SharePoint Secrets

AZ-300: Microsoft Azure Architecture Technologies Passed.

2020-02-09T16:33:00.000-08:00

AZ-300: Microsoft Azure Architecture Technologies Passed.

AZ-203: Developing Solutions for Microsoft Azure Passed.

2020-01-19T11:20:00.000-08:00

AZ-203: Developing Solutions for Microsoft Azure Passed.

AZ-400 Microsoft Azure DevOps Engineer Expert Passed.

2020-01-12T16:52:00.000-08:00

AZ-400 Microsoft Azure DevOps Engineer Expert Passed.

Security of agent pools - Azure Pipelines

2019-11-11T14:12:00.002-08:00

An Agent that you set up and manage on you own to run jobs is a self-hosed agent. You can use self-hosted agents in Azure Pipelines.

In Azure DevOps Sever, agent pools are scoped to the entire server; so you can share the agent machines across projects and collections. When you create a pipeline, you specify which pool it uses. You create and manage agent pools from the agent pools tab in admin settings.

Security of agent pools.

Understanding how security works for agent pools helps you control sharing and use of agents.
Roles are defined on each agent pool, and membership in these roles governs what operations you can perform on an agent pool.

Role on an agent pool in organization settings	Purpose
Reader	Members of this role can view the agent pool as well as agents. You typically use this to add operators that are responsible for monitoring the agents and their health.
Service Account	Members of this role can use the organization agent pool to create a project agent pool in a project. If you follow the guidelines above for creating new project agent pools, you typically do not have to add any members here.
Administrator	In addition to all the above permissions, members of this role can register or unregister agents from the organization agent pool. They can also refer to the organization agent pool when creating a project agent pool in a project. Finally, they can also manage membership for all roles of the organization agent pool. The user that created the organization agent pool is automatically added to the Administrator role for that pool.

The All agent pools node in the Agent Pools tab is used to control the security of all organization agent pools. Role memberships for individual organization agent pools are automatically inherited from those of the 'All agent pools' node. By default, TFS administrators are also administrators of the 'All agent pools' node.
Roles are also defined on each project agent pool, and memberships in these roles govern what operations you can perform on an agent pool at the project level.

Role on a agent pool in project settings	Purpose
Reader	Members of this role can view the project agent pool. You typically use this to add operators that are responsible for monitoring the build and deployment jobs in that project agent pool.
User	Members of this role can use the project agent pool when authoring pipelines.
Administrator	In addition to all the above operations, members of this role can manage membership for all roles of the project agent pool. The user that created the pool is automatically added to the Administrator role for that pool.

The Security action in the Agent pools tab is used to control the security of all project agent pools in a project. Role memberships for individual project agent pools are automatically inherited from what you define here. By default, the following groups are added to the Administrator role of 'All agent pools': Build Administrators, Release Administrators, Project Administrators.

Error: No package found with specified pattern: D:\a\r1\a\**\*.zip for Angular Azure DevOps pipeline release.

2019-10-29T16:23:00.001-07:00

How to easily deploy the Angular app to Azure by configuring build and release pipelines in Azure DevOps

Create build pipeline definition

To create a build pipeline that will create the optimized version of the app. Start with creating a new build pipeline from Pipelines >> Build on your team project in the browser.

In this pipeline, you will add following tasks:

Once this build pipeline is defined, you can queue the build. The created artifact should contain a file named dest.zip which will be used to do the deployment.

Release & Deploy
To do the deployment of the app, we will create a Release Pipeline.

Under the Pipeline tab, select the build pipeline that you have created earlier as the artifact source to be deployed. Let the default version be the “Latest”.

Under the Tasks tab, Select your Azure Account and authorize Azure DevOps to access resources from that Azure account when prompted.

Now, select the task that is automatically added, named Deploy to Azure App Service. In the parameter Package or Folder, select the .ZIP file from the artifact. Ensure that File Transforms & Variable Substitution and App Settings section are empty.

Now we can create a release and proceed with the deployment.

Since I forgot to publish my artifacts on my pipeline build, got an error during my release execution that zip file could not found.

No package found with specified pattern: D:\a\r1\a\**\*.zip

After publish my artifacts, my release executed successfully.

Detecting SharePoint environment from an SPFX.

2019-06-25T13:11:00.000-07:00

Detecting SharePoint environment from an SPFX.

