Tchater maintenant avec le support
Tchattez avec un ingénieur du support

Safeguard Privilege Manager for Windows 4.5 - Administration Guide

TitlePageProxy Copyright Table of Contents About this guide What is Safeguard Privilege Manager for Windows? Installing Safeguard Privilege Manager for Windows Configuring Client data collection Configuring Instant Elevation Configuring Self-Service Elevation Configuring Temporary Session Elevation Configuring privileged application discovery Deploying rules Removing local admin rights Reporting Client-side UI customization Using Microsoft tools Maintaining a least privileged use environment Database Planning Product Improvement Program About us

Database hardware and software requirements

One Identity recommends installing the full SQL Server version for databases above 6876.4 MB or 10,000 users. For databases below 6,000 MB, you can install SQL Server Express, and can later upgrade to the full version of SQL Server in case of a database growth. For more information on how database sizes relate to the number of users in the database environment, see the following table.

NOTE: SQL Server Express databases have a size capacity limit of 10,000 MB.

Also, when selecting the SQL Server version, consider that certain SQL Server installations may not be able to take advantage of the available processing power and memory storage.

Table 3: Maximum database size, compute capacity, and maximum memory of different SQL Server installations

 

Enterprise

Standard

Web

Express

Maximum database size

524 PB

524 PB

524 PB

10 GB

Compute Capacity

OS Max

4 sockets or 24 cores

4 sockets or 16 cores

1 socket or 4 cores

Maximum Memory

OS Max

128 GB

64 GB

1 GB

Table 4: Recommended SQL Server versions for various Safeguard Privilege Manager for Windows environment sizes

Users

Database size

Recommended SQL Server version

1

4.7 MB

SQL Server Express

10

10.5 MB

SQL Server Express

100

73.0 MB

SQL Server Express

1,000

692.6 MB

SQL Server Express

2,000

1,378.6 MB

SQL Server Express

5,000

3,439.9 MB

SQL Server Express

10,000

6,876.4 MB

SQL Server Express

15,000

10,313.0 MB

SQL Server

20,000

13,749.5 MB

SQL Server

50,000

34,368.8 MB

SQL Server

100,000

68,734.2 MB

SQL Server

Auto-Growth

Safeguard Privilege Manager for Windows uses the default auto-growth configuration settings that comes installed on SQL Server. This setting sets the initial database size of SQL Server to 3 MB, then grows it by 1 MB every time the data limit is exceeded. The log file starts at 2 MB and is set to grow by 10% increments until the disk is full.

Even though the default auto-growth configuration settings work for Safeguard Privilege Manager for Windows, it may not be the most appropriate configuration for all environments (especially for customers exceeding 10,000 users).

Every time the database grows it takes a performance hit. In SQL Server storage terms, 1024 KB is 128 pages. These pages are stored in 8 KB blocks. For Safeguard Privilege Manager for Windows, which is going to potentially load millions of records, growing the data file of a database every 128 pages may result in a large performance hit, especially since SQL Server I/O requests are a major bottleneck.

Additionally, since auto-growth allocates chunks of data at a time it is easier for the database to become fragmented. With that in mind it is recommended to update the auto-growth settings.

The table below displays the recommended settings based on the size of the network environment. These values are not set in stone but are based on database growth rates of your specific environment. The rule of thumb is to set this value to one eight of the estimated database size. Ideally you should use auto-grow as a fail/safe parameter, and use alerts or monitoring programs to monitor file sizes and grow files proactively. This helps you avoid fragmentation and permits you to shift these maintenance activities to non-peak hours.

Table 5: Auto-growth recommendation for various Safeguard Privilege Manager for Windows environment sizes

Users

Database size

Auto-growth

1

4.7 MB

1 MB

10

10.5 MB

1.3 MB

100

73.0 MB

9.1 MB

1,000

692.6 MB

86.5 MB

2,000

1,378.6 MB

172.3 MB

5,000

3,439.9 MB

429.9 MB

10,000

6,876.4 MB

859.5 MB

15,000

10,313.0 MB

1289.1 MB

20,000

13,749.5 MB

1718.7 MB

50,000

34,368.8 MB

4296.1 MB

100,000

68,734.2 MB

8591.8 MB

How to change auto-growth on SQL Server 2014

NOTE: Steps may be slightly different for other supported versions of SQL Server.

To change the auto-growth settings:

  1. Start SQL Server Management Studio.

  2. Highlight, then right click the PAReporting database and navigate to Properties.

  3. In the left Panel, select the Files from the Database Properties dialog. The Properties window will be used to change Auto-growth.

  4. Identify the PAReporting name under Logical Name and change the Auto-growth based on table 5 above. In this example, we have set the auto-growth to 430MB and a max size of unlimited and left the log file to grow my 10% to a limit of 20971252MB. 430 is roughly one eighth of the 3,439.9MB database size for the 5000-user environment.

Initial database size

When Safeguard Privilege Manager for Windows is installed, it uses the default file and log sizes specified by SQL Server. The default file size is 3 MB for the database and 2 MB for the database logs.

NOTE: Consider that once these files exceed the initial file size settings, further file size increases may result in data fragmentation in the disk, and corresponding performance issues.

To prevent such performance issues, scale the log file sizes accordingly. For example, if the database is expected to grow to a specific size in a month, One Identity recommends that you take the expected value, double it, then use the doubled value for the initial size.

For example, if the database is expected to grow to 2,000 MB in a month, set the initial database size to 4,000 MB. This will reduce the number of auto-growths and reduce fragmentation, as a larger allocation means that more database-related information can be accessed from the same disk location. The following table breaks down the recommended initial size for the database based on a range of 1 to 100,000 users for the different database size estimations.

Table 6: Initial size recommendation for different Safeguard Privilege Manager for Windows environment sizes

Users

Database size

Initial size

1

4.7 MB

9.4 MB

10

10.5 MB

21.0 MB

100

73.0 MB

146.0 MB

1,000

692.6 MB

1385.2 MB

2,000

1,378.6 MB

2,757.2 MB

5,000

3,439.9 MB

6,879.8 MB

10,000

6,876.4 MB

13,752.8 MB

15,000

10,313.0 MB

21,626.0 MB

20,000

13,749.5 MB

27,498.0 MB

50,000

34,368.8 MB

68,736.0 MB

100,000

68,734.2 MB

137,468.4 MB

Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation