711 pro SQL server 2008 policy based management

BOOKS FOR PROFESSIONALS BY PROFESSIONALS ® Pro Server 2008 Policy-Based Management Dear Reader, Ken Simmons, Author of Pro SQL Server 2008 Mirroring Pro SQL Server 2008 Administration Colin Stasiuk Enforcing standards across your organization has always been a difficult task when it comes to SQL Server Yet the growing compliance requirements for today’s organizations make it more important than ever to ensure that your servers are properly configured Policy-Based Management could be your salvation It is a new feature in SQL Server 2008 enabling you to manage large groups of servers with consistency, in compliance with company rules and government regulation Policy-Based Management is so important that we wrote this book to provide a central source of deep information to help you implement the feature in your environment We cover practical scenarios and give guidance to help you with your compliance needs You’ll learn to: • Maintain a consistent, predictable environment throughout your organization • Create and evaluate policies to ensure that consistency • Configure and receive alerts for policy violations • View the state of your policies through reports and online queries • Implement policies to help meet compliance regulations We aim to provide you with the knowledge to make the right decisions when deploying policies in your environment, as well to provide a quick reference guide to have at your fingertips on a daily basis We know that maintaining a stable and consistent SQL Server environment can be overwhelming at times; however, having the proper configurations in place, and ensuring those configurations remain consistent by using Policy-Based Management will give you confidence and peace of mind from knowing that your environment is the way it should be Ken Simmons, Colin Stasiuk, Jorge Segarra Companion eBook Available Pro SQL Server 2008 Policy-Based Management FPO THE EXPERT’S VOICE ® IN SQL SERVER THE APRESS ROADMAP Beginning SQL Server 2008 Administration DBA Survivor: Become A Rock Star DBA www.apress.com Pro SQL Server 2008 Administration Pro SQL Server 2008 Policy-Based Management SQL Server 2008 Query Performance Tuning Simmons Stasiuk Segarra SOURCE CODE ONLINE Policy-Based Management Easily manage large server farms by automating consistent rules and policies Jorge Segarra Companion eBook Pro SQL Server 2008 Ken Simmons, Colin Stasiuk, and Jorge Segarra Shelve in: Databases / SQL Server User level: Intermediate–Advanced www.it-ebooks.info www.it-ebooks.info Pro SQL Server 2008 Policy-Based Management „„„ Ken Simmons Colin Stasiuk Jorge Segarra www.it-ebooks.info PRO SQL SERVER 2008 POLICY-BASED MANAGEMENT Copyright © 2010 by Ken Simmons, Colin Stasiuk, Jorge Segarra All rights reserved No part of this work may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage or retrieval system, without the prior written permission of the copyright owner and the publisher ISBN-13 (pbk): 978-1-4302-2910-0 ISBN-13 (electronic): 978-1-4302-2911-7 Printed and bound in the United States of America Trademarked names may appear in this book Rather than use a trademark symbol with every occurrence of a trademarked name, we use the names only in an editorial fashion and to the benefit of the trademark owner, with no intention of infringement of the trademark President and Publisher: Paul Manning Lead Editor: Jonathan Gennick Technical Reviewer: Thomas LaRock Editorial Board: Clay Andres, Steve Anglin, Mark Beckner, Ewan Buckingham, Gary Cornell, Jonathan Gennick, Jonathan Hassell, Michelle Lowman, Matthew Moodie, Duncan Parkes, Jeffrey Pepper, Frank Pohlmann, Douglas Pundick, Ben Renow-Clarke, Dominic Shakeshaft, Matt Wade, Tom Welsh Coordinating Editor: Kelly Moritz Copy Editor: Marilyn Smith Compositor: Bytheway Publishing Services Indexer: John Collin Artist: April Milne Cover Designer: Anna Ishchenko Distributed to the book trade worldwide by Springer-Verlag New York, Inc., 233 Spring Street, 6th Floor, New York, NY 10013 Phone 1-800-SPRINGER, fax 201-348-4505, e-mail orders-ny@springersbm.com, or visit www.springeronline.com For information on translations, please e-mail rights@apress.com, or visit www.apress.com Apress and friends of ED books may be purchased in bulk for academic, corporate, or promotional use eBook versions and licenses are also available for most titles For more information, reference our Special Bulk Sales–eBook Licensing web page at www.apress.com/info/bulksales The information in this book is distributed on an “as is” basis, without warranty Although every precaution has been taken in the preparation of this work, neither the author(s) nor Apress shall have any liability to any person or entity with respect to any loss or damage caused or alleged to be caused directly or indirectly by the information contained in this work The source code for this book is available to readers at www.apress.com You will need to answer questions pertaining to this book in order to successfully download the code www.it-ebooks.info To my wife Susan and