Creating a condition
In this recipe, we will create a condition that will later be used for a policy, programmatically.
Getting ready
In this recipe, we will create a condition called xp_cmdshell is disabled
that checks the Server Security
facet, XPCmdShellEnabled
.
How to do it...
These are the steps required to create a condition:
Open PowerShell ISE as an administrator.
Import the
SQLPS
module and create a new SQL Server object as follows:#import SQL Server module Import-Module SQLPS -DisableNameChecking $connectionString = "server='localhost';Trusted_Connection=true" $conn = New-Object Microsoft.SQlServer.Management.Sdk.Sfc.SqlStoreConnection($connectionString) $policyStore = New-Object Microsoft.SqlServer.Management.DMF.PolicyStore($conn)
Add the following script and run it:
$conditionName = "xp_cmdshell is disabled" if ($policyStore.Conditions[$conditionName]) { #we cannot delete a condition referenced by a policy #before we remove the condition #we must remove the dependent...