Setup Sharepoint 2013 Extranet as separate farm

Hi All
We currently have a Sharepoint 2013 Intranet and would now like to setup a Sharepoint 2013 Extranet/Portal to allow external customers/clients a shared collaboration area to work with internal users. The proposed site would be fairly basic and most
likely comprise of a site page per customer with a few libraries and maybe some form of announcements. We don't envisage the demand being huge - maybe a few hundred users and 40/50 customer/client areas.
I just wanted to outline my plan / ideas in case I've missed any pitfalls or have missed anything obvious.
We plan to setup the extranet separately from our internal Sharepoint Intranet so the two sites will not need to communicate with each other and will be on two different domains.
The Extranet will be setup in our DMZ and be composed of 2 x SP Servers (App & Web); 2 x SQL; 2 x DC (all on VMWare). This follows the MS 'Back to Back' architecture but we do not plan to segment the DMZ area using routers.
We will also configure a one-way forest trust from the internal AD to the new external AD so that internal users can authenticate with their existing credentials.
The Topology diagram that I have seen states that you use a UAG between the DMZ and the Internet - is this necessary?
Any advice / guidance / tips appreciated
Andy

Another issue to consider is that you will need to open ports in order for the SharePoint servers in the DMZ to resolve users via the People Picker. The ports are outlined here: http://blogs.technet.com/b/wbaer/archive/2009/01/21/people-picker-port-protocol-requirements.aspx
You can use an IPSec tunnel between SharePoint in the DMZ and the internal network to limit the number of ports you need to open.
Another thing to consider is that while 2012 R2 does have WAP included, it requires ADFS and does not work with SharePoint Apps as it doesn't support wildcard domains.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Similar Messages

Sharepoint 2013 Foundation three tier farm with two Webservers in NLB

Heloo,
I have been strugling with a problem the last htree days.
I have instelled and configured a sharepoint 2013 three tier farm with Sharepoint 2013 Foundation and MS SQL 2014 Express. This is a Test Farm and all the servers are Windows 2012 R2.
I have one SQL Server, one Application Server and two Webservers. The tow web servers are configured with Multicasting NLB. The NLB name is "sharepoint.ws.domain.net". The IP of the NLB is also in our DNS Zone.I have made a Web Application with
the name "sharepoint.ws.domain.net" on port 80 (NLB name) and a Site collection with the same name.
Now whene I am working on the Sharepoint Site I get very offen a login Window or I get the message "An error occurred while processing the request on the server. The status code returned from the server was: 0".
The error "An error occurred while processing the request on the server. The status code returned from the server was: 0" comes when I try to create a sub Site (most with no Permissions inheritance)... but not allways. I also get sometimes
the same message when I upload files (MS Office documents and PDF files).
The login Windows comes whene I am navigating throw the Sites... but also not allways.I go to the Site with an IE11 and the Site is also in the Intranet security sites.
Can you help me on this one...
Kind Regards
Ioannis Kyriakidis

With no hostname on the Web Application, you have to create Host-named Site Collections. So that complicates things a bit.
As far as NLB setup, you create Web Applications the same way you would otherwise. NLB is simply installed on both Web Servers and placed into the NLB VIP (virtual IP). The DNS A record points at the VIP.
Also set up your Windows NLB using Unicast instead of Multicast. If you have certain types of switches that block unicast ARP from multiple clients, e.g. Cisco, you may have to make an exception for them (e.g. http://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-switches/107995-microsoft-nlb.html).
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

How do I setup SharePoint 2013 web applications for 2 TB of data?

Hi,
I know Microsoft recommend to have 1 App pool with 1 Web App and 1 Content Database.
The issue is that in my company SharePoint is going to be a file repository with about 2 TB of data. Management wants that to happen.
I was thinking to have 1 App pool and about 18 Web App for each department so that it can hold all that data with a maximum of 200 GB per Content DB in 2 SQL clustered servers.
Is that OK? Is this best practices?

