Microsoft Office 2000 Resource Kit

After you run Microsoft Office Server Extensions (OSE) Setup, the OSE Configuration Wizard completes the configuration of your OSE-extended web. The wizard is started automatically when OSE Setup is completed. The wizard creates a virtual directory named MSOffice on your Web site, and when the wizard is completed, the OSE-extended web is ready for Office 2000 users to publish and collaborate.

OSE works with Microsoft FrontPage 2000 Server Extensions. OSE Setup installs FrontPage Server Extensions automatically, and the OSE Configuration Wizard completes the configuration. If you install the stand-alone FrontPage Server Extensions, you use the same wizard. However, with OSE, the wizard includes some additional panels to configure elements unique to OSE.

Although you must specify settings in the wizard before you run OSE for the first time, you can modify many of the settings later by using the OSE Administration Home page.

Modifying OSE settings

Although you can modify many OSE settings through the OSE Administration home page, you need to use other utilities to make certain types of modifications.

Changing SQL Server passwords Administration pages cannot change SQL Server passwords — you must do this through SQL Server. For MSDE, you can use the OSE Configuration Wizard to change a password the first time you run MSDE.

Creating a new database Administration pages cannot create a new database; they can only accept a database that has already been created. You can use the OSE Configuration Wizard to create a database in SQL Server 7.0 or in MSDE.

Creating Windows NT user groups You can use the OSE Configuration Wizard to create Windows NT user groups, but you cannot create groups with the Administration pages. Outside of the Configuration Wizard, you must use the Windows NT User Manager to create or modify user groups.

Setting the IIS Directory Browsing flag You can use the OSE Configuration Wizard to turn on the IIS Directory Browsing flag if it is off. Administration pages cannot reset this option. The flag can also be set by using the IIS Internet Service Manager.

Enabling Basic authentication and Allow Anonymous The OSE Configuration Wizard can be used to turn on or turn off Basic authentication and Allow Anonymous on the MSOffice directory. Administration pages cannot reset these options. The setting can also be controlled by using IIS Internet Service Manager.

Setting collaboration access By default, the OSE Configuration Wizard gives everyone collaboration access. Alternatively, you can use the wizard to limit access to specific Windows NT user groups. Collaboration access cannot be controlled by Administration pages. You can also use Windows NT or Windows 2000 to manually set or remove an access control list.

Storing collaboration information

Publishing, collaboration, and subscription data are stored in the Web collaboration database that is separate from your Web site content. You must set up a separate Web collaboration database for each OSE server that you deploy, because multiple OSE servers cannot successfully share the same collaboration database.

If you are using the Microsoft Data Engine (MSDE), the OSE Configuration Wizard automatically creates the Web collaboration database. The wizard also creates a System Administrator account for the database, using a password you specify. You must log on to the Web collaboration database as Administrator to create or grant access to user accounts.

If you are using a local installation of Microsoft SQL Server version 7.0, the OSE Configuration Wizard attempts to create the database and tables with the user name and password you specify. If you don’t have appropriate permissions to create a new database, this step fails. You must then obtain the correct permissions before proceeding. After successfully creating the database, you must log on as Administrator to create or grant access to user accounts.

If you are using a remote SQL Server with your OSE-extended web, you must create a database on the SQL Server and then give a user account access to that database. When you run the wizard, you specify the name of the SQL database that you create, and the user account name and password.

Note If you are using a local installation of SQL Server 6.5 or a remote SQL Server, you must use SQL Server administration tools to create a Web collaboration database on that server, and then you give a user account access to it.

On the Web Collaboration Database panel of the OSE Configuration Wizard, specify the information you need to gain access to the database:

In all cases, the default database name is server_Collab, where server is the name of your Web site. The default user name is the user name of the Microsoft Windows NT account currently logged on to the computer.

Managing user permissions and access to data

When you install an OSE-extended web on your network, you need to consider the security of the data that is published on the server in two primary areas:

Authenticating users who connect to the Web server

Internet Service Manager allows you to configure authentication for users who connect to your Web server. When you identify the users who you want to log on to your OSE-extended web, you have several authentication methods to choose from including anonymous access, which allows users to log on without providing any user name or password.