son Nathan – Ken Simmons For Robbie and Lana, who always put a smile on my face, and for Heather, whose policies always keep me in check – Colin Stasiuk I’d like to dedicate this book to my wife, Jessica Without your love, understanding, and support, I wouldn’t have been able to this I love you always and forever – Jorge Segarra www.it-ebooks.info Contents at a Glance „ Contents at a Glance iv „ Contents v „ About the Authors xii „ About the Technical Reviewers xiii „ Acknowledgments xiv „ Introduction xv „ Chapter 1: Introduction to Policy-Based Management „ Chapter 2: Creating Policies 13 „ Chapter 3: Evaluating Policies 49 „ Chapter 4: Policy-Based Management Using PowerShell 89 „ Chapter 5: Receiving Alerts for Policy Violations .109 „ Chapter 6: Policy-Based Management Internals 131 „ Chapter 7: Practical Uses of Policy-Based Management 149 „ Chapter 8: Reporting 169 „ Chapter 9: Enforcing Compliance .185 „ Chapter 10: Where to Go from Here 207 „ Appendix: Microsoft SQL Server Best Practice Policies .215 „ Index 235 iv www.it-ebooks.info „ CONTENTS Contents „ Contents at a Glance iv „ Contents v „ About the Authors xii „ About the Technical Reviewers xiii „ Acknowledgments xiv „ Introduction xv „ Chapter 1: Introduction to Policy-Based Management What Is Policy-Based Management? Why Use Policy-Based Management? .1 Policy-Based Management Requirements .2 Policy-Based Management Components Targets Facets Conditions Policies Policy Behavior Evaluation Modes Server Restrictions Policy Management Categories Central Management Servers Enterprise Policy Management Framework 10 v www.it-ebooks.info „ CONTENTS Alerts 11 Summary 11 „ Chapter 2: Creating Policies 13 Manually Creating Policies 13 Creating a Condition 13 Creating a Policy 16 Viewing Dependent Policies 21 Importing Policies 24 Exporting Policies 27 Exporting Existing Policies 28 Exporting Current State As Policy 33 Creating Policies with T-SQL 35 Managing Policy Categories 37 Creating Policy Categories 37 Subscribing to Categories 39 Creating Advanced Conditions .40 Defining Conditions for System Databases 44 Summary 47 „ Chapter 3: Evaluating Policies 49 Evaluation Modes 49 Evaluation on Demand 50 Evaluating a Single Policy on Demand 50 Evaluating Multiple Policies on Demand 55 Evaluating Policies Against a Different Instance 57 Evaluation on Schedule 60 Creating a Schedule 61 Adding Policies to an Existing Schedule 66 vi www.it-ebooks.info „ CONTENTS Evaluation on Change: Log Only 67 Evaluation on Change: Prevent 74 Using a Central Management Server .76 Creating a Central Management Server 77 Creating a Central Management Server Group 78 Adding Servers to Central Management Server Groups 80 Registering a Server to a Group 80 Importing Registered Servers and Groups 81 Evaluating Policies against a Central Management Server Group 84 Summary 87 „ Chapter 4: Policy-Based Management Using PowerShell 89 Creating a Basic PowerShell Script 89 Using T-SQL 89 Using SQL Server Management Objects 91 Interrogating for Members and Properties 93 Running a Policy Against a SQL Server Instance 95 Invoking a Policy from a File 95 Getting Detailed Results 96 Invoking a Policy Defined on the Server 97 Running Multiple Policies Against a SQL Server Instance .98 Invoking Multiple Policies from the Cmdlet 98 Invoking a Category of Policies from the File System 99 Invoking a Category of Policies from an Instance 100 Querying and Storing Policy Execution Results .101 Creating a Staging Table 102 Loading Policy Evaluation History 102 Querying the History 103 Evaluating Against a Central Management Server 105 vii www.it-ebooks.info „ CONTENTS Summary .108 „ Chapter 5: Receiving Alerts for Policy Violations .109 Configuring Database Mail 109 Setting Up Database Mail 109 Testing Database Mail 111 Cleaning Up Database Mail History 113 Creating SQL Server Agent Operators 116 Enabling SQL Server Agent Notifications .118 Creating Alerts .120 Troubleshooting Policies 126 Viewing Policy History 126 Viewing History Based on Policies 126 Viewing History Based on Objects 127 General Troubleshooting 129 Summary .130 „ Chapter 6: Policy-Based Management Internals 131 Policy-Based Management Properties 131 Policy-Based Management Architecture .134 On Demand 134 On Change: Prevent 135 On Change: Log Only 135 On Schedule 135 Policy-Based Management Security Issues 136 Policy-Based Management Tables and Views .137 Tables 137 Contents of System Policy Tables 138 Checking for New Tables 141 Views 141 viii www.it-ebooks.info ... Introduction to Policy- Based Management What Is Policy- Based Management? Why Use Policy- Based Management? .1 Policy- Based Management Requirements .2 Policy- Based Management. ..www.it-ebooks.info Pro SQL Server 2008 Policy- Based Management „„„ Ken Simmons Colin Stasiuk Jorge Segarra www.it-ebooks.info PRO SQL SERVER 2008 POLICY- BASED MANAGEMENT Copyright © 2010... require SQL Server 2008 as well However, once you have installed an instance of SQL Server 2008, both Policy- Based Management and Central Management Servers will work with prior versions of SQL Server