Design Sample: Corporate Portal with Classic Authentication

Application Pool 4

Web application: Team Sites

Zone Load-Balanced URL

Default

Intranet http://teams

https://teams.fabrikam.com

Default

Intranet http://teams/sites/Team1

http://teams/sites/Team2

http://teams/sites/Team3

https://teams.fabrikam.com/sites/Team1

https://teams.fabrikam.com/sites/Team2

https://teams.fabrikam.com/sites/Team3

Web application: My Sites

http://my

http://my/personal/<site_name>Team1 Team2 Team3

http://teams

Users

Zones and authentication

Server farm

Admin site

Services

App pools

Web applications

Site collections

Sites

Content databases

Zones and URLs

Policies

Zone Team Sites

Zone Policies

Default

Intranet Partner accounts = Deny All

Partner accounts = Deny All

Zone Load-Balanced URL

Default

Intranet http://my

https://my.fabrikam.com

Default

Intranet http://my/personal/User1

http://my/personal/User2

http://my/personal/User3

https://my.fabrikam.com/personal/User1

https://my.fabrikam.com/personal/User2

https://my.fabrikam.com/personal/User3

Zone Self-Service Sites

Web application: Partner Web

Application Pool 5

Project1 Project2 Project3

http://partnerweb/sites

Zone Policies

Default

Intranet Partner accounts = Deny All

Partner accounts = Deny All

Zone Load-Balanced URL

Default

Intranet http://partnerweb

https://remotepartnerweb.fabrikam.com

Default

Intranet http://partnerweb/sites/Project1

http://partnerweb/sites/Project2

http://partnerweb/sites/Project3

https://remotepartnerweb.fabrikam.com/sites/Project1

https://remotepartnerweb.fabrikam.com/sites/Project2

https://remotepartnerweb.fabrikam.com/sites/Project3

Zone Partner Web Sites

Extranet https://partnerweb.fabrikam.com

Extranet https://partnerweb.fabrikam.com/sites/Project1

https://partnerweb.fabrikam.com/sites/Project2

https://partnerweb.fabrikam.com/sites/Project3

Customershttp://www.fabrikam.com

Web application: Published Intranet Content

Application Pool 3

HR Facilities Purchasing

http://intranet

Zone Load-Balanced URL

Default

Intranet http://intranet

https://intranet.fabrikam.com

Default

Intranet http://intranet

http://intranet/hr

http://intranet/facilities

http://intranet/purchasing

Zone Published Intranet Sites

Zone Policies

Default

Intranet

https://intranet.fabrikam.com

https://intranet.fabrikam.com/hr

https://intranet.fabrikam.com/facilities

https://intranet.fabrikam.com/purchasing

Partner accounts = Deny All

Partner accounts = Deny All

Authoring site collection

Web application: Company Internet Site

Application Pool 6

Products Services Support

http://www.fabrikam.com

Zone Load-Balanced URL

Internet http://www.fabrikam.com

Default

Intranet http://fabrikamsite

Zone Load-balanced URL— Administrative

Zone Policies

Default

Intranet

https://fabrikamsite.fabrikam.com

Production site collection

Internet All users = Deny Write

Authors = Full Control

Testers = Deny Write

Authors = Full Control

Testers = Deny Write

Content deployment

Front-end

Web servers

Application

server

Clustered or mirrored

database servers

running SQL Server

Web application:Central Administration Site

Application Pool 1Front-end

Web Servers

Application

server

Clustered or mirrored

database servers

running SQL Server

Web application:Central Administration Site

Application Pool 1

Load Balancer

IntranetDefaultExtranet

Internal employeesRemote employeesIndividual partnershttp://intranet

http://team

http://my

http://partnerweb

http://fabrikamsite (authoring)

https://intranet.fabrikam.com

https://team.fabrikam.com

https://my.fabrikam.com

https://remotepartnerweb.fabrikam.com

https://fabrikamsite.fabrikam.com (authoring)

https://partnerweb.fabrikam.com

Load Balancer

Default group

Internet

Directory — Corporate directory

Authentication type:

· UAG, TMG, or ISA — Forms-based authentication

· SharePoint — NTLM or Kerberos

Directory — Active Directory Domain Services (AD DS)

Authentication type:

· UAG, TMG, or ISA — Forms-based authentication

· SharePoint — NTLM or Kerberos (same as internal employee)

Directory — AD DS

Authentication — Integrated Windows (Kerberos or NTLM)

Anonymous authentication

Application Pool 2

Managed Metadata

IIS Web Site—“SharePoint Web Services”

Unpartitioned services

Access Service

Visio Graphics Service

Excel Calculation Services

Word Services

Word Viewing

PowerPointSecure Store Service

Business Data Connectivity

Search User Profile

Application Pool B

Search

IIS Web Site—“SharePoint Web Services”

Web Analytics

Web Analytics

Managed Metadata

Partitioned services

Partitioned by project in the Partner Web site collection

Managed Metadata

Subscription Settings

Search

Unpartitioned

Unpartitioned instance for the published content

Default group

Custom group

Zone Policies

None

Database settings:

§ Target size per database = 200 gigabytes (GB)

§ Site size limits per site = 30 GB

§ Reserved for second-stage recycle bin = 10%

§ Maximum number of sites = 6

§ Site level warning = 5

Database settings:

§ Target size per database = 200 GB

§ Storage quota per site = 5 GB

§ Maximum number of sites = 40

§ Authoring and Staging site collections hosted in dedicated databases

Database settings:

§ Target size per database = 200 gigabytes (GB)

Database settings:

§ Target size per database = 175 gigabytes (GB)

§ Site size limits per site = 1 GB

§ Reserved for second-stage recycle bin = 15%

§ Maximum number of sites = 180

§ Site level warning = 150

© 2011 Microsoft Corporation. All rights reserved. To send feedback about this documentation, please write to us at ITSPdocs@microsoft.com.