User guide

Best practice Description
• Use NTFS for the Microsoft SQL Server because it is more stable and
recoverable than FAT file systems, and NTFS permits security options
such as file and directory ACLs and EFS.
• Do not change the permissions that the Microsoft SQL Server specifies
during the
Microsoft SQL Server installation process. The Microsoft SQL
Server creates appropriate ACLs on registry keys and files if it detects
NTFS.
• If you must change the account that runs the Microsoft SQL Server,
decrypt the files that you could access using the old account and encrypt
them again for access using the new account.
Use Microsoft SQL Server Management
Studio.
Consider the following guidelines:
• Use Microsoft SQL Server Management Studio to change the account
that is associated with a Microsoft SQL Server service, if required.
Microsoft SQL Server Management Studio configures the appropriate
permissions on the files and registry keys that the
Microsoft SQL Server
uses.
• Do not use the Microsoft Management Console Services applet to
change the account that is associated with a
Microsoft SQL Server
service. To use this applet, you must manually change the Windows
registry, the permissions for the NTFS file system, and Windows user
rights.
For more information, visit www.support.microsoft.com to read article
KB283811.
How the BlackBerry Enterprise Server and
device protect IT policies
After the BlackBerry Enterprise Server installation process creates the BlackBerry Configuration Database, the BlackBerry
Enterprise Server generates an IT policy key pair that it can use to authenticate and protect the IT policy. When you assign
a BlackBerry device to the user account and activate the device, the BlackBerry Enterprise Server sends the IT policy and
the IT policy public key to the device.
The BlackBerry Enterprise Server stores the IT policy private key in the BlackBerry Configuration Database. The BlackBerry
Enterprise Server uses the IT policy private key to digitally sign all data packets that include IT policy data when the
BlackBerry Enterprise Server sends the IT policy to the device. The device uses the IT policy public key in the NV store to
authenticate the digital signature on the IT policy.
Security Technical Overview Protecting the data that the BlackBerry Enterprise Server stores in your organization's environment
75