This is the second of a six-part series progressing from initial download, through installation, to configuration of scripted packages for a fine level of workstation control via an SAPGUI Installation Server. Later in the series I will show how to maintain central control of the SAP Logon configuration, and I will make some recommendations that may help ease the administrator’s burden.
As parts of this process are likely already familiar to many of you, I have broken it up into stages. Please feel free to jump to the sections most relevant for you. If you are setting up an Installation Server for the first time, however, I recommend you go back to SAPGUI Installation Server Part 1 – Getting Started and move sequentially through the steps.
Previously we discussed basic prerequisites and assumptions, defined some general terms, located official documentation and helpful blogs, and downloaded all the installation and patch files required for our Installation Server. Now we will move on to the initial installation of our server.
- Getting Started
- Includes download of all required files
- Initial Installation (this document)
- Package Creation
- Includes initial installation of the administrator’s SAPGUI
- LSH and Distribution
Actions on the Server Console
Now it’s time to prepare your server for installation. I do not recommend using one of your SAP application servers for this purpose, although it is possible. Ideally, this will be a dedicated server. It does not need to be very large or powerful, however, as its main purpose will be to make a file share available. If you elect to use Local Security Handling, however, then you will also have a service running on the server, and if care is not taken during patching of a server with LSH running, you may need to reboot it. If you are not using LSH, reboots should not be necessary in most circumstances.
Please note that if you are using LSH, then you cannot have more than one SAPGUI Installation Server installed on the same host. If you are not using LSH, it is technically possible, but it is not supported by SAP, and it is not recommended. Reasons for having more than one Installation Server could include maintaining multiple SAPGUI versions or patch levels, or maintaining separate DEV and TEST Installation Servers for patch and upgrade testing before release to end users. It is not necessary to have multiple Installation Servers just to maintain different collections of products or components, as a single Installation Server can easily handle multiple Packages.
SAPGUI Installation Server is fully compatible with VMWare and lends itself well to virtualized hosts.
Logon to the server console as an administrative user, via Remote Desktop or other means. Launch Computer Management (in Windows Server 2012 R2, this is found in Administrative Tools; in Windows 2008 or 2003, it can be accessed on the Start menu by right-clicking Computer and choosing Manage).
In Computer Management, expand System Tools and Shared Folders, then select Shares. Right-click in the blank space and select New Share. Follow the wizard to create a new share of a new folder called sapgui, with Administrators having Full Control and Everyone having Read-Only access (if your organization’s policies dictate, you may need to give Read-Only to Domain Users instead of Everyone).
Configure Distribution Service User (optional)
This step is required if you intend to use Local Security Handling (LSH). This is an optional feature which enables users to self-install SAPGUI from an Installation Server via predefined packages even if they do not have local Administrator privileges to their workstations. Without LSH, your users must either be Administrators of their own machines, or you will have to use other mechanisms to distribute the SAPGUI to them. I recommend configuring LSH.
You will need a Domain User service account which is a member of an Active Directory group that is added to the local Administrators group on every workstation in the domain. By default, only the group Domain Admins has this status, but you can use Group Policy or Logon Scripts to add a custom global group without requiring members to be Domain Admins. As a service account, it should also be exempt from password expiration rules typically applied to end user accounts. In this example, the account is called sys$sap_maint, but you may call it whatever fits with your organization’s naming conventions for service accounts. We’ll also refer to this as the DS User.
While still in Computer Management on your installation server from the previous step, add the DS User to the local Administrators group. Expand System Tools, then Local Users and Groups, then select Groups. Double-click Administrators, then click Add, and select your DS User.
You are now done on the server console and can logout of it, returning focus to your own workstation.
Install Installation Server Files
Create Server Shell
On your workstation, navigate to the location to which you expanded the SAP Frontend Compilation. Drill down to:
In the Setup folder, double-click:
The SAP Installation Server Creation screen appears.
Click Browse. In the Browse for Folder window, in the Folder field, type in the name of your Installation Server host and the share you created earlier (i.e. \\server\sapgui).
Click OK. You are returned to the SAP Installation Server Creation window, and your server and share name should now appear in the entry field.
Click Verify. This will confirm that the installation program has access to the share. Look for a Verification successful message.
Click Next. The initial installation of the setup files will now proceed. It will be very quick.
When it’s done, you will see the message Your installation server was created.
Update Server With Products
At this point, your Installation Server is basically an empty shell. The next step is to import actual products into it that can be used on end user workstations. As a side note, it is also possible to return to this step in future to add additional products to your server. To do so, use the tool NwSapSetupAdmin.exe which will be found at \\server\sapgui\Setup once your server is created, and which we will discuss further in the following parts. However, for now the server creation tool will move straight to this step and import all the products included with SAPGUI. Click Next.
This part will take a little longer than the previous import. When it’s done you will see the message Your installation server was updated.
Note that the option Start the SAP Installation Server Administration Tool is checked. Leave it this way. When you click Close the program will automatically launch the tool for applying patches and creating packages. Working in this tool will be the major focus of the rest of this series.
You now have a working SAPGUI Installation Server, but you’re not quite ready for prime time yet. Your server needs to be patched, and you will need to set up one or more Packages that define just how the SAPGUI should be installed on end user workstations.
Continue on to SAPGUI Installation Server Part 3 – Patching.