Chicho84,
Yes, in SharePoint it is suggested to not allow to grow content DB more than 200 GB. Now will your environment starts with 2TB (after migration) or it will steadyly migrate eventually 2TB data. If so that you can think of Host heard site collection with
individual content db.
I am sure that you know that SharePoint is not only a DMS but also come with variety of useful service like Search, Workflow, Forms, Social etc. Thease all are going to be a important tool in your organisation. So planing for other services and hardware
is also very important.
These are few links which you can refer as starting point :
http://technet.microsoft.com/en-us/library/cc262451.aspx
http://technet.microsoft.com/en-us/library/jj219628.aspx#HW_Enterprise
http://social.technet.microsoft.com/wiki/contents/articles/12438.community-best-practices-for-sharepoint-2013.aspx
Hope it will help you.
Please 'propose as answer' if it helped you, also 'vote helpful' if you like this reply.

Anonymous Logon Error while using SSRS from SharePoint 2013

I have SQL Reporting Services 2014 for SharePoint installed in SQL Server Box (SQL01) and SharePoint 2013 in a separate box (SPDEV01)
in SPDEV01 i have installed Add-in for SSRS.
when i generate a report using report builder i get an error saying Anonymous logon
initially i got an error (rsClaimsToWindowsTokenLoginTypeError) for windows
login and i followed the steps from below links
http://msdn.microsoft.com/en-us/library/hh231678.aspx
http://blogs.msdn.com/b/psssql/archive/2014/04/28/sharepoint-adventures-using-claims-with-reporting-services.aspx
i am not able to complete all the steps mentioned in the above links as i have confusion in which box what has to be done and few are not applicable to the environment i guess
Claims to Windows Token Service is also running
after successfully completing few steps from the above links i am able to fix rsClaimsToWindowsTokenLoginTypeError but now
i am getting anonymous logon error
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
Cannot create a connection to data source 'DataSource1'. (rsErrorOpeningConnection)
An error has occurred during report processing. (rsProcessingAborted)
the other thing i need to mention is i am using my account as service account, setup account and also as a farm admin, will that
be an issue?
i have to use my account as these are development boxes.
need your inputs to fix this issue

Hi ,
Thank you for your question.
I am trying to involve someone more familiar with this topic for a further look at this issue. Sometime delay might be expected from the job transferring. Your patience is greatly appreciated.
Thank you for your understanding and support.
Regards,
Vicky Liu
If you have any feedback on our support, please click
here.
Vicky Liu
TechNet Community Support

Search not working in SharePoint 2013 RTM

I recently setup SharePoint 2013 Development environment on a VM with complete farm install on a same machine. I configured setup using configuration wizard and added some documents to the root site. As soon as I searched it gave “Some Error Occured” message.
On checking error logs, I found that it gave message:
Ims::Execute–Error
occured: System.ServiceModel.EndpointNotFoundException: There was no endpoint listening
at
net.tcp://<machine name>/6A7919/QueryProcessingComponent1/ImsQueryInternal that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. Server stack trace:
at
System.ServiceModel.Channels.ConnectionUpgradeHelper.DecodeFramingFault(ClientFramingDecoder decoder, IConnection connection, Uri via, String contentType, TimeoutHelper& timeoutHelper)
Then it had:
w3wp.exe:
Query processing component ‘net.tcp://<server ip address>/QueryProcessingComponent1/ImsQueryInternal’ changes its status to ‘Failed’.
w3wp.exe:
All query processing components are in ‘Failed’ status.

Hi
I have come in this morning and the Search ( Query processor) looks broken this I configured successfully a few weeks back.
I have looked on the server logs and coincidently, there is is an issue in IIS with the app pool
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{61738644-F196-11D0-9953-00C04FD919C1}
and APPID
{61738644-F196-11D0-9953-00C04FD919C1}
to the user MYDOAMIN\SP_AppPoolSharePoint SID (S-1-5-21-1257006630-411654553-1540833222-8803) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
I know some of the guys were playing with running visual studio and on the dev server so I need to find out what they might have done .. Sigh

