SharePoint Security

Security 101

Concerns

Edward Snowden, SharePoint, and Security
https://www.credera.com/blog/technology-insights/microsoft-solutions/edward-snowden-sharepoint-security/

Pentest – Phases

1. Recon
2. Scan
3. Gain Access
4. Maintain Access
5. Cleanup
6. Pivot

https://en.wikipedia.org/wiki/Penetration_test
https://windsorwebdeveloper.com/comptia-pentest-study-guide/

Tools

https://www.kali.org/
https://nmap.org/

Tutorials – NMAP Zenmap MegaPing
https://www.youtube.com/channel/UCtudLj18oXlrzrPHqKC5bLA

News

WikiLeaks CIA Files: The 6 Biggest Spying Secrets Revealed By the Release of 'Vault (2017)

https://yro.slashdot.org/story/17/03/07/2124251/wikileaks-cia-files-the-6-biggest-spying-secrets-revealed-by-the-release-of-vault-7

“”1,2,3, and 5 were revealed with the documents that Edward Snowden released to The Guardian and was subsequently detailed in at least a couple of the books written about that leak including Data and Goliath by Bruce Schneier and The Snowden Files by Luke Harding.

The NSA and CIA also maintain a cache of vulnerabilities they have discovered but kept to themselves and not shared with Microsoft, Android/Google or Apple as well as the other operating system vendors so they can perform surveillance on any company running those OS.

This activity has been approved by the FISA court all in the name of Homeland security but not necessarily restricted to that activity.” George

2016

Plan security hardening for SharePoint Server 2016

https://technet.microsoft.com/en-us/library/cc262849(v=office.16).aspx

MS16-101 Prevents SharePoint From Changing Managed Account Passwords

https://thesharepointfarm.com/2016/09/ms16-101-prevents-sharepoint-from-changing-managed-account-passwords/

2013/2010

Technet on Planning Security Hardening (2010 or 2013)

https://technet.microsoft.com/en-us/library/cc262849(v=office.15).aspx

https://technet.microsoft.com/en-us/library/cc262849(v=office.14).aspx

Good Article on SharePoint Groups vs. AD Groups and effect on Search Crawls
http://blogs.msdn.com/b/kaevans/archive/2013/05/06/clarifying-guidance-on-sharepoint-security-groups-versus-active-directory-domain-services-groups.aspx

Preview as user (Third Party)
http://blog.mastykarz.nl/previewing-pages-content-targeting-user-segments-sharepoint-2013/

Updates
Interesting Vulnerability Site on SharePoint
Lists - http://www.cvedetails.com/vulnerability-list/vendor_id-26/product_id-11116/Microsoft-Sharepoint-Server.html
Stats - http://www.cvedetails.com/product/11116/Microsoft-Sharepoint-Server.html?vendor_id=26

Legacy

Great Security Articles by Liam Cleary
https://www.helloitsliam.com/

PenTest (Part 1 and 2)
https://www.helloitsliam.com/2014/11/06/sharepoint-2013-pentest-part-1/
https://www.helloitsliam.com/2014/11/10/sharepoint-2013-pentest-part-2/

https://www.helloitsliam.com/2014/11/06/10-ways-to-a-more-secure-sharepoint-infographic/

”SO you wanna hack SharePoint” Presentation - TechEd
http://view.officeapps.live.com/op/view.aspx?src=http%3a%2f%2fvideo.ch9.ms%2fsessions%2fteched%2fna%2f2013%2fATC-B315.pptx

OLD LINKS – Broken due to new site
http://blog.helloitsliam.com/Lists/Posts/Post.aspx?ID=121
Is SharePoint Secure?
part 1 http://blog.helloitsliam.com/Lists/Posts/Post.aspx?ID=100
part 2 http://blog.helloitsliam.com/Lists/Posts/Post.aspx?ID=101
part 3 http://blog.helloitsliam.com/Lists/Posts/Post.aspx?ID=103
part 4 http://blog.helloitsliam.com/Lists/Posts/Post.aspx?ID=105
Is SharePoint Vulnerable
http://blog.helloitsliam.com/Lists/Posts/Post.aspx?ID=116

Effect of SharePoint Security Groups and/or AD Security Groups on Search Crawl Performance
http://blogs.msdn.com/b/kaevans/archive/2013/05/06/clarifying-guidance-on-sharepoint-security-groups-versus-active-directory-domain-services-groups.aspx

