Installation guide
5. On the Policies tab, click Edit user.
6. In the drop-down list, click the blank option (the first entry in the drop-down list) to remove the IT policy.
7. Click Save all.
After you finish: Resend the IT policy to the user account.
Restrict database permissions for the BlackBerry Attachment Service
The BlackBerry® Attachment Service accesses the BlackBerry Configuration Database to read attachment data using a
Windows® account or a SQL authentication account. To limit the access that the BlackBerry Attachment Service account has to
the tables in the BlackBerry Configuration Database, you can configure a BlackBerry Attachment Service account that has limited
database permissions. This account is not the same as the account that the BlackBerry® Enterprise Server uses to access the
BlackBerry Configuration Database.
Before you begin:
• Create a Windows® account for the BlackBerry Attachment Service.
• To use database authentication, create a SQL authentication account for the BlackBerry Attachment Service.
1. In the Microsoft® SQL Server® management console, create a SQL login for the Windows account or SQL authentication
account.
2. Assign the account to the rim_db_AttachmentServer role in the BlackBerry Configuration Database.
3. If you want the BlackBerry Attachment Service to use a SQL authentication account to access the BlackBerry Configuration
Database, perform the following actions:
a. On the computer that you installed the BlackBerry Attachment Service on, log in using the Windows account that the
BlackBerry Attachment Service is running on.
b. Click Start > Run.
c. Type regedit. Click OK.
d. Navigate to HKEY_CURRENT_USER\SOFTWARE\Research In Motion.
e. Create the BBAttachServer\Database keys.
f. In the Database key, create the Login and Password string values for the SQL authentication account.
After you finish: After you complete the BlackBerry Attachment Service installation process, in the Windows Services, verify that
the service for the BlackBerry Attachment Service is using the Windows account that you configured. If you need to change the
account information, restart the BlackBerry Attachment Service.
Upgrade Guide
Restrict database permissions for the BlackBerry Attachment Service
56