Lesson 1: Create and Apply an Off By Default Policy

APPLIES TO: yesSQL Server noAzure SQL Database noAzure SQL Data Warehouse noParallel Data Warehouse

Using Policy-Based Management policies, you can administer one or more instances of SQL Server, one or more instance objects, server instances, one or more databases, or one or more database objects. As the database administrator, you want to ensure that certain servers do not have Database Mail enabled. In this lesson, you will create a condition and a policy that sets that server option. You will test the server to see whether it complies with the policy. Then, you will use the policy to reconfigure the server to bring the server into compliance.

Prerequisites

To complete this tutorial, you need SQL Server Management Studio, and access to a server that's running SQL Server.

Create the mail-off condition

  1. In Object Explorer, expand Management, expand Policy Management, expand Facets, right-click Surface Area Configuration, and then click New Condition.

    new condition

  2. In the Create New Condition dialog box, in the Name box, type Mail Off.

    1. In the Facet box, confirm that Surface Area Configuration facet is selected.
    2. In the Expression area, in the Field box, select **@DatabaseMailEnabled**, in the Operator box select =, and in the Value select False.
    3. On the Description page, type a description of the condition, and then click OK to create the condition.

    Mail off condition

Create the off-by-default policy

  1. In Object Explorer, right-click Surface Area Configuration, and then click New Policy.

  2. In the Create New Policy dialog box, in the Name box, type Off By Default.

    1. Leave the Enabled checkbox unchecked. The Enabled checkbox applies to automated policies, and this policy will be executed on demand.
    2. In the Check condition checkbox, scroll down to the Surface Area Configuration area, and then select Mail Off as the condition to check.
    3. The Against targets box will be blank because this is a server-scoped policy.
    4. In the Evaluation Mode checkbox, select On demand as the evaluation mode.
    5. In the Server restriction checkbox, select None.
    6. On the Description page, type a description of the policy.

    off by default policy

  3. On the description page, you can provide a hyperlink to a Web page for your policies in the Additional help hyperlink area. In the Text to display box, type the text that will appear for the hyperlink.

    1. In the Address box, type a hyperlink to a Help page, such as the home page for the IT department of your company.
    2. To confirm the address by opening the Web page, click Test Link.
    3. Click OK.

    Off-by-default policy web link

Configure server to run off-by-default policy

  1. In Object Explorer, right-click your instance of SQL Server, point to Policies, and then click Evaluate.

    evaluate policy

  2. In the Evaluate Policies dialog box you can select policies from another instance of SQL Server or from a file. For this step, leave Source set to your instance of the Database Engine.

    1. In the Policies section, select the Off By Default policy.
    2. To see whether the server is in compliance with the policy, click Evaluate.
    3. In the Results area, you will see a green circle with a check mark if the Database Engine complies with the policy. You will see a red circle with an X if the Database Engine does not comply with the policy.

evaluate off-by-default policy

  1. In the Target Details area, you will see additional information in the Message column if an error occurs. In the Message column, click View to see a report that contains the results of the check for each facet property that was checked.

    View results of policy evaluation

  2. The policy description is displayed at the bottom of the page, and the Additional help section displays the hyperlink that you have configured for the policy. Click the message hyperlink to open the Web page that you specified when you created the policy.

  3. Close the browser, and then close the Results Detailed View dialog box.

  4. If the server is out of compliance and you want to disable Database Mail, click Apply in the Evaluation Results page.

  5. Close both the Results Detailed View and the Evaluate Policies dialog boxes.

Next Lesson

Lesson 2: Create and Apply a Naming Standards Policy