Blackberry PRD-10459-005 Configuration Guide - Page 52

Configuring minimum Microsoft SQL Server permissions for the Windows account

Page 52 highlights

Installation and Configuration Guide Configuring minimum Microsoft SQL Server permissions for the Windows account a. On the computer that you installed the BlackBerry Attachment Serviceon, log in using the Windows account that the BlackBerry Attachment Service is running on. b. Click Start > Run. c. Type regedit. Click OK. d. If you are running a 32-bit version of Windows, navigate to HKEY_CURRENT_USER\SOFTWARE\Research In Motion. e. If you are running a 64-bit version of Windows, navigate to HKEY_CURRENT_USER\SOFTWARE \WOW6432Node\Research In Motion. f. Create the BBAttachServer\Database keys. g. In the Database key, create the Login and Password string values for the SQL authentication account. After you finish: After you complete the BlackBerry Attachment Serviceinstallation process, in the Windows Services, verify that the service for the BlackBerry Attachment Service is using the Windows account that you configured. If you need to change the account information, restart the BlackBerry Attachment Service. Configuring minimum Microsoft SQL Server permissions for the Windows account The BlackBerry® Enterprise Server setup application requires the Windows® account that it uses during the installation process or upgrade process to have Microsoft® SQL Server® permissions to create or upgrade the BlackBerry Configuration Database. The setup application requires the Windows account to have more Microsoft SQL Server permissions to install the BlackBerry Enterprise Server than the BlackBerry Enterprise Server requires to run. After the installation or upgrade process completes, you can change the Microsoft SQL Server permissions of the Windows account to the Microsoft SQL Server permissions that the BlackBerry Enterprise Server requires to run. When you change the Microsoft SQL Server permissions of the Windows account, you can use Microsoft SQL Server security to minimize the operations that the Windows account can perform on the BlackBerry Configuration Database. The following table describes the Microsoft SQL Server permissions for the setup application and the Windows account that the BlackBerry Enterprise Server uses to run. Server and database roles db_owner Description The setup application requires this role to install and upgrade the BlackBerry Configuration Database, BlackBerry MDS Integration Service database, and BlackBerry Monitoring Service database. You can remove this role from the Windows account that the BlackBerry Enterprise Server uses to run after the setup application creates or upgrades the BlackBerry Configuration Database. 50

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73

a.
On the computer that you installed the BlackBerry Attachment Service on, log in using the Windows account
that the BlackBerry Attachment Service is running on.
b.
Click
Start > Run
.
c.
Type
regedit
. Click
OK
.
d.
If you are running a 32-bit version of Windows, navigate to HKEY_CURRENT_USER\SOFTWARE\Research
In Motion.
e.
If you are running a 64-bit version of Windows, navigate to HKEY_CURRENT_USER\SOFTWARE
\WOW6432Node\Research In Motion.
f.
Create the BBAttachServer\Database keys.
g.
In the Database key, create the
Login
and
Password
string values for the SQL authentication account.
After you finish:
After you complete the BlackBerry Attachment Service installation process, in the Windows Services,
verify that the service for the BlackBerry Attachment Service is using the Windows account that you configured. If
you need to change the account information, restart the BlackBerry Attachment Service.
Configuring minimum Microsoft SQL Server permissions for
the Windows account
The BlackBerry® Enterprise Server setup application requires the Windows® account that it uses during the
installation process or upgrade process to have Microsoft® SQL Server® permissions to create or upgrade the
BlackBerry Configuration Database. The setup application requires the Windows account to have more Microsoft
SQL Server permissions to install the BlackBerry Enterprise Server than the BlackBerry Enterprise Server requires to
run.
After the installation or upgrade process completes, you can change the Microsoft SQL Server permissions of the
Windows account to the Microsoft SQL Server permissions that the BlackBerry Enterprise Server requires to run.
When you change the Microsoft SQL Server permissions of the Windows account, you can use Microsoft SQL Server
security to minimize the operations that the Windows account can perform on the BlackBerry Configuration
Database.
The following table describes the Microsoft SQL Server permissions for the setup application and the Windows
account that the BlackBerry Enterprise Server uses to run.
Server and database roles
Description
db_owner
The setup application requires this role to install and upgrade the BlackBerry
Configuration Database, BlackBerry MDS Integration Service database, and
BlackBerry Monitoring Service database.
You can remove this role from the Windows account that the BlackBerry
Enterprise Server uses to run after the setup application creates or upgrades
the BlackBerry Configuration Database.
Installation and Configuration Guide
Configuring minimum Microsoft SQL Server permissions for the Windows account
50