Best practices for using fine-grained permissions in SharePoint Server 2013
http://technet.microsoft.com/en-us/library/gg128955.aspx

Troubleshoot common fine-grained permissions issues for SharePoint Server 2013
http://technet.microsoft.com/en-us/library/dn169566.aspx

UAG - SharePoint Publishing Guide
http://technet.microsoft.com/en-us/library/dd857299.aspx

Firewall Ports
azure acs
http://msdn.microsoft.com/en-us/library/windowsazure/jj136814.aspx
office 365
http://blogs.technet.com/b/educloud/archive/2011/11/30/what-firewall-ports-do-i-need-open-to-connect-to-office-365-for-education.aspx
http://ahandyblog.wordpress.com/cloud-technologies/firewall-ports-for-office-365/

2010

Articles

Copy Permissions Between Site Collections Using AD Groups
https://social.technet.microsoft.com/wiki/contents/articles/8138.sharepoint-2010-copying-permissions-between-site-collections.aspx

Fine Grained Permissions Guide
http://technet.microsoft.com/library/gg128953(office.14).aspx

More from SharePoint Galaxy

Authentication
http://thecloudengineer.blogspot.com/2013/02/authentication.html

TMG UAG
http://thecloudengineer.blogspot.com/2011/07/golden-5-rules-on-sharepoint-security.html

Document Security
http://thecloudengineer.blogspot.com/2011/09/sharepoint-document-security.html

SharePoint Designer
http://thecloudengineer.blogspot.com/2012/03/sharepoint-designer-security.html

Books

Actual book http://www.amazon.com/Office-Sharepoint-Security-Microsoft-Corporation/dp/0735626545

Free Ebook http://technet.microsoft.com/en-us/library/cc287889(v=office.12).aspx

Site Collection Administrators

The following is a repost – reference – thank you Per Jakobsen
and more thx mike reference
The text is due to confusion SharePoint creates by having three different groups which when you create a site collection start out having the same persons, but are in fact different.
The three groups are:
Site Collection Owners

• Are controlled via `Central Administration | Application Management | Change site collection administrators'
• Receive email about site collection: quota warnings, not used warnings ...
• Automatically members of Site Collection Administrators
• Can only be users

Site Collection Administrators

• Are controlled via Site Settings | Site collection administrators
• Have full permissions in the site collection
• Can be users or groups

Site Owners

• A group named {SiteName} owners
• By default have full permissions in the site collection, but are subject to changes in permissions, broken inheritance, only read/edit own items,...
• Is just a standard SharePoint group which can be modified, deleted
• Can be users or groups

Strange things
Part of the problem understanding these groups are some of the strange behaviours of these groups:

• When a site collection is created you specify "Primary Site Collection Administrator" and "Secondary Site Collection Administrator" these two persons are entered into all three groups
• When you add "Site Collection Administrators" in Central Administration these can only be users and there can only be max 2 and they become both "Site Collection Owners" and "Site Collection Administrators"
• When you remove a "Site Collection Administrator" in Central Administration he/she is removed from "Site Collection Owners" and "Site Collection Administrators"
• When you add "Site Collection Administrators" in Site Settings in the Site Collection you can specify any number of users and/or groups they only become "Site Collection Administrators"
• If you remove a person who is "Site Collection Owner" as part of modifying "Site Collection Administrators" in Site Settings in the Site Collection he/she is removed from "Site Collection Owners" as well. If it's the Primary Owner then the Secondary Owner becomes Primary Owner, if there is no Secondary Owner, the first user in the list of Site Collection Administrators become new Primary Owner

Content Type Hub

 

Content Type Hub FAQ and Limitations

MSDN Blog - Chaks' SharePoint Corner – FAQ and Limits
http://blogs.msdn.com/b/chaks/archive/2011/02/09/content-type-hub-limitations.aspx

Workflows and Content Type Hubs–What's the story?

http://blogs.msdn.com/b/chaks/archive/2012/05/05/workflows-and-content-type-hubs-whats-the-story.aspx

Configuration

http://gallery.technet.microsoft.com/office/Configuring-the-Content-ee9a0723

Troubleshooting – Content Type Hub

I ran across a strange issue when setting up content type hub today.  No errors.  Followed all the same steps as before so I thought I would include a list of gotchas.

Created new site collection that will act as the content type hub using Team Site Template. 