SharePoint 2013 Search - Disaster Recovery Restore

Hello,
We are setting up a new SharePoint 2013 with a separate Disaster Recovery farm as a hot-standby. In a DR scenario, we want to restore all content and service app databases to the new farm, then fix any configuration issues that might arise due to changes
in server names, etc...
The issue we're running into is the search service components are still pointing to the production servers even though they're in the new farm with completely different server names. This is expected, so we're preparing a PowerShell script to remove
then re-create the search components as needed. The problem is that all the commands used to apply the new search topology won't function because they can't access the administration component (very frustrating). It appears we're in a chicken &
egg scenario - we can't change the search topology because we don't have a working admin component, but we can't fix the admin component because we can't change the search topology.
The scripts below are just some of the things we've tried to fix the issue:
$sa = Get-SPEnterpriseSearchServiceApplication "Search Service Application";
$local = Get-SPEnterpriseSearchServiceInstance -Local;
$topology = New-SPEnterpriseSearchTopology -SearchApplication $sa;
New-SPEnterpriseSearchAdminComponent -SearchTopology $topology -SearchServiceInstance $local;
New-SPEnterpriseSearchQueryProcessingComponent -SearchTopology $topology -SearchServiceInstance $local;
New-SPEnterpriseSearchCrawlComponent -SearchTopology $topology -SearchServiceInstance $local;
New-SPEnterpriseSearchContentProcessingComponent -SearchTopology $topology -SearchServiceInstance $local;
New-SPEnterpriseSearchAnalyticsProcessingComponent -SearchTopology $topology -SearchServiceInstance $local;
New-SPEnterpriseSearchIndexComponent -SearchTopology $topology -SearchServiceInstance $local -IndexPartition 0 -RootDirectory "D:\SP_Index\Index";
$topology.Activate();
We get this message:
Exception calling "Activate" with "0" argument(s): "The search service is not able to connect to the machine that
hosts the administration component. Verify that the administration component '764c17a1-4c29-4393-aacc-de01119aba0a'
in search application 'Search Service Application' is in a good state and try again."
At line:11 char:1
+ $topology.Activate();
+ ~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : InvalidOperationException
Also, same as above with
$topology.BeginActivate()
We get no errors but the new topology is never activated. Attempting to call $topology.Activate() within the next few minutes will result in an error saying that "No modifications to the search topology can be made because previous changes are
being rolled back due to an error during a previous activation".
Next I found a few methods in the object model that looked like they might do some good:
$sa = Get-SPEnterpriseSearchServiceApplication "Search Service Application";
$topology = Get-SPEnterpriseSearchTopology -SearchApplication $sa -Active;
$admin = $topology.GetComponents() | ? { $_.Name -like "admin*" }
$topology.RecoverAdminComponent($admin,"server1");
This one really looked like it worked. It took a few seconds to run and came back with no errors. I can even get the active list of components and it shows that the Admin component is running on the right server:
Name ServerName
AdminComponent1 server1
ContentProcessingComponent1
QueryProcessingComponent1
IndexComponent1
QueryProcessingComponent3
CrawlComponent0
QueryProcessingComponent2
IndexComponent2
AnalyticsProcessingComponent1
IndexComponent3
However, I'm still unable to make further changes to the topology (getting the same error as above when calling $topology.Activate()), and the service application in central administration shows an error saying it can't connect to the admin component:
The search service is not able to connect to the machine that hosts the administration component. Verify that the administration component '764c17a1-4c29-4393-aacc-de01119aba0a' in search application 'Search Service Application' is in a good state and try again.
Lastly, I tried to move the admin component directly:
$sa.AdminComponent.Move($instance, "d:\sp_index")
But again I get an error:
Exception calling "Move" with "2" argument(s): "Admin component was moved to another server."
At line:1 char:1
+ $sa.AdminComponent.Move($instance, "d:\sp_index")
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : OperationCanceledException
I've checked all the most common issues - the service instance is online, the search host controller service is running on the machine, etc... but I can't seem to get this database restored to a different farm.
Any help would be appreciated!

Thanks for the response Bhavik,
I did ensure the instance was started:
Get-SPEnterpriseSearchServiceInstance -Local
TypeName : SharePoint Server Search
Description : Index content and serve search queries
Id : e9fd15e5-839a-40bf-9607-6e1779e4d22c
Server : SPServer Name=ROYALS
Service : SearchService Name=OSearch15
Role : None
Status : Online
But after attempting to set the admin component I got the results below.
Before setting the admin component:
Get-SPEnterpriseSearchAdministrationComponent -SearchApplication $sa
IndexLocation : E:\sp_index\Office Server\Applications
Initialized : True
ServerName : prodServer1
Standalone :
After setting the admin component:
Get-SPEnterpriseSearchAdministrationComponent -SearchApplication $sa
IndexLocation :
Initialized : False
ServerName :
Standalone :
It's shown this status for a few hours now so I don't believe it's still provisioning. Also, the search service administration is still showing the same error:
The search service is not able to connect to the machine that hosts the administration component. Verify that the administration
component '764c17a1-4c29-4393-aacc-de01119aba0a' in search application 'Search Service Application' is in a good state and try again.

