In this recipe, we will create a condition that will later be used for a policy, programmatically.
In this recipe, we will create a condition called xp_cmdshell is disabled that checks the Server Security facet, XPCmdShellEnabled.
These are the steps required to create a condition:
Open PowerShell ISE as an administrator.
Import the
SQLPSmodule and create a new SQL Server object as follows:#import SQL Server module Import-Module SQLPS -DisableNameChecking $connectionString = "server='localhost';Trusted_Connection=true" $conn = New-Object Microsoft.SQlServer.Management.Sdk.Sfc.SqlStoreConnection($connectionString) $policyStore = New-Object Microsoft.SqlServer.Management.DMF.PolicyStore($conn)
Add the following script and run it:
$conditionName = "xp_cmdshell is disabled" if ($policyStore.Conditions[$conditionName]) { #we cannot delete a condition referenced by a policy #before we remove the condition #we must remove the dependent...