Verified that Content Type Syndication Hub as Active

Went to Site Content Type and verified that Manage publishing was set, this must be set, check.

Verified on another site collection that the Managed Metadata Service was available.
NOTE: The Subscribed Content Type states
- no content types have been subscribed -

So went to back to Central Admin and verified my Content Type Hub.  That was ok.

But I looked at my Managed Metadata Service Connection Properties.
But don’t click on the link, highlight and select properties in the ribbon

Run both the Content Type Hub and Content Type Subscriber timer jobs.

Tada!

Hope this helps someone else.

People Picker–SharePoint Custom People Picker

2013

Configure People Picker in SharePoint 2013
https://technet.microsoft.com/en-us/library/gg602075.aspx

People Picker Properties via PowerShell
https://thesharepointfarm.com/2014/01/powershell-for-people-picker-properties/

People Picker Troubleshooting Tips
http://thesharepointfarm.com/2014/01/people-picker-troubleshooting-tips

Fix issues across multiple web applications
http://asharepointsolutions.blogspot.in/2014/05/sorry-were-having-trouble-reaching.html

Custom People Picker
http://markviky.blogspot.in/2010/09/custom-people-picker-editor-in.html
http://sp2010peopleeditor.codeplex.com/

Plan for People Picker in SharePoint 2013
http://technet.microsoft.com/en-us/library/gg602068(v=office.15).aspx

Foundation 2013 Fix
http://www.sharepointmaestra.com/Blog/Post/31/New-AD-Group-Member-not-Recognized-by-SharePoint-Foundation
https://technet.microsoft.com/en-us/library/cc263377(v=office.12).aspx

2010

Resolve accounts across multiple forests (SharePoint Server 2010)
http://technet.microsoft.com/en-us/library/dd279546(v=office.14).aspx

SharePoint 2010-Multi domain and forest trust (SharePoint Server 2010)
http://social.technet.microsoft.com/Forums/en-US/c9f490c7-0597-4efd-8159-1df7019422bd/sharepoint-2010multi-domain-and-forest-trust

SharePoint 2010 and One Way Trusts - It Works Fine! (SharePoint Server 2010)
http://www.pointbeyond.com/2012/06/08/sharepoint-2010-and-one-way-trusts-it-works-fine

More from Microsoft
People Picker Overview
http://technet.microsoft.com/en-us/library/gg602068.aspx
People Picker Config
http://technet.microsoft.com/en-us/library/gg602075.aspx

C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN>
stsadm -o setproperty -pn "peoplepicker-searchadforests" -pv "forest:existingdomainname,
Username,Password;domain:newdomainname,Username,Password" -url "siteurl"

Slow
http://social.technet.microsoft.com/Forums/en-US/sharepointgeneral/thread/f215ae14-4f5e-4c95-821e-9de3d7acfd7a/
Detail Diagram
Active Directory: People Picker Browse Display UI
http://msdn.microsoft.com/en-us/library/cc717308.aspx
Active Directory: People Picker Check Name UI
http://msdn.microsoft.com/en-us/library/cc717309.aspx

From the web ...
Repair Script
http://www.cjvandyk.com/blog/Lists/Posts/Post.aspx?ID=309

Good Explaination from a linked in discussion http://lnkd.in/HnUtuY

Matty Vasquez • @Thuan Nguyen: When you run a search for users via the People Picker, Active Directory is queried (or any other provider you specify under the <PeoplePickerWildcards> tag in web.config, for instance: if you have users in a SQL database to provide FBA).

People Picker does not run under the Search Service, by default it uses the Application Pool ID to query AD, unless you run Kannan's STSADM command above to query a different Forest or use a different service account.

People Picker does not look up crawled User Profiles - this is used by the Search Service for People Search, which is something completely different.

So to reiterate - you do not need User Profiles and Synchronisation or the Search Service configured to use the People Picker - it queries Active Directory directly.