SPFX web parts can be added to modern and classic SharePoint pages and we might need to load different resources depending of the environment type.
The environment type can be detected using the EnvironmentType enumeration, directly from your SPFX code.

Member	Description
ClasicSharePoint	Indicates that the framework was loaded from a classic SharePoint page
Local	Indicates that the framework was loaded from the workbench
SharePoint	Indicates that the framework was loaded by a client-rendered SharePoint page
Test	Represents the scenario of the framework hosted in a unit/integration test

To detect the environment type start by importing the enumeration from the sp-core-library:

import { Environment, EnvironmentType} from '@microsoft/sp-core-library';

Use the code below to target a specific environment.

if(Environment.type == EnvironmentType.ClassicSharePoint){ //Classic SharePoint page }else if(Environment.type === EnvironmentType.Local){ //Workbenck page }else if(Environment.type === EnvironmentType.SharePoint){ //Modern SharePoint page }else if(Environment.type === EnvironmentType.Test){ //Running on Unit test enveironment }

Modern SharePoint site creation with REST API.

2019-06-25T10:51:00.003-07:00

The following REST commands are available for creating a modern SharePoint Communication site:

Create. Create a new SharePoint site.
Delete. Deletes a SharePoint site.
Status. Get the status of a SharePoint site.

The base URL for the REST commands is _api/SPSiteManager.

Create a modern site

Using the following REST api you can create both Communication sites and non-group associated Team Sites.

To specify which type of site to create you use the WebTemplate attribute. Use one of the following templates to select which type of site to create:

Communication Site: SITEPAGEPUBLISHING#0
non-group associated Team Site: STS#3

JSON

url: /_api/SPSiteManager/create
accept: application/json;odata.metadata=none
odata-version: 4.0
method: POST
body:
{
  "Title": "Communication Site 1",
  "Url":"https://contoso.sharepoint.com/sites/commsite1",
  "Lcid": 1033,
  "ShareByEmailEnabled":false,
  "Classification":"Low Business Impact",
  "Description":"Description",
  "WebTemplate":"SITEPAGEPUBLISHING#0",
  "SiteDesignId":"6142d2a0-63a5-4ba0-aede-d9fefca2c767",
  "Owner":"owner@yourtenant.onmicrosoft.com"
}

Response

If successful, this method returns a 200, OK response code and simple JSON object in the response body with the following details.

JSON

{
  "SiteId":"d11e59ca-1465-424c-be90-c847ba849af5",
  "SiteStatus":2,
  "SiteUrl":"https://contoso.sharepoint.com/sites/commsite1"
}

Delete a modern site

The REST API to delete a modern site is:

JSON

url: /_api/SPSiteManager/delete
method: POST
accept: application/json;odata.metadata=none
odata-version: 4.0
body:
{
  "siteId":"d11e59ca-1465-424c-be90-c847ba849af5"
}

Response

If successful this method returns a 200, OK response code.

Deploying SharePoint Server Hybrid MS-301 Completed.

2019-06-17T15:54:00.003-07:00

Deploying SharePoint Server Hybrid MS-301 Completed.

List of ports used by SharePoint 2016

2017-04-11T16:29:00.001-07:00

Protocol	Port	Usage	Comment
TCP	80	http	Client to SharePoint web server traffic (SharePoint – Office Web Apps communication)
TCP	443	https/ssl	Encrypted client to SharePoint web server traffic (Encrypted SharePoint – Office Web Apps communication)
TCP	1433	SQL Server default communication port.	May be configured to use custom port for increased security
UDP	1434	SQL Server default port used to establish connection	May be configured to use custom port for increased security
TCP	445	SQL Server using named pipes	When SQL Server is configured to listen for incoming client connections by using named pipes over a NetBIOS session, SQL Server communicates over TCP port 445
TCP	25	SMTP for e-mail integration	Cannot be configured
TCP	16500-16519	Ports used by the search index component	Intra-farm only Inbound rule Added to Windows firewall by SharePoint
TCP	22233-22236	Ports required for the AppFabric Caching Service	Distributed Cache…
TCP	808	Windows Communication Foundation communication	WCF
TCP	32843	Communication between Web servers and service applications	http (default) To use custom port, see references section Inbound rule Added to Windows firewall by SharePoint
TCP	32844	Communication between Web servers and service applications	https Inbound rule Added to Windows firewall by SharePoint
TCP	32845	net.tcp binding: TCP 32845 (only if a third party has implemented this option for a service application)	Custom Service Applications Inbound rule Added to Windows firewall by SharePoint
TCP	32846	Microsoft SharePoint Foundation User Code Service (for sandbox solutions)	Inbound on all Web Servers Inbound rule Added to Windows firewall by SharePoint Outbound on all Web and App servers with service enabled.
TCP	5725	User Profile Synchronization Service(FIM)	Synchronizing profiles between SharePoint 2013 and Active Directory Domain Services (AD DS) on the server that runs the Forefront Identity Management agent
TCP + UDP	389	User Profile Synchronization Service(FIM)	LDAP Service
TCP + UDP	88	User Profile Synchronization Service(FIM)	Kerberos
TCP + UDP	53	User Profile Synchronization Service(FIM)	DNS
UDP	464	User Profile Service(FIM)	Kerberos change password
TCP	809	Office Web Apps	Intra-farm Office Web Apps communication.

