-is”. Information and views expressed in this document, including URL and other Internet Web site references, may change without notice. You bear the risk of using it.

This document does not provide you with any legal rights to any intellectual property in any Microsoft product. You may copy and use this document for your internal, reference purposes.

© 2011 Microsoft. All rights reserved.

SharePoint Enterprise Content Management Implementers' Course

Contents

Task 1: Create the SharePoint Groups

Task 2: Create the Project Documents Library

Task 3: Enable Developer Dashboard and Review the Execution Time

Task 4: Break Inheritance on the Project Folders

Task 5: View Content Using Test User Accounts

Task 6: Review the Execution Time with Unique Permissions

In this exercise, you create three SharePoint groups and assign a user to each group. These groups are used to secure the content at a folder level. You use the Developer Dashboard to review the effect of unique permissions on performance.

Task 1: Create the SharePoint Groups

In this task, you create three SharePoint groups and a user to each group.

  1. In the Contoso Marketing site, open if the site isn’t open in your browser), click Site Actions | Site Permissions.
  1. When the Permission page opens, click the Create Group Ribbon button.
  1. Enter the name Apollo Marketing Team. Do not change any other property.
  2. Click OK to create the group.
  3. When the Apollo Marketing Group page opens, click New | Add Users from the menu.
  1. Enter cotnoso\markhin the User/Groups text box and click the Check Names icon to verify the account.

  1. Uncheck the Send welcome e-mail to the new users checkbox.
  2. Select OK to add Mark Hanson to the group.
  3. Repeat steps 1-6 for the Gemini Marketing Team and the Orion Marketing Team using the following users:

Gemini Marketing Team – Renee Lo: User ID Contoso\reneel

Orion Marketing team – Spencer Low: User ID Contoso\spencel

Task 2: Create the Project Documents Library

In this task, you use an existing solution to create and deploy the Project Documents library complete with content.

  1. Point to All Programs, point to Microsoft SharePoint 2010 Products, and right click SharePoint 2010 Management Shell.
  2. Locate SetupMod10LabA.ps1, which is included in the student files.
  3. Type the full path including the ps1 file and the file name. Click Enter to execute it.
  4. In the Contoso Marketing site, open the site isn’t open in your browser, and then click Site Actions | Site Settings.
  1. When the Site Settings page is open, click the Manage site features link.

  1. Locate the Mod 10 – Lab A Setup feature and click Activate. This creates the Project Document library, complete with content in the Marketing site.
  1. Open the Contoso Marketing site located at
  2. Verify the Project Documents library link displays in the Quick Launch control located in the left column.

Task 3: Enable Developer Dashboard and Review the Execution Time

In this task, you use PowerShell and enable the Developer Dashboard. You use the Developer Dashboard to review the time to execute the page.

1.Point to All Programs, point to Microsoft SharePoint 2010 Products, and right click SharePoint 2010 Management Shell.

  1. Locate EnableDeveloperDashboard.ps1, which is located in the student files.
  2. Type the full path (the ps1 file and the file name). Click Enter to execute it.
  3. In the Contoso Marketing site, open if the site isn’t open in your browser.
  4. Click Project Documents located in the Quick Launch control.
  1. Scroll to the bottom of the page to review the Developer Dashboard details. Review the Execution Time located in the top, right column.
  1. Press F5 to refresh the page and continue to review the Execution Time value to determine a basic range of times.

Task 4: Break Inheritance on the Project Folders

In this task, you set folder-level permissions on a set of existing folders that currently inherit from the parent.

1.In the Contoso Marketing site, open if the site isn’t open in your browser.

  1. Click Project Documents to open the library.
  2. Hover over the Apollo folder link and click the drop-down arrow. Select Manage Permission item.

  1. The folder is currently inheriting the permission from the parent. Click the Stop Inheriting Permissions Ribbon button.

  1. Click OK to dismiss the Warning dialog.
  2. Verify the folder is not inheriting permissions from the parent by viewing the yellow security message below the Ribbon.

  1. Select the checkbox located next to the Name label above the list of user permissions. This will select all user permissions associated with the library.

  1. Click the Remove User Permissions Ribbon button to remove all selected user permissions from the library.
  1. Click OK to dismiss the Warning dialog.
  2. Click the Remove User Permissions Ribbon button to remove all selected user permissions from the library.
  1. Click OK to dismiss the Warning dialog.
  2. In the Contoso Marketing site, open if the site isn’t open in your browser.
  3. Click Project Documents to open the library.
  4. Hover over the Apollo folder link and click the drop-down arrow. Select Manage Permission item.
  1. Click the Grant Permissions Ribbon button.
  1. When the Permissions dialog box opens, enter Apollo Marketing team and click the Check Names icon.
  2. Select the Contributor permission.
  3. Unselect the Send welcome e-mail to the new users checkbox and click OK.
  4. Repeat the steps for the Gemini and Orion folders using the following values:

Gemini – Gemini Marketing team

Orion – Orion Marketing team

  1. Open Apollo folder. Navigate down to the Folder named Break by clicking the following folders: 3/A/1/D/5/E/8.
  2. Repeat the steps to assign the Apollo Marketing team to the Break folder.

Task 5: View Content Using Test User Accounts

In this task, you verify the folder-level permissions to ensure they are set correctly.

1.In the Contoso Marketing site, open if the site isn’t open in your browser.

  1. Click the Welcome control displaying your login name in the upper, right corner of the home page. Select Sign in as Different User.
  1. Enter Contoso/markh for the user name and pass@word1 as the password. Select OK.
  2. Verify Mark Hansen displays in the Welcome control.
  1. Click Project Marketing Plans link in the Quick Launch control to open the library.
  2. Verify Mark Hansen can view only content located in the Apollo folder.
  1. Repeat the steps using Renne Lo (contoso\reneel) and Spencer Low (contoso\spencel).

Task 6: Review the Execution Time with Unique Permissions

In this task, you use developer dashboard to review the time to execute the page after unique permissions are used.

1.In the Contoso Marketing site, open if the site isn’t open in your browser.

  1. Click Project Documents, which is located in the Quick Launch control.
  1. Scroll to the bottom of the page to review the Developer Dashboard details. Review the Execution Time located in the top-right column.
  1. Press F5 to refresh the page and continue to review the Execution Time value to determine a basic range of times.
  2. Compare the range from Task 3 to Task 5.
  3. Point to All Programs, point to Microsoft SharePoint 2010 Products, and then right-click SharePoint 2010 Management Shell.
  4. Locate DisableDeveloperDashboard.ps1 in the student files.
  5. Type the full path including to the ps1 file including the file name. Click Enter to execute it.

1