AD Issues Related Info

1.     Due to possible PowerShell a farm admin which can limit groups such as  forest level groups or universal groups, domain Global Groups are more reliable.
2.    Claim to Windows Token Services issues https://support.microsoft.com/en-us/kb/2722087
3.    DC locator issues http://blogs.msmvps.com/acefekay/2010/01/03/the-dc-locator-process-the-logon-process-controlling-which-dc-responds-in-an-ad-site-and-srv-records/
4.    Global Catalog server issues http://umakanthn.blogspot.com/2011/10/sharepoint-and-ad.html
5.    More on People Picker http://thecloudengineer.blogspot.com/2012/03/sharepoint-2010-people-picker.html

Service Accounts

2013

Configure automatic password change in SharePoint 2013 (GUI version only)
http://technet.microsoft.com/en-us/library/ff724280.aspx

Plan automatic password change in SharePoint 2013
http://technet.microsoft.com/en-us/library/ff724278.aspx

More from the cloud

http://blog.blksthl.com/2013/05/14/configure-automatic-password-change-in-sharepoint-2013-using-powershell/

 http://www.toddklindt.com/blog/Lists/Posts/Post.aspx?ID=237

 http://blogs.msdn.com/b/ramg/archive/2010/12/01/sharepoint-2010-service-accounts-permissions-and-security-settings.aspx

Copy of Todd's xlsx file is on Skydrive.
Just go to TEch Bytes and click skydrive or click here

Also See

Plan for administrative and service accounts (SharePoint Server 2010)
http://technet.microsoft.com/en-us/library/cc263445.aspx

Good Article on Service Accounts and Managed Service Acccounts
http://blog.falchionconsulting.com/index.php/2010/10/service-accounts-and-managed-service-accounts-in-sharepoint-2010/

Configure profile synchronization (SharePoint Server 2010)

http://technet.microsoft.com/en-us/library/ee721049.aspx

 

Rational Guide to SP2010 User Profile Sync
http://www.harbar.net/articles/sp2010ups.aspx

 

Configure object cache user accounts

http://technet.microsoft.com/en-us/library/ff758656.aspx
http://www.sharepointchick.com/archive/2010/10/06/resolving-the-super-user-account-utilized-by-the-cache-is.aspx

SharePoint Authentication

Office 365

New video for the Azure-based federated authentication for Office 365 deployment (Sept 2017)
https://blogs.technet.microsoft.com/solutions_advisory_board/2017/08/31/new-video-for-the-azure-based-federated-authentication-for-office-365-deployment/

SharePoint 2013

ADFS 3.0 Setup – Great article from MCM Wictor Wilen
SharePoint 2013 with SAML Claims and SharePoint Hosted Apps
http://www.wictorwilen.se/sharepoint-2013-with-saml-claims-and-sharepoint-hosted-apps
SharePoint 2013 with SAML Claims and Provider Hosted Apps
http://www.wictorwilen.se/sharepoint-2013-with-saml-claims-and-provider-hosted-appsUsing SharePoint Apps with SAML and FBA Sites in SharePoint 2013

Using SharePoint Apps with SAML and FBA Sites in SharePoint 2013
http://blogs.technet.com/b/speschka/archive/2012/12/07/using-sharepoint-apps-with-saml-and-fba-sites-in-sharepoint-2013.aspx
Compare OpenID vs SAML vs OAuth
http://www.softwaresecured.com/2013/07/16/federated-identities-openid-vs-saml-vs-oauth/#
http://www.mutuallyhuman.com/blog/2013/05/09/choosing-an-sso-strategy-saml-vs-oauth2/
ADFS supports Oauth 2.0
http://blogs.technet.com/b/ad/archive/2013/07/10/extending-device-support-in-active-directory.aspx

ADFS 2.0
http://technet.microsoft.com/en-us/magazine/ff721824.aspx
Authentication Learning Roadmap
http://technet.microsoft.com/en-us/library/jj937859.aspx
More Good Reading (Jason Jeffas – thanks)
http://blogs.technet.com/b/speschka/
http://blogs.technet.com/b/speschka/archive/2009/11/05/configuring-forms-based-authentication-in-sharepoint-2010.aspx?Redirected=true
More from TheCloudEngineer
http://thecloudengineer.blogspot.com/2013/02/authentication.htm
http://thecloudengineer.blogspot.com/2011/12/claims.html
http://thecloudengineer.blogspot.com/2011/12/adfs.html

Azure Basic - Definitions

Reference
https://technet.microsoft.com/en-us/magazine/hh509051.aspx

Essential Characteristics:

