Installation and Configuration Guide | Postinstallation tasks |
Restrict database permissions for the BlackBerry Attachment Service
The BlackBerry Attachment Service accesses the BlackBerry Configuration Database to read attachment data using a Windows account or a SQL authentication account. To limit the access that the BlackBerry Attachment Service account has to the tables in the BlackBerry Configuration Database, you can configure a BlackBerry Attachment Service account that has limited database permissions. This account is not the same as the account that the BlackBerry Enterprise Server uses to access the BlackBerry Configuration Database.
Before you begin:
•Create a Windows account for the BlackBerry Attachment Service.
•To use database authentication, create a SQL authentication account for the BlackBerry Attachment Service.
1.In the Microsoft SQL Server management console, create a SQL login for the Windows account or SQL authentication account.
2.Assign the account to the rim_db_AttachmentServer role in the BlackBerry Configuration Database.
3.If you want the BlackBerry Attachment Service to use a SQL authentication account to access the BlackBerry Configuration Database, perform the following actions:
a.On the computer that you installed the BlackBerry Attachment Service on, log in using the Windows account that the BlackBerry Attachment Service is running on.
b.Click Start > Run.
c.Type regedit. Click OK.
d.If you are running a
e.If you are running a
f.Create the BBAttachServer\Database keys.
g.In the Database key, create the Login and Password string values for the SQL authentication account.
After you finish: After you complete the BlackBerry Attachment Service installation process, in the Windows Services, verify that the service for the BlackBerry Attachment Service is using the Windows account that you configured. If you need to change the account information, restart the BlackBerry Attachment Service.
77