Make sure the “sybase” user is a member of the Windows system-defined group “Administrators” as it must have access privileges that allow it to complete the steps described below.
After completing the installation steps for improving the security, the user “sybase” can be removed from the Windows system-defined group “Administrators”.
Stop Adaptive Server services.
Using the Administrative Tools, open Services, select each of the Sybase Adaptive Server entries and stop them. There are separate entries in Services for Sybase Adaptive Server SQLServer, XPServer, BCKServer, MONServer, SYSAM and SybProtect.
Identify the drives and folders where the Adaptive Server software is installed, and the Adaptive Server’s disk devices.
Use the Windows command line tool cacls or Windows Explorer to set access permissions on the identified drives and folders. For detailed instructions on the use of cacls or Windows Explorer, consult your Windows documentation or your Windows Operating System administrator.
Sybase recommends granting full control to the user “sybase” and denying access to others on all identified drives, files, and folder hierarchies.If users other than “sybase” need access to files (configuration files, programs, libraries, and so on) in the folder hierarchy, limit their access to read or execute. Granting this access and any further access permissions should be carefully reviewed by the administrator to ensure they are required.
cacls is a command line utility available
on Windows 2000 and later versions. On earlier Windows versions,
this utility is available from the Windows Resource Kit.
If you have installed EBF 12326, remove SybProtect service.
SybProtect service enabled is not required for Adaptive Server version 12.5.3 ESD#1 onwards. To remove the SybProtect service, run the setup.exe program supplied with EBF 12326. This will invoke the Installshield Wizard which will walk you through the steps to remove the SybProtect service.
Adaptive Server services should start as the user “sybase”.
Using the Administrative Tools, open Services and select each of the Sybase Adaptive Server entries installed.
Set the “Log On” properties for each of the entries to use “sybase” and the password for this account. This action results in the user “sybase” being granted ‘log on as a service’ right by Windows.
Start Adaptive Server services.
Using the Administrative Tools, open Services and select each of the Sybase Adaptive Server entries that were stopped in step 1 and start them.