• On-demand self-service -- A consumer can independently and unilaterally provision computing capabilities, such as compute time, network connectivity and storage, as needed automatically without requiring human interaction with each service’s provider
• Broad network access --Capabilities are available over the network and accessed through standard mechanisms that promote use by heterogeneous thin or thick client platforms
• Resource pooling -- The provider’s computing resources are pooled to serve multiple consumers using a multi-tenant model, with different physical and virtual resources dynamically assigned and reassigned according to consumer demand. There is a sense of location independence in that the customer generally has no control or knowledge over the exact location of the provided resources, but may be able to specify location at a higher level of abstraction (e.g., country, state, region or datacenter). Examples of computing resources include storage, processing (compute), memory, network bandwidth, and virtual machines
• Rapid elasticity -- Capabilities can be rapidly and elastically provisioned, in some cases automatically, to quickly scale out, and rapidly released to quickly scale in. To the consumer, the capabilities available for provisioning often appear to be unlimited and can be purchased in any quantity at any time
• Measured Service -- Cloud systems automatically control and optimize resource use by leveraging a metering capability at some level of abstraction appropriate to the type of service (e.g., storage, compute, bandwidth, active user accounts, etc.). Resource usage can be monitored, controlled, and reported, providing transparency for both the provider and consumer of the utilized service

Service Models - Define Saas, PaaS, IaaS

• Cloud Software as a Service (SaaS)--The capability provided to the consumer is to use the provider’s applications running on a cloud infrastructure. The applications are accessible from various client devices through a thin client interface such as a web browser (e.g., web-based email). The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of provider-defined user-specific application configuration settings
• Cloud Platform as a Service (PaaS)--The capability provided to the consumer is to deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages and tools supported by the provider. The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, or storage, but has control over the deployed applications and possibly application hosting environment configurations
• Cloud Infrastructure as a Service (IaaS)--The capability provided to the consumer is to provision processing, storage, networks, and other fundamental computing resources where the consumer is able to deploy and run arbitrary software, which can include operating systems and applications. The consumer does not manage or control the underlying cloud physical infrastructure but has control over operating systems, storage, deployed applications, and possibly limited control of select networking components

Deployment Models:

• Private cloud -- The cloud infrastructure is operated solely for an organization. It may be managed by the organization or a third party and may exist on premise or off premise
• Community cloud --The cloud infrastructure is shared by several organizations and supports a specific community that has shared concerns (e.g., mission, security requirements, policy, and compliance considerations). It may be managed by the organizations or a third party and may exist on premise or off premise
• Public cloud --The cloud infrastructure is made available to the general public or a large industry group and is owned by an organization selling cloud services
• Hybrid cloud-- The cloud infrastructure is a composition of two or more clouds (private, community, or public) that remain unique entities but are bound together by standardized or proprietary technology that enables data and application portability (e.g., cloud bursting for load balancing between clouds)

SharePoint Career– V.Next

SharePoint .next is coming …

More to come

SharePoint 2016

Looking forward to a technical career with SharePoint? 

SharePoint technical careers fall typically along two major careers paths of an administration or development, but many do both roles. SharePoint administrators typically start out as a site, site collection administrator or server administrator and grow into a SharePoint farm administrator role.  Developers typically start either as a ASP.NET developer or SharePoint designer and then grow into a SharePoint developer role.  SharePoint architects and BI experts are worth noting since they have mastered SharePoint administrator, BI and developer skills.

Here are a list of career paths and the corresponding training paths.

Administration
SharePoint Site Collection Administrator
SharePoint Farm Administrator

Development
SharePoint Site Designer or SharePoint UX Designer
SharePoint Developer

Business Intelligence – BI
SharePoint Site Collection Administrator
SharePoint Farm Administrator
SharePoint Site Designer or SharePoint UX Designer
SharePoint Developer
SharePoint BI

SharePoint Architect
SharePoint Administration and Developer

SharePoint Site Collection Administrator

Basic SharePoint and Site Administration Skills
55033 – SharePoint 2013 Site Collection and Site Administration

Technical SharePoint Administrator
MCSE: Productivity
MCSE: SharePoint (Retired March 31 2017)

O365, On-premises, Azure Administrators

CompTIA A+ or equivalent knowledge
CompTIA Network+ or equivalent knowledge
CompTIA Server+ or equivalent knowledge

CompTIA Security+ or equivalent knowledge

PowerShell
10961 – Automating Administration with PowerShell 3.0

MCSA: Windows Server 2012
20410 – Installing and Configuring Windows Server 2012
20411 – Administering Windows Server 2012
20412 – Configuring Advanced Windows Server 2012 Services

SQL Administration
20461/10774 – Querying Microsoft SQL Server 2012
20462/10775 – Administering Microsoft SQL Server 2012 Databases
20463/10777 – Implementing a Data Warehouse with Microsoft SQL Server 2012