SharePoint 2016 70-339 completed.

2017-04-11T16:06:00.001-07:00

SharePoint 2016 70-339 Completed.

Protecting Your SharePoint 2010 Content with SQL Server 2008 Transparent Database Encryption

2014-10-14T15:31:00.000-07:00

High Level Steps to enable TDE
Create the DMK
Create the TDE Cert
Backup the TDE Cert
Create the DEK
Encrypt the DB
Monitor Progress

1. Creating the Database Master Key (DMK)
Symmetric key used to protect private keys and asymmetric keys
Protected itself by Service Master Key (SMK), which is created by SQL Server setup
Use syntax as follows:

USE master;
GO
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'P@ssword1';
GO

2. Create Certificate Protected by DMK
Protected by the DMK
Used to protect the database encryption key

Use syntax as follows:
USE master;
GO
CREATE CERTIFICATE CompanyABCtdeCert WITH SUBJECT = 'CompanyABCTDE Certificate' ;
GO

3. Backup Master Key and Cert
Without a backup, data can be lost
Backup creates two files, the Cert backup and the Private Key File
Use following syntax:

USE master;
GO
BACKUP CERTIFICATE CompanyABCtdeCert TO FILE = 'c:\Backup\BackupCompanyABCtdeCERT.cer'
WITH PRIVATE KEY (
FILE = 'c:\Backup\BackupCompanyABCtdeDECert.pvk',
ENCRYPTION BY PASSWORD = 'P@ssword1' );
GO

4. Create a Database Encryption Key (DEK)
DEK is used to encrypt specific database
One created for each database
Encryption method can be chosen for each DEK
Use following syntax:

USE SharePointContentDB;
GO
CREATE DATABASE ENCRYPTION KEY
WITH ALGORITHM = AES_256
ENCRYPTION BY SERVER CERTIFICATE CompanyABCtdeCert
GO

5. Enable TDE
Data encryption will begin after running command
Size of DB will determine time it will take, can be lengthy and could cause user blocking
Use following syntax:
USE SharePointContentDB
GO
ALTER DATABASE SharePointContentDB
SET ENCRYPTION ON
GO

6. Monitor TDE Progress
State is Returned
State of 2 = Encryption Begun
State of 3 = Encryption Complete
Use following syntax:
USE SharePointContentDB
GO
SELECT *
FROM sys.dm_database_encryption_keys
WHERE encryption_state = 3;
GO

7. Restoring TDE Encrypted DB to Other Server

Step 1: Create new Master Key on Target Server (Does not need to match source master key)
Step 2: Backup Cert and Private Key from Source
Step 3: Restore Cert and Private Key onto Target (No need to export the DEK as it is part of the backup)
USE master;
GO
CREATE CERTIFICATE CompanyABCtdeCert
FROM FILE = 'C:RestoreCompanyABCtdeCert.cer'
WITH PRIVATE KEY (
FILE = 'C:RestoreCompanyABCtdeCert.pvk'
, DECRYPTION BY PASSWORD = 'CrypticTDEpw4CompanyABC!'
)
Step 4: Restore DB

The Security Token Service is not available.