Accessing Sharepoint 2013 externally for domain users and customers

Just an FYI I am not a SP administrator by any means but have be tasked with taking over this project and could use some assistance.
Sharepoint 2013 is working fine internally. Users access the site and login with their domain credentials. Our client is moving one of their departments to another building down the street and we'd like them to be able to access local resources without the
use of another server or site to site vpn or standard vpn.
My question is, how do we make Sharepoint accessible outside of their local network?
If we open up a port on the router and have it forward all request to Sharepoint server will we be able to access it?
Also, how will they authenticating with the Sharepoint Server? Do they use the same user credentials?
I forgot to mention this is Sharepoint 2013 Enterprise Edition. We are also using Project Server 2013 as well.
Thanks in Advance

Hi 3s1k,
According to your description, my understanding is that you want to access the SharePoint site from Internet.
You need to first ensure that you enable Anonymous Access for your web application. You'll then need to set up DNS for the domain you own to point to your web front end server (or virtual IP if it's load balanced). Then set up the appropraite IIS bindings
for the web application, and finally you'll need to extend your web application to an Internet Zone and give it the appropriate domain name.
There are some similar posts for your reference:
https://social.technet.microsoft.com/Forums/en-US/2277d710-ed05-4613-bd66-fd12e4d64b61/sharepoint-intranet-site?forum=sharepointadminprevious
https://social.technet.microsoft.com/Forums/sharepoint/en-US/fd968a08-393b-41c0-a916-c48ce0f83104/configure-sharepoint-2013-for-accessing-over-internet?forum=sharepointadmin
http://sharepoint.stackexchange.com/questions/54315/sharepoint-2013-extranet-acces-outside-the-internal-network
Best Regards,
Wendy
Wendy Li
TechNet Community Support

Where is coding guideline for SharePoint 2013 available?

Can any one suggest where is coding guidelines and best practices for SP 2013 development is available?

Hi,
According to your post, my understanding is that you want to know the best practices for SharePoint 2013 development.
There are some articles cover best practices targeted towards software developers in SharePoint 2013, you can refer to them.
http://social.technet.microsoft.com/wiki/contents/articles/13373.sharepoint-2013-what-to-do-farm-solution-vs-sandbox-vs-app.aspx ,
     discusses when to use farm solutions, sandbox solutions, or sharepoint      apps.
http://social.technet.microsoft.com/wiki/contents/articles/13637.sharepoint-2013-best-practices-what-client-api-should-you-choose-when-building-apps.aspx ,
     guidelines to help you pick the correct client API to use with your app.
http://msdn.microsoft.com/en-us/library/jj164060(v=office.15).aspx
http://social.technet.microsoft.com/wiki/contents/articles/16343.sharepoint-2013-best-practices-setting-up-a-dev-environment-for-windows-apps-and-sharepoint.aspx ,
     describes how to set up a dev environment needed for creating Windows Apps      that leverage SharePoint.
http://social.technet.microsoft.com/wiki/contents/articles/16353.sharepoint-2013-best-practices-working-with-connection-strings-in-auto-hosted-sharepoint-apps.aspx ,
     discusses how to deal with connection strings in auto-hosted apps.
For more reference:
http://social.technet.microsoft.com/wiki/contents/articles/12438.community-best-practices-for-sharepoint-2013.aspx
Thanks & Regards,
Jason
Jason Guo
TechNet Community Support

Reverse Proxy for SharePoint 2013

Hi,
I need to setup SharePoint 2013 environment which needs to be accessible from mobile devices e.g. iPAD/Android, for reverse proxy, I am looking at apache or IIS ARR since UAG is going to be deprecated. So far any one setup apache (on
RHEL 6.x)
or IIS ARR(on W2K8R2) successfully as reverse proxy for SharePoint 2013 access? Is there any issue? and which SharePoint authentication method should be configured?
Must is be Form based authentication? As I read some articles it seems ARR supports Windows authentication. Thanks in advance.

