Exercise 7: Creating a new Web Application at https://intranet.wingtip.com

1. Configure DNS setting on the VM so https://intranet.wingtip.com points to local machine.

   1. Launch the DNS Manager from its shortcut in the Windows Start menu in the Administrative Tools group.

   2. In the DNS Manager, expand the nodes and locate for the wingtip.com domain at the following path: DNS > WINGTIPSERVER > Forward Lookup Zones > wingtip.com. Right click on the wingtip.com node and click New Alias (CNAME).

   3. In the New Resource Record dialog, enter name of intranet as the Alias Name and then click the Browse button to create the Fully Qualified domain name.

   4. When the Browse dialog appears, drill down to the wingtip.com node by following the path of WingtipServer > Forward Lookup Zones > wingtip.com. Inside the node for wingtip.com, find and select the record for wingtipserver as shown below. Click OK.

   5. When you have completed this step, you should be able to verify that you created a new record for intranet.wingtip.com as shown in the following screenshot.

   6. Verify the new DNS setting works properly by bringing up a Windows command prompt and running the DOS ping command on the address of https://intranet.wingtip.com.

2. Create a new Web Application at the URL of https://intranet.wingtip.com.
   1. Navigate to the home page of the Central Administration application. If it is not already running, launch it from Start > All Programs > Microsoft SharePoint 2010 Products > SharePoint 2010 Central Administration.
   2. Inside the Application Management section, click on the link with the caption of Manage web applications to navigate to the Web Application Management page.

   3. Make sure the Web Application tab is selected. Click the New button on the very left-hand side of the Ribbon.

   4. The Create New Web Application dialog appears. Note that this is a very tall page and you will have to scroll down to see and fill out all the information required to create a new Web application. There are no changes required in the Authentication section because you should leave the default setting of Classic Mode Authentication.

   5. Scroll down to the IIS Web Site section. Select the option to Create a new IIS web site and enter a Name of Wingtip Intranet. Enter a Port of 80. For the Host Header setting, add a value of intranet.wingtip.com. Add a Path value of c:\inetpub\WingtipIntranet. When you are done, you entries should look like the ones below.

   6. Scroll down to the Security Configuration section and fill it out so it looks like the following screenshot.

   7. Scroll down to the Scroll down to the IIS Web Site section. section. Remove “80” from end of URL so its value is https://intranet.wingtip.com.

   8. Scroll down to the Application Pool section. Select the option to Create new application pool and enter an Application pool name of SharePoint Default App Pool. Make sure you configure the identity for the new application pool with the WINGTIP\SP_WorkerProcess account as shown in the following screenshot.

   9. Scroll down to the Database Name and Authentication section. Make sure the Database Server setting has a value of WingtipServer. Next, give the content database a descriptive name of WingtipIntranet_ContentDB. Leave the authentication settings at the default value of Windows authentication.

   10. At this point, you have configured all the necessary information to create the new Web application at https://intranet.wingtip.com. You can leave all other settings with their default values. Scroll down to the bottom of the page disable the option for the Customer Experience Improvement Program. Click OK to provision the new Web Application.

   11. After SharePoint Server provisions the new Web application, it displays the following dialog. Click on the blue link with the caption of Create Site Collection.

1. After the new site collection has been created, go to its top-level site by navigating to the URL of https://intranet.wingtip.com. You will be prompted for a loin and password. Enter Wingtip\Administrator and a password of Pass@word1. You should be able to see the home page of the site running inside the Web application you just created.

1. Configure Internet Explorer for automatic Windows authentication. The purpose of this step is to eliminate the need to enter a user name and password when you navigate to this site or any other site within the Web application at https://intranet.wingtip.com.

   1. Inside the Internet Explorer, drop down the Tools menu and select Internet Options.

   2. In the General tab of the Internet Options dialog, enter a Home page address of https://intranet.wingtip.com. Click the Apply button to save your setting.

   3. Navigate to the Security tab of the Internet Options dialog. Select the zone named Local Intranet. Click the Sites button to configure the Local Intranet zone.

   4. When you click the Site button in the previous step, the Internet Explorer will display the following dialog. Click on the Advanced button

   5. The next dialog allows you to add one or more URLs that will be added to the Local Intranet zone. Add the URL of https://intranet.wingtip.com.

   6. Click Close to dismiss the first dialog. Next click OK to dismiss the next dialog which should bring you back to the original Internet Options dialog. Click OK to save all your changes.
   7. Now close the Internet Explorer and then reopen it. You should be able to see the home page of the new Team Site you created at https://intanet.wingtip.com without having to enter any login information.
2. Enable the user code service (for sandboxed solutions).
   1. The user code service used by sandboxed solutions is not started by default. However before starting it you need to address an issue. In SharePoint 2010 Beta 2 the user code service will not run when SharePoint is running on an Active Directory domain controller. This can be fixed by running a simple PowerShell script
   2. Open the PowerShell ISE by selecting Start > All Programs > Accessories > Windows PowerShell > Windows PowerShell ISE.
   3. Enter the following script and run it in the ISE:

      C#

      $acl = Get-Acl HKLM:\System\CurrentControlSet\Control\ComputerName $person = [System.Security.Principal.NTAccount]"Users" $access = [System.Security.AccessControl.RegistryRights]::FullControl $inheritance = [System.Security.AccessControl.InheritanceFlags]"ContainerInherit, ObjectInherit" $propagation = [System.Security.AccessControl.PropagationFlags]::None $type = [System.Security.AccessControl.AccessControlType]::Allow $rule = New-Object System.Security.AccessControl.RegistryAccessRule($person, $access, $inheritance, $propagation, $type) $acl.AddAccessRule($rule) Set-Acl HKLM:\System\CurrentControlSet\Control\ComputerName $acl
   4. Now, start the user code service. Select Start > All Programs > Microsoft SharePoint 2010 Products > SharePoint 2010 Central Administration.
   5. Select the System Settings link in the left margin and then select Manage Services on Server.
   6. Click the Start link next to the Microsoft SharePoint Foundation User Code Service service to enable the sandbox.