2013-07-19T15:38:00.003-07:00

WebHost failed to process a request.
Sender Information: System.ServiceModel.ServiceHostingEnvironment+HostingManager/17653682
Exception: System.ServiceModel.ServiceActivationException: The service '/SecurityTokenServiceApplication/securitytoken.svc' cannot be activated due to an exception during compilation. The exception message is: Exception has been thrown by the target of an invocation.. ---> System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.InvalidOperationException: The farm is unavailable.
at Microsoft.SharePoint.Administration.Claims.SPSecurityTokenServiceManager.get_Local()
at Microsoft.SharePoint.IdentityModel.SPSecurityTokenServiceConfiguration..ctor()
--- End of inner exception stack trace ---
at System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck)
at System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache)
at System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache)
at System.Activator.CreateInstance(Type type, Boolean nonPublic)
at System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
at System.Activator.CreateInstance(Type type, BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustServiceHostFactory.CreateSecurityTokenServiceConfiguration(String constructorString)
at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustServiceHostFactory.CreateServiceHost(String constructorString, Uri[] baseAddresses)
at Microsoft.SharePoint.IdentityModel.SPSecurityTokenServiceHostFactory.CreateServiceHost(String constructorString, Uri[] baseAddresses)
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.CreateService(String normalizedVirtualPath)
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.ActivateService(String normalizedVirtualPath)
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath)
--- End of inner exception stack trace ---
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath)
at System.ServiceModel.ServiceHostingEnvironment.EnsureServiceAvailableFast(String relativeVirtualPath)
Process Name: w3wp
Process ID: 5328

The Managed Metadata Service or Connection is currently not available. The Application Pool or Managed Metadata Web Service may not have been started. Please Contact your Administrator.

The Security Token Service is not available.
The Security Token Service is not issuing tokens. The service could be malfunctioning or in a bad state.

*******************************************************************************

I resolved this issue by going into IIS, going to the security token application pool, advanced and saw that “enable 32-bit applications” was set to true, change this to false, re-run the analyzer and Problem solved.

Attempted to use an object that has ceased to exist. (Exception from HRESULT: 0×80030102(STG_E_REVERTED))

2013-05-03T14:10:00.000-07:00

In my web part I used followig code
I used to write the code like this

using (SPSite _site = SPContext.Current.Site)
{
  using (SPWeb _web = site.RootWeb)
  {
   // your code
  }
}

To correct this issue use code like following in my web part

SPSite currSite = SPContext.Current.Site;
SPWeb currWeb = currSite.RootWeb;
using (SPSite eSite = new SPSite(currSite.ID))
{
 using (SPWeb eWeb = eSite.OpenWeb(currWeb.ID))
 {
    //Your code
 }
}

Happy coding…

Upgrade the Managed Metadata service application to SP 2013

2013-02-01T13:06:00.000-08:00

Step 1 : Take backup of Managed Metadata server application DB.

Step 2 : Restore the MMS DB in SP 2013 SQL environment.

Step 3 : To Store the application pool that you want to use as a variable for this service application, at the PowerShell command prompt, type the following command :

$applicationPool = Get-SPServiceApplicationPool -Identity 'SharePoint Web Services default'

* SharePoint Web Services default is the name of the service application pool that will contain the new service applications.

Step 4: To upgrade the MMS, type the following command in PowerShell command prompt:

$mms = New-SPMetadataServiceApplication -Name 'My Managed Metadata Service Application' -ApplicationPool $applicationPool -DatabaseName 'Managed Metadata Service_DB'

Step 4:  Type the following command in PowerShell command prompt for creating proxy service:

New-SPMetadataServiceApplicationProxy -Name " My Managed Metadata Service Proxy" -ServiceApplication $mms -DefaultProxyGroup
For more information click here

Upgrade SharePoint from 2010 to 2013

2013-01-10T16:44:00.002-08:00

Welcome to SharePoint 2013

I just finished upgrading my SP 2010 website to SP 2013 by attached content database More details about upgrade process from here:

http://technet.microsoft.com/en-us/library/cc262483(v=office.15)

SharePoint 2010: Unable to start UPA sync service ,stuck at “Starting”

2012-12-05T13:44:00.001-08:00

Unable to start User Profile sync service from Central administration site -system settings-Services on server. The service freezes at "starting" and never start. Below are the information from event viewer and verbose enabled ULS logs.

