Extending Default Security

Perform these steps to increase the default security:

  1. When installing the databases you will use to export data or perform extended analytics, select these options:

    • Customer_Interface

    • db_owner

    • db_securityadmin

    • HSFService

    • public

  2. To further secure the HSFService, select: Control Panel, then Administrative Tools, then Services, then HSFService, then Advanced Security Settings, then Permissions and assign the following:

    • Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here.

    • Replace permission entities on all child objects with entities shown here that apply to child objects

  3. On the Permission Entity for HSFService – Object tab, select Allow for Query Value, Set Value, Create Subkey, Delete, and Read Control.

  4. To further secure the /HSFData/hsf directory, select the following on the Advanced Security Settings – Permissions tab:

    • Replace permission entities on all child objects with entities shown here that apply to child objects

    • Allow inheritable permissions from the parent to propagate to this object and all child objects.

    • Replace permission entities on all child objects with entities shown here that apply to child objects

  5. To further secure/HSFData, remove all users except System in Groups or User Names on the Properties for HSFData – Security tab.

  6. To further secure the Admin Doc (user.adm), limit access to the minimum necessary.