28
BlackBerry Enterprise Server for IBM Lotus Domino Installation Guide
Create Windows groups to support administrative roles
If you are using DB2 UDB, you cannot manage administrative roles using the BlackBerry Manager. You must
create Windows groups on the database server for each administrative role and then assign Windows users or
groups to those administrative role Windows groups.
1. On your database server, open the Microsoft Windows Computer Management console.
2. Create the following Windows groups:
•rim_db_admin_audit_enterprise
•rim_db_admin_audit_handheld
•rim_db_admin_audit_jr_helpdesk
•rim_db_admin_audit_sr_helpdesk
•rim_db_admin_enterprise
•rim_db_admin_handheld
•rim_db_admin_jr_helpdesk
•rim_db_admin_sr_helpdesk
3. Assign Windows users or groups to each administrative role Windows group.

Enable authentication for administrative roles on remote BlackBerry Managers

> Use the DB2 UDB Control Center to configure the following settings:
•control authentication at the client
•trust the client authenticating at the server
Configure the local system account
for database authentication.
1. On the computer where you plan to install the BlackBerry Enterprise Server, open the
Registry Editor.
2. In the left pane, browse to HKEY_USERS\.DEFAULT.
3. Create the following nested keys (if they do not exist already):
•Software
•Research In Motion
•BlackBerry Enterprise Server
•Database
4. Right-click Database.
5. Create the following string values:
•Login: Type a database account that has the required database permissions.
•Password: Type the password for the database account.
Warning: Do not assign users or groups to more than one administrative role’s Windows group. If you do, the permissions
of the highest role are applied.
Action Procedure