IIS ARR doesn't authenticate users, it is a pass-through (unlike UAG which can do auth or anon). Both IIS AAR and the new Web Proxy Role in Server 2012 R2 do not work with SharePoint 2013 Apps.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

SharePoint 2013 Media Player using UNC path directly without using a Website in IIS (either out of the box or custom player using javascript only)

Hi,
There isn't much info on this and I am hoping its possible.
I have come across the following article which explains how we can setup SharePoint 2013 Asset Library using video links using a website in IIS that is mapped to a UNC path.
http://stevemannspath.blogspot.com.au/2012/12/sharepoint-2013-videos-in-sharepoint.html
This is great. However we have an issue where I work and I need somehow to get SharePoint mediaplayer to point to a video directly using the UNC path like :- \\WINSP13\TempVideos\NTV_Carr_Indig.wmv without the use of a website in IIS.
I understand that we won't be able to stream the video then thats ok.
when trying to add a video link to an asset library using the UNC path, we get the following error: We don't support
playing a video of that format from a file share.
Is there a way or a workaround to do this? we are using only javascript to do this (AngularJS or any custom Javascript player such as MediaElement)
Thanks
Kind Regards,
Will

From a SharePoint architecture perspective, this is a BAD design, since you are rerouting the communications (from the client to the UNC) away from and outside of SharePoint... as a result, SP cannot provide any level of guarantee about the ability for videos
to play on the client machine.
Secondarily, I'm not sure that the browser will let you pull resources from such different locations (doing so has been the root of several type of attacks, such as "Cross Site Scripting").
That said (and assuming the browser lets you), you can always use JS to handle creating the video player HTML and setting the UNC location... instead of using a site asset library to store the links, just create a list for the videos
Scott Brickey
MCTS, MCPD, MCITP
www.sbrickey.com
Strategic Data Systems - for all your SharePoint needs

Windows Updates for SharePoint 2013 Environment

Hi
I created a visual machine for SharePoint 2013 development by following steps mentioned below.
--Install Winows Server 2008 R2
--SQL Server 2008 R2
--SP2 for SQL Server 2008 R2
--SP1 for Winows Server 2008 R2
--Sharepoint 2013 Pre-Requisites
--Sharepoint 2013 Setup
--Sharepoint 2013 Designer
--Installed March and August 2013 Cumulative Updates for SharePoint 2013
--Installed SP1 for SharePoint 2013
I want to ask do i need to install Windows Updates after installing different updates as i mentioned above because everty now and then windows updates message keep pops up and i did'nt install windows updates yet.
Why is it necessary or what impact window updates would have on my environment if i need to do it??

Windows Updates cover security updates as well as stability improvements, and so on. You're simply patching SharePoint and SQL in the above case.
It should be noted that any SharePoint patches that come down through Windows Update need to be manually handled as you'll need to run the Config Wizard (e.g. MS14-022 and MS14-050 which are SharePoint updates).
When you're installing SharePoint 2013, you only need to install SP1 if that is your target. There is no requirement to install March 2013 or August 2013.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Need to Setup Project Server in existing SharePoint 2013 farm

Hi
I have already SharePoint 2013 farm having 4-WFE Servers, 2-Application Servers, 3-dedicated Search Servers, 2-DB servers (Clustering enabled). Now I want to add one more App server having Project Server 2013 in this existing farm environment so Please
check the below steps. Please let me know If I am wrong in the approach.
Need to install PS 2013 on all the WFE, Applications and Search Servers.
Need to Run Sharepoint wizard on all the servers one by one. (Is it mandatory to run wizard on each server or should run only on application servers only)
The project Server service should run only on application servers.
Regards, Pankaj Waghmare - MCTS | Consultant

Hello,
Those steps are correct for high level :) One thing you might need to do is after installing Project Server on all the servers is apply the same CU / SP to Project Server as SharePoint (using the Project Server equivalent patch) so Project Server and SharePoint
are patched at the same level. I would do this after installing PS2013 and before you run the wizard on each server.
I would ensure you test this on a non prod farm first and ensure you have a roll back plan in place.
Paul
Paul Mather | Twitter |
http://pwmather.wordpress.com | CPS

What is the best approach to setup intranet and internet sites in SharePoint 2013?