I found the below solution at Here

Resolution

- Stop User profile service and User profile sync service on ALL SharePoint servers in the farm

- Clear timer config cache by following the "resolution" documented athttp://support.microsoft.com/kb/939308

- Deleted the Pending timer job related to the UPA sync service provisioning using Central administration-Monitoring-check job status

- Confirmed that the security token service has only windows and anonymous enabled ( from IIS manager-SharePoint web services-Security token service-Authentication (under IIS))

- On the SharePoint server access the registry editor and confirm that the information related to FIM ( database servername , sync DB name etc ) are properly populated, if found wrong , back up the registry key and edit the values to reflect the right information.

HKLM\system\currentcontrolset001\services\FIMservice

HKLM\system\currentcontrolset002\services\FIMservice

HKLM\system\currentcontrolset\services\FIMservice

- Delete all FIM related certificates from certificate store ( for account and system) . Make sure that no FIM related certificate is listed in any folders when looked at certificate manager.

- From Central administration-Application management-Manage service application, Make sure the User profile service application and its proxy are started, If found stopped, its always recommended to recreate them taking necessary backups (mysites)

- Start User profile service on the machine where you would like to start the User profile sync service (use central administration console)

- Once the service is started, try starting the User profile sync service from the central administration site

User Cannot be Found When Opening List/Library Settings or Workflow Settings

2012-10-22T17:26:00.000-07:00

I have encountered the User cannot be found error a few times when accessing the List Settings or Library Settings.

Solution:

To republish the workflows you can follow the next steps:

Open your site in SharePoint Designer 2010
Click on the Workflows link from the Site Objects menu
Click on the workflow name, this will open your workflow
Click on the Publish button
Do step 3 and 4 for all the workflows.

Go back to your List or Library Settings and the error should be gone.

Setting up a managed metadata service application to server one or more web applications

2012-10-05T14:55:00.001-07:00

Found article at
http://www.lamber.info/post/2010/12/12/Setting-up-a-managed-metadata-service-application-to-server-one-or-more-web-applications.aspx

Assigning two or more managed metadata service applications to a single web application

You are also able to assign multiple service applications to a single web application. When doing so with a managed metadata service application, however, you have to consider some settings before proceeding.

Imagine that you have to maintain two separate managed metadata service applications for two different departmental projects. You can do this by creating two separate managed metadata service applications and assign them to the corresponding web applications. After a while, you need to combine both service applications for a single web application. You can do this by following the same steps as seen in the previous scenario. Choose the service applications that you want to consume in your web application by selecting a proxy group or defining your custom selections.

You can do this, however, you have to consider following when assigning multiple managed metadata service applications to a single web application:

both term stores (service applications) with managed terms are available for your web application
both term stores can provide content-type hub syndication
the already stored enterprise keywords of both term stores are served to your web application, however, only one term store of both can be your default storage location for your keywords
the already stored column specific term sets of both term stores are served to your web application, however, only one term store of both can be your default storage location of your column specific term sets

Everything except the storage of enterprise keywords and column specific term sets function properly. This happens if both managed metadata service applications are configured to be the default term stores. You might encounter following error message when inserting a new enterprise keyword:

Therefore, plan carefully before separating managed metadata service applications. You have to ensure that only one of both term stores is the default term store for the web application. You can make the changes in the managed metadata service connection settings:

open the central administration
Application management –> Manage service applications
select the row of type Managed Metadata service Connectionof your metadata service application
press Properties in the ribbon bar
choose This service application is the default storage location for Keywords and This service application is the default storage location for column specific term sets

If you already have a default term store in the farm you will get this error message:

Now, it is up to you to ensure that you do not use two default term stores on the same web application. Please note that disabling these settings is a farm wide setting.

#160005: Bad response from SMTP. Client host rejected: Access denied

2012-09-12T17:07:00.003-07:00

Here is message from the log file C:\Program Files\Common Files\microsoft shared\Web Server Extensions\12\LOGS

High #160005: Bad response from SMTP host'mail.mydomain.com': 554 5.7.1 : Client host rejected: Access denied.

I resolved this SMTP issues after adding all WFE server IP into SMTP relay address.

One of our DMZ WFE IP was not added into SMTP relay address. That's the reason all the OOTB overdue mail notification failed and got the below message:
The e-mail message cannot be sent. Make sure the outgoing e-mail settings for the server are configured correctly.

