Why does a property show up in > 1 facet? Why do some facets support CoC:Prevent, but others not?

Last week, Shaun Stuart posted some questions on his blog about PBM “strangeness“.   He was wondering why some properties like “AutoClose” show up in more than one facet, and then why some of those facets support “check on change : prevent” but others don’t. I’ve reproduced my answer to Shawn, below … A property can appear…

1

After renaming computer, "check on schedule" policies don’t work. How to fix …

Hi, If you rename your computer, then “check on schedule policies” won’t work because the old machine name is embedded in the SQL Agent jobs. To make this (and a lot of other stuff) work after a machine rename, execute the following procedure:  “How to: Rename a Computer that Hosts a Stand-Alone Instance of SQL…

0

Clarification around "Data and Log Files …" and "Backup Files …" policies

Hi, We ship these two Best Practices policies Place Data and Log Files on Separate Drives Backup Files Must Be on Separate Devices from the Database Files Unfortunately, neither of those two policies can detect separate physical devices through Windows mount points.   We will clarify the documentation on this and look to get this working across…

0

Clarification on the "Guest Permissions on User Databases" policy

We ship a “Microsoft Best Practices: Security” policy called “Guest Permissions on User Databases“.  Unfortunately, the wording in the UI and BOL is not clear about whether this can/should apply to msdb.   Here is what is says today: “You can do this by executing REVOKE CONNECT FROM GUEST” from within any database other than master…

0