6
Post-installation Configuration Tasks

This chapter identifies post-installation configuration tasks. Where appropriate, this chapter references other guides for procedures on performing these configuration tasks.

Specific topics discussed are:

• Setting NTFS File System and Windows NT Registry Permissions

• Configuring Additional Components

Setting NTFS File System and Windows NT Registry Permissions

Oracle Corporation recommends that you configure Oracle8i database files, directories, and registry settings to allow only authorized database administrators (DBAs) to have full control. The following topics describe how to perform these tasks if your Oracle8i database is installed on Windows NT:

• NTFS File System Security

• Windows NT Registry Security

  See Also: Your Windows NT documentation for more information about modifying NTFS file system and Windows NT registry settings

NTFS File System Security

The Oracle8i database uses files to store database data, backup data, log information, and so on. To do this, the Oracle8i database process runs under a security account. This security account (the Windows NT LocalSystem account called SYSTEM) includes the ability to create and access these files. The security account is assigned to the service that the Oracle8i database uses (in the Control Panel). This account requires full file system permissions to create, read, write, delete, and execute files.

To ensure that only authorized users have full file system permissions:

1. Go into Windows NT Explorer.

2. Right-click Oracle8 database files (in the ORACLE_BASE\ORADATA\DB_NAME directory), executables and dynamic link libraries (in the ORACLE_BASE\ORACLE_HOME\BIN directory), and directories.

3. Select Properties from the menu that appears.

4. Adjust the file and directory permissions to ensure that:
   • Only the security account that the Oracle8i database is configured to use has full control permissions to these files

   • User accounts that must run Oracle applications (for example, SQL*Plus, Server Manager, and Pro*C) have read privileges on their executables (for example, SQLPLUS.EXE for SQL*Plus)

     Note: The Oracle8i database uses the Windows NT LocalSystem built-in security account. Therefore, file permissions must be granted to the SYSTEM account of the local computer running the Oracle8i database.

Windows NT Registry Security

Oracle Corporation recommends that you remove write permissions from users who are not Oracle8i DBAs or system administrators in HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE of the Windows NT registry.

To remove write permissions:

1. Open the registry.

2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE.

3. Select Permissions from the Security main menu.

   The Registry Key Permissions dialog box appears.

4. Remove write permissions from any users who are not Oracle8i DBAs or system administrators. Note that the SYSTEM account must have Full Control, since this is the account with which the Oracle8i database runs.

5. Ensure that user accounts that must run Oracle applications have read privileges.

6. Click OK.

7. Exit the registry.

Configuring Additional Components

Some individual components require post-installation configuration tasks. Review the following table for configuration requirements and see the sections or documents referenced for specific configuration procedures:

Component	Description	See Also...
Net8 network software	Net8 Configuration Assistant is a tool that assists you in configuring your Oracle network. If you installed Net8 Client, Net8 Configuration Assistant automatically started at the end of installation to guide you through network configuration. You can also configure your Oracle network after installation with the Net8 Configuration Assistant and Net8 Assistant tools.	Net8 Administrator's Guide and the online help available with both tools "Selecting a Net8 Configuration Method" for a discussion of available configuration choices
Oracle Advanced Security	Authentication, encryption, integrity support, and enterprise user security require configuration before using.	Oracle Advanced Security Administrator's Guide
Oracle Enterprise Manager	You must perform additional configuration tasks, such as discovering services to manage from the Oracle Enterprise Manager Console, setting up administrator preferred credentials, configuring enhanced notification, and so on.	Oracle Enterprise Manager Configuration Guide
Oracle Services for Microsoft Transaction Server	Configuration must be performed manually. In addition, you must install Microsoft Transaction Server.	Using Microsoft Transaction Server With Oracle8 Your Microsoft documentation
Pro*COBOL	Pro*COBOL supports specific compilers.	Pro*COBOL Precompiler Getting Started for Windows
SQL*Plus help file	If you want to use online help with SQL*Plus, you must populate the SQL*Plus tables with help files.	SQL*Plus Getting Started for Windows