Controlling access to content on the Web server

When users are authenticated, they have access to the content in all files and folders on the Web site to which they are connected. To limit this access, your OSE-extended web must be located on a disk formatted with the NTFS file system. If the disk is formatted with the file allocation table (FAT) file system, you cannot enforce permissions at the folder and file levels.

When your Web site is located on an NTFS-formatted disk, the wizard can create four local Windows NT or Windows 2000 groups to make it easy to add administrators, authors, browsers, and collaborators. To have the wizard create the groups, on the Create Windows Groups panel, select Create local machine Groups. The wizard creates the following four user groups:

where group_prefix is a prefix that you specify on the Create Windows Groups panel in the wizard. If you do not specify a prefix, the wizard default prefix is the text name of the Web site you are configuring.

The wizard adds these groups to the access control lists (ACLs) of the appropriate folders. This arrangement simplifies subsequent administration of permissions because you can add or remove user accounts from these groups when you want to grant or deny users permissions on your OSE-extended web — without modifying ACLs manually.

On the Access Control panel of the wizard, you enter the name of a Windows NT user account or group to which the wizard gives administrative permissions on the Web site. Also on the Access Control panel, select which users can participate in Web Discussions and create Web Subscriptions from the drop-down list in the middle of the panel. The user accounts or groups that you select determine how the wizard configures authentication on the MSOffice virtual directory it creates.

If you have users running Web browsers other than Microsoft Internet Explorer version 4.0 or later, you must select the Allow Basic Authentication logins for Collaboration check box. Basic authentication and anonymous access are the only authentication methods that you can use with Web browsers other than the more recent versions of Microsoft Internet Explorer.

If you want to allow users to browse the folders of your Web site by using the OSE Start Page, on the Access Control panel of the wizard, select the Enable Directory Browsing on this web site check box.

Specifying an SMTP mail server for Web Subscriptions

OSE maintains the user subscriptions in the Web collaboration database. When a user adds, modifies, deletes, or discusses a published document, OSE queues e-mail notifications for delivery to any corresponding subscriptions in the database. At the interval specified in each subscription, OSE submits the e-mail notification to a Simple Mail Transfer Protocol (SMTP) server.

On the Mail Server panel of the OSE Configuration Wizard, you specify the name of the mail server, the sender address, and the optional contact address to use in e-mail notifications. The sender address appears in the notification as the source of the e-mail notification. The optional contact address appears in the text of the e-mail notification and instructs users where to send questions about OSE or their subscriptions.

Note OSE e-mail notifications must originate from an SMTP mail server. Both Windows 2000, and the Windows NT 4.0 Option Pack include an SMTP mail server. You can also use a Microsoft Exchange Server with the Internet Mail Service installed.

Configuring new Web sites on Internet Information Server

When you run only one Web site on your Web server, you need to run the OSE Configuration Wizard only once. You can perform all subsequent administration from the OSE Administration Home page and the Microsoft Internet Information Server (IIS) Internet Service Manager.

Note The ability to have multiple Web sites is a feature of IIS for Windows NT Server. Personal Web Server for Windows NT Workstation supports only a single Web site.

If you add additional Web sites on your Web server, you must run the OSE Configuration Wizard for each new Web site.

Configuring multiple Web sites

By using IIS, a single computer can host multiple Web sites. Multiple Web sites on a single computer are also known as Web sites, webs, and multiple identities.

Each IIS Web site has a unique IP address and port combination. You can configure independent authentication methods, logging methods, and operator lists on each Web site. IIS Setup creates a default Web site with the description Default Web Site. Default Web Site is accessible through all local IP addresses on the computer, on port 80.

Typically, you do not need additional Web sites. However, in a complex Web server deployment there might be administrative or security needs that require creating multiple Web sites with Internet Service Manager.

If you have multiple Web sites on your Web server, the OSE Configuration Wizard prompts you with a list of all the Web sites that you have not configured with the wizard. Each time you run the wizard, you can configure one Web site. If you extend a server from the Internet Service Manager, you do not see a list of unextended Web sites — only the server you have selected is extended. The list of extended sites is displayed only during Setup.

Note that the OSE Configuration Wizard can only install OSE features on Web sites that use port 80. If you extend a Web site on another port, the wizard extends the Web site with FrontPage Server Extensions, but without OSE features.

Installing Office Server Extensions

Configuring Office Server Extensions