18
Object
Directory
Physical
Location
Consideration
should
be
made
to
the
location
of
the
Object
Directory.
The
default
final
folder
for
the
Endpoint
Encryption
Object
Directory
is
in
a
folder
called
SBDATA.
If
possible,
use
a
separate
fixed
drive
or
partition
to
the
OS
for
example,
OS
and
application
on
C:
database
on
D:.
This
is
usually
decided
at
the
time
of
initial
installation
and
can
be
modified
at
another
time.
Object
Directory
Access
Check
that
every
administrator
that
needs
to
log
on
to
the
Object
Directory
goes
through
the
Endpoint
Encryption
Database
server,
not
direct
through
local
connection.
Where
possible,
do
not
allow
the
database
to
be
shared.
Searching
for
Objects
Limit
the
use
of
the
Find
function
in
20K+
databases
during
normal
working
hours
as
it
can
slow
access
for
other
systems
and
user
objects.
Another
alternative
is
to
work
on
a
recent
copy
of
the
Object
Directory
to
perform
searches,
and
once
the
location
is
found,
they
can
be
navigated
to
directly
in
the
live
Object
Directory.
Clearing
Deleted
Objects
Clear
objects
from
Deleted
Items
regularly
when
not
needed.
Deleted
items
are
folders
containing
old
deleted
users,
systems,
and
other
objects
and
are
found
through
the
System
tab
in
the
Endpoint
Encryption
Manager.
These
objects
can
slow
searches
down.
If
these
objects
are
needed
for
auditing,
they
will
need
to
be
retained
by
first
backing
up
the
whole
database
(SBDATA
folder)
and
then
storing,
dated,
carefully
for
that
purpose.
Then
empty
the
deleted
items
from
the
current
live
database
to
help
speed
of
access.
See
the
more
detailed
Object
Directory
Maintenance
section
below.
SBSERVER.INI
This
file
is
found
in
the
main
installation
folder
for
your
Endpoint
Encryption
Manager.
It
can
be
used
to
adjust
the
maximum
number
of
connections
the
Endpoint
Encryption
server
will
accept
and
the
behavior
when
the
maximum
is
reached.
SBServer
ini
contents:
[Connections]
Max=200
AcceptAtMax=No
The
default
settings
are
usually
fine
for
most
implementations
but
Max=200
can
be
set
to
a
higher
value
depending
on
the
number
of
incoming
connections.
This
should
only
be
changed
if
the
server
has
a
high
specification
and
is
recommended
by
a
McAfee
Endpoint
Encryption
consultant.
In
addition,
this
would
need
to
be
tested
to
determine
if
this
improves
sync
events
and
server
load.
(Please
see
Endpoint
Encryption
Manager
Administration
Guide
supplied
with
Endpoint
Encryption
Manager
for
further
details
on
SBServer.ini).