Robots.txt prevents SharePoint 2010 search crawler from crawling sites

2012-08-30T18:01:00.002-07:00

I added robots.txt on our preview server to prevent Google’s bot or Bing’s bot from indexing our business’s preview sites.

Original robots.txt:
User-agent: *
Disallow: /

Effectively it should stop all legitimate bots from indexing preview sites. However this also stopped SharePoint 2010’s search crawler from crawling the sites. Any full crawl gave me 0 results.

Updated robots.txt:
User-agent: Mozilla/4.0 (compatible; MSIE 4.01; Windows NT; MS Search 6.0 Robot)
Allow: /
User-agent: *
Disallow: /

"Tags" tab is missing when you open "Tags and Notice board" popup

2012-08-15T14:29:00.000-07:00

Why does the Managed Metadata Service have to be running?

You might be wondering why it is necessary to have the Managed Metadata service application provisioned in order to use the social computing features? The reason is that the “tags” that users create when tagging pages, documents, list items, etc., get stored in the Keywords portion of the Term Store (which is the name of the central metadata repository that is maintained by the Managed Metadata service).

The Keywords portion of the Term Store is only half of the Managed Metadata repository. The other half is frequently referred to as the Taxonomy portion of the Term Store. The Taxonomy portion of the Term Store is hierarchical, while the Keywords portion is random. The master list of user tags gets stored randomly as they are created in the Keywords portion of the Term Store:

If the Managed Metadata service is not provisioned and running, users can’t use the social tagging features, because SharePoint 2010 has nowhere to maintain a master list of tags. One way to recognize that the Managed Metadata service is not provisioned/running properly is when your SharePoint site looks like this:

If you see this behavior in your SharePoint 2010 site, the first place to look is in Central Administration to verify that the Managed Metadata service is running.

One more point before moving on to the User Profile service application. I have been referring to the Keywords portion of the Managed Metadata Term Store as the place that SharePoint 2010 stores the “master list” of user tags. This is an important concept to understand, and here is a little more detail.

Each time a user starts to tag an item in SharePoint 2010, the Keywords portion of the Term Store is queried in real time to see if suggestions can be made to the user about previous keywords that other users have used. If a keyword appears in the list of suggestions and the user deems it suitable, the user can use it to tag the item. If not, the user can add their own unique keyword to the Keywords store and then it will be available for SharePoint 2010 to use as a suggestion in the future for other users.

So, the Keywords portion of the Term Store only stores one instance of a given keyword. That instance may be used by many users and many times as they tag items throughout SharePoint. Therefore, the Keywords list in the Term Store is truly a master list of unique keywords.

Add Excel Content Types in SharePoint 2010

2012-08-15T11:28:00.000-07:00

Step 1:
Navigate Site Actions --> Site Settings --> Under Galleries --> Click Site content Types and then click Create button.

Step 2:
In the Select parent content type from list, select Document set content types and then click ok.

Step 3:
On the site content type Advanced settings page, select Upload a new document template, and then click browse to browse to and select the document template you want to assign to the site content type. A document template choose can be any file such as a Excel, Word document, PowerPoint slide presentation, etc., And then click OK.

Step 4:
In the Document Library settings dialog under General settings, click advanced settings. In the content types section, click Yes for Allow management of content types and then click OK.

Step 5:
Back in the Document Library setting dialog under content types, click Add from existing site content types. In the Available Site Content Types list, select your content type and then click Add.

Step 6:
Now we can see the new content type on the New Document menu.

How to get SPUser or SPGroup from Person or Group field

2012-07-15T13:37:00.002-07:00

You have person or group field in SharePoint list and you want to programmatically get the user or person.

The below code to gets SPUser from User or Group field in the list when multiple choice and Groups are not allowed in the field:
//get SPUser
SPFieldUser userField = (SPFieldUser)item.Fields.GetField("Users");
SPFieldUserValue userFieldValue = (SPFieldUserValue)userField.GetFieldValue(item["Users"].ToString());
SPUser user = userFieldValue.User;

This part of code would help you to get SPUser when multiple choice is allowed and groups are not allowed:

//Multiple choices are allowed
SPFieldUser userField = (SPFieldUser)item.Fields.GetField("Users");
SPFieldUserValueCollection userFieldValueCollection = (SPFieldUserValueCollection)userField.GetFieldValue(item["Users"].ToString());
foreach (SPFieldUserValue userFieldValue in userFieldValueCollection)
{
Console.WriteLine(" " + userFieldValue.User.LoginName);
}