I am planning to setup a internet and intranet website for one of our client. What is the best approach to setup this kind of environment?
Some of the users (registered users) from the internet should be able to access information in the intranet site. I have created two web applications for intranet and internet. Is it the right way to go forward?
Thanks in advance! :)
LM

Hi Laemon,
Creating two separate web applications, one for Internet site and the other for Intranet is the right thing you have done.
1. To properly plan creation of your web application, site collection and website is of utmost important to ensure you build your site in a professional and most recommended way. Go through this article from Technet that would help you plan your site in
SharePoint 2013.
https://technet.microsoft.com/en-us/library/cc263267.aspx
2. Planning and choosing the right authentication type is also a very important decision. I recommend you to go through the below article if you have not already gone through.
Plan for user authentication methods in SharePoint 2013
3. Plan for licensing for your SharePoint 2013 Internet Facing Website.
Licensing Internet Sites Built on SharePoint 2013
SharePoint 2013 licensing for Internet facing sites
4. To grant access to registered users to Intranet site (as you mentioned in question), if you created both web applications in same farm (same domain) then that would be easy to grant access using Site Permission with Windows Authentication enabled for
both web application. If both web applications are created on different domains then If there is a two-way trust in place, and the SharePoint servers have the necessary port access to the remote domain's Domain Controller, then it is automatic. If it is a
one-way trust, then you need to follow these directions:
http://technet.microsoft.com/en-us/library/cc263460(v=office.12).aspx
If there is no domain trust in place, then you either need to create one, or look at alternative technologies,
such as ADFS.
Please remember to upvote if it helps you or
click 'Mark as Answer' if the reply answers your query.

SharePoint 2013 Environment Setup with minimum resource

Hi,
Could you please advise considering below scenario
- What would be the minimum resources in order to setup SP2013 Enterprise environment?
- If we want to buy a single server from DELL as a host for all virtual machines as below, what would be the configuration for that server?
- How much RAM do we need for the host?
- How much ram / processor core allocation do we need for the VMs.
Requirments:
USER: 500 Users
Features : All OOB features / Services will be used in SharePoint 2013 Farm
Web Application : 3 Web Application, 10 Site Collection
Total Content : 100 GB
Virtual Box for entire SP2013 Environment Setup:
- SQL Server 2012 Sp1 Enterprise
- SQL Clustering / Mirroring
- SP 2013 Application Server1 (Enterprise)
- SP Application Server2
- SP Application Server3
- SP Application Server4
- SP WFE 1
- SP WFE 2
- BI Server 1
- BI Server 2
- OWA Server 1
- OWA Server 2
- Workflow Manager 1
- Workflow Manager 2
- TMG Firewall 2010
- Exchange Server 2010
- Microsoft Lync Server 2010
Thanks
srabon

It's all here:
http://technet.microsoft.com/en-us/library/cc262485%28v=office.15%29.aspx
Putting that many servers together for a 500 seat company is madness. Go for the text book small farm deployment at most, in reality you'd probably be better off just having three servers total (1 WFE, 1 App, 1 SQL).
I can't remember how much you should reserve for the hypervisor but if you allocate 1GB for that i think you're ok.
For a three server deployment you'd probably be ok with 32GB, 8GB for the WFE and App server, 7GB for SQL and one for the hypervisor. 64GB would give you a lot more comfort.
If you want more options like the enhanced workflows and OWA you'd need servers for each of those as well.
You can always overprovision CPUs on the hypervisor but more than 12 Cores would be wasted on a 3 server deployment for 500 users.

SharePoint 2013: Edition requirement for multi tier setup.

Dear all,
I am planning to setup a high availability 3-tier SharePoint farm.
My question is which edition of SharePoint 2013 should i purchase? Standard version or enterprise version?
My requirement is just a simple document management system.
Any help/guides would be much appreciated.
Many thanks
Regards
vinay

You can use any edition for high availability on the SharePoint side: Foundation, Standard, or Enterprise.
SQL Server is a different story, you'll want to look at the options for high availability available with each edition of SQL Server.
http://msdn.microsoft.com/en-us/library/cc645993.aspx#High_availability
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Setup Sharepoint 2013 Extranet as separate farm

Similar Messages

Maybe you are looking for