Office 365 - Needed for Hybrid Solutions Only
20346B - Managing Office 365 Identities and Services

Basic SharePoint and Site Administration Skills
55033 – SharePoint 2013 Site Collection and Site Administration

SharePoint 2013 Administrator (Farm)
20331 - Core Solutions of Microsoft SharePoint Server 2013
20332 - Advanced Solutions of Microsoft SharePoint Server 2013

SharePoint 2016 Administrator (Farm)
20339-1 - Planning and Administering Microsoft SharePoint Server 2016
20339-2 – Advanced Technologies of Microsoft SharePoint Server 2016
 

SharePoint Site/UX Designer

Basic SharePoint and Site Administration Skills
55033 – SharePoint 2013 Site Collection and Site Administration

HTML and CSS
Web Design with HTML5 and CSS3 - Level 1 (1 Day)
Web Design with HTML5 and CSS3 - Level 2 (1 Day)

SharePoint Designer
Microsoft SharePoint Designer 2013 (1 Day)

SharePoint Developer

MCSA: Web Applications
MCSD: App Builder
MCSD SharePoint Applications (Retired March 31 2017)

https://www.microsoft.com/en-us/learning/mcsd-sharepoint-apps-certification.aspx

https://dev.office.com/sharepoint/about

The developer track is a highly debated track but here is my advice as an administrator.  Reference

HTML5 JavaScript and CSS
20480 - Programming in HTML5 with JavaScript and CSS3

ASP.NET Programming
20486 - Developing ASP.NET MVC Web Applications

Basic SharePoint and Site Administration Skills
55033 – SharePoint 2013 Site Collection and Site Administration

SharePoint 2013 Developer
20488 - Developing Microsoft SharePoint Server 2013 Core Solutions
20489 - Developing Microsoft SharePoint Server 2013 Advanced Solutions

Back End SharePoint Developer – Farm Skills Added
MCSD SharePoint

CompTIA A+ or equivalent knowledge
CompTIA Network+ or equivalent knowledge
CompTIA Server+ or equivalent knowledge
CompTIA Security+ or equivalent knowledge

PowerShell
10961 – Automating Administration with PowerShell 3.0

MCSA: Windows Server 2012
20410 – Installing and Configuring Windows Server 2012
20411 – Administering Windows Server 2012
20412 – Configuring Advanced Windows Server 2012 Services

SQL Administration
20461/10774 – Querying Microsoft SQL Server 2012
20462/10775 – Administering Microsoft SQL Server 2012 Databases
20463/10777 – Implementing a Data Warehouse with Microsoft SQL Server 2012

Office 365 - Needed for Hybrid Solutions Only
20346B - Managing Office 365 Identities and Services

Basic SharePoint and Site Administration Skills
55033 – SharePoint 2013 Site Collection and Site Administration

SharePoint Administrator (Farm)
20331 - Core Solutions of Microsoft SharePoint Server 2013
20332 - Advanced Solutions of Microsoft SharePoint Server 2013

HTML5 JavaScript and CSS
20480 - Programming in HTML5 with JavaScript and CSS3

ASP.NET Programming
20486 - Developing ASP.NET MVC Web Applications

SharePoint 2013 Developer
20488 - Developing Microsoft SharePoint Server 2013 Core Solutions
20489 - Developing Microsoft SharePoint Server 2013 Advanced Solutions

Business Intelligence
MCSE Business Intelligence

20461C:(5 day) Querying Microsoft SQL Server 2014
20462C: (5 day) Administering Microsoft SQL Server Databases
20463C: (5 day) Implementing a Data Warehouse with Microsoft SQL Server
20466C: (5 day) Implementing Data Models and Reports with Microsoft SQL Server – Intro BI - Performance Point – SSRS
20467C: (5 day) Designing Business Intelligence Solutions with Microsoft SQL Server 2012

SharePoint Errors “in the field”

 

“An unexpected error has occurred” in central admin

http://stackoverflow.com/questions/1997803/an-unexpected-error-has-occurred

http://sharepointinterface.com/2012/08/30/an-unexpected-error-has-occurred-after-installing-sharepoint-2013/

“Windows SharePoint Services 3” saying: “Access to table dbo.Versions is blocked because the signature is not valid.” 

The issue was a corrupt configuration database, restore config db from backup.