And when group is allowed. The below code to gets group

//Group or User are allowed
SPFieldUser userField = (SPFieldUser)item.Fields.GetField("Users");
SPFieldUserValue userFieldValue = (SPFieldUserValue)userField.GetFieldValue(item["Users"].ToString());
//Tries to get SPUser
if (userFieldValue.User != null)
{
SPUser user = userFieldValue.User;
}
//if the field contain group
else
{
SPGroup group = web.SiteGroups.GetByID(userFieldValue.LookupId);
}

Adding new font into Rich Text Editor font DropDown box in SP 2010

2012-07-13T12:18:00.001-07:00

It’s just as easy as that but the style sheet class must be defined specially and the same reference should called in your master page. The code for that looks like this, where I used a font from googles front directory.

FontCSSStyles.css

/*************** Changing SP2010 default font **************/

/*
Add “Helvetica” font from googles directory http://www.google.com/webfonts/family?family=Helvetica
*/
@import url("http://fonts.googleapis.com/css?family=Helvetica");

.ms-rteFontFace-12
{
-ms-name: "Helvetica";
font-family: "Helvetica", arial, sans-serif;

-webkit-font-family: "Helvetica", arial, sans-serif;
-moz-font-family: "Helvetica", arial, sans-serif;
-o-font-family: "Helvetica", arial, sans-serif;
}
.ms-rteFontSize-14 {
font-size:14pt;
-webkit-font-size:14pt;
-moz-font-size:14pt;
-o-font-size:14pt;
}
.ms-rteFontSize-16 {
font-size:16pt;
-webkit-font-size:16pt;
-moz-font-size:16pt;
-o-font-size:16pt;
}
.ms-rteFontSize-20 {
font-size:20pt;
-webkit-font-size:20pt;
-moz-font-size:20pt;
-o-font-size:20pt;
}

/***************************************************************/

/********************Master Page reference************************/

SharePoint:CssRegistration ID="FontCSSRegistration01" name="/_layouts/1033/Styles/Community/FontCSSStyles.css" After="corev4.css" runat="server"/>

/*******************************************************/

Access denied within SPSecurity.RunWithElevatedPrivileges

2012-07-04T11:39:00.001-07:00

Normally we will use SPSecurity.RunWithElevatedPrivileges() to execute some code that has to be run under some higher privileges.

Whenever we use SPSecurity.RunWithElevatedPrivileges(), it will execute the code under the context of Application Pool identity. Now we can see a scenario where we will get the “Access denied” exception from the code block even if you use SPSecurity.RunWithElevatedPrivileges.

This was the code snippet that I have used initially inside a custom webpart to read XML content from of an InfoPath form which was uploaded in a document library. This code will throw an “Access denied” exception while calling the OpenBinaryStream() method whenever I execute it through an Anonymous user account.

SPSecurity.RunWithElevatedPrivileges(delegate()

{

SPWeb oWeb = SPContext.Current.Web;

SPList oList = oWeb.Lists["TestList"];

});

Here the problem was, whenever we take the SPWeb instance using

SPWeb oWeb = SPContext.Current.Web;, then SPWeb instance still running under anonymous account only , because we are taking it through the current web context in which the current user is running under anonymous account (IUSR_MachineName). That was the reason that we got that “Access Denied” exception. We need to remember this point all time whenever we use RunWithElevatedPrivileges under the web context.

So what we need to that, we have to take the current context outside the SPSecurity.RunWithElevatedPrivileges block and then create a new instance of SPSite and SPWeb inside the that block which will run under application pool identity.

SPWeb oWeb1 = SPContext.Current.Web; // taking the current SPWeb context running under the anonymous account

SPSecurity.RunWithElevatedPrivileges(delegate()

{

using (SPSite oSite = new SPSite(oWeb1.Site.Url))

{

// creating a new SPSite running under Application pool idenity

using (SPWeb oWeb = oSite.OpenWeb())

{

SPList oList = oWeb.Lists["TestList"];

}

});

The above code will work fine. So, please do not forget to create a new instance of SPSite and SPWeb inside SPSecurity.RunWithElevatedPrivileges,while using it in a web context.