Files
sql-server-samples/samples/features/epm-framework/sample-policies/SQL Server Password Policy.xml
T

345 lines
20 KiB
XML

<?xml version="1.0" encoding="utf-8"?>
<!--Copyright (c) Microsoft Corporation.-->
<!--Licensed under the MIT License-->
<model xmlns="smlif.xsd">
<_locDefinition xmlns="urn:locstudio">
<_locDefault _loc="locNone" />
<_locTag _loc="locData">DMF:Name</_locTag>
<_locTag _loc="locData">DMF:Description</_locTag>
<_locTag _loc="locData">DMF:Condition</_locTag>
<_locTag _loc="locData">DMF:ObjectSet</_locTag>
<_locTag _loc="locData">DMF:RootCondition</_locTag>
<_locTag _loc="locData">DMF:PolicyCategory</_locTag>
<_locTag _loc="locData">DMF:HelpText</_locTag>
</_locDefinition>
<identity>
<name>urn:uuid:96fe1236-abf6-4a57-b54d-e9baab394fd1</name>
<baseURI>http://documentcollection/</baseURI>
</identity>
<xs:bufferSchema xmlns:xs="http://www.w3.org/2001/XMLSchema">
<definitions xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08">
<document>
<docinfo>
<aliases>
<alias>/system/schema/DMF</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<xs:schema targetNamespace="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema" elementFormDefault="qualified">
<xs:element name="Policy">
<xs:complexType>
<xs:sequence>
<xs:any namespace="http://schemas.microsoft.com/sqlserver/DMF/2007/08" processContents="skip" minOccurs="0" maxOccurs="unbounded" />
</xs:sequence>
</xs:complexType>
</xs:element>
<xs:element name="ObjectSet">
<xs:complexType>
<xs:sequence>
<xs:any namespace="http://schemas.microsoft.com/sqlserver/DMF/2007/08" processContents="skip" minOccurs="0" maxOccurs="unbounded" />
</xs:sequence>
</xs:complexType>
</xs:element>
<xs:element name="Condition">
<xs:complexType>
<xs:sequence>
<xs:any namespace="http://schemas.microsoft.com/sqlserver/DMF/2007/08" processContents="skip" minOccurs="0" maxOccurs="unbounded" />
</xs:sequence>
</xs:complexType>
</xs:element>
<xs:element name="PolicyCategory">
<xs:complexType>
<xs:sequence>
<xs:any namespace="http://schemas.microsoft.com/sqlserver/DMF/2007/08" processContents="skip" minOccurs="0" maxOccurs="unbounded" />
</xs:sequence>
</xs:complexType>
</xs:element>
<xs:element name="TargetSet">
<xs:complexType>
<xs:sequence>
<xs:any namespace="http://schemas.microsoft.com/sqlserver/DMF/2007/08" processContents="skip" minOccurs="0" maxOccurs="unbounded" />
</xs:sequence>
</xs:complexType>
</xs:element>
<xs:element name="TargetSetLevel">
<xs:complexType>
<xs:sequence>
<xs:any namespace="http://schemas.microsoft.com/sqlserver/DMF/2007/08" processContents="skip" minOccurs="0" maxOccurs="unbounded" />
</xs:sequence>
</xs:complexType>
</xs:element>
<DMF:bufferData xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08">
<instances xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08">
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/Policy/SQL Server Password Policy</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:Policy xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:PolicyCondition>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/Condition/Password Policy Enforced</sml:Uri>
</sfc:Reference>
</DMF:PolicyCondition>
<DMF:PolicyObjectSet>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/ObjectSet/SQL Server Password Policy__ObjectSet</sml:Uri>
</sfc:Reference>
</DMF:PolicyObjectSet>
<DMF:PolicyRootCondition>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/Condition/SQL Server 2005 or a Later Version</sml:Uri>
</sfc:Reference>
</DMF:PolicyRootCondition>
<DMF:PolicyPolicyCategory>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/PolicyCategory/Microsoft Best Practices_b Security</sml:Uri>
</sfc:Reference>
</DMF:PolicyPolicyCategory>
<DMF:Name type="string">SQL Server Password Policy</DMF:Name>
<DMF:Description type="string">Checks whether password policy enforcement on SQL Server logins is enabled. Password policy should be enforced for all SQL Server logins.</DMF:Description>
<DMF:Condition type="string">Password Policy Enforced</DMF:Condition>
<DMF:ObjectSet type="string">SQL Server Password Policy_ObjectSet</DMF:ObjectSet>
<DMF:RootCondition type="string">SQL Server 2005 or a Later Version</DMF:RootCondition>
<DMF:PolicyCategory type="string">Microsoft Best Practices: Security</DMF:PolicyCategory>
<DMF:Enabled type="boolean">false</DMF:Enabled>
<DMF:AutomatedPolicyEvaluationMode type="AutomatedPolicyEvaluationMode">None</DMF:AutomatedPolicyEvaluationMode>
<DMF:HelpText type="string" />
<DMF:HelpLink type="string">http://go.microsoft.com/fwlink/?LinkId=116331</DMF:HelpLink>
<DMF:ActiveEndDate type="dateTime">0001-01-01T00:00:00</DMF:ActiveEndDate>
<DMF:ActiveStartDate type="dateTime">0001-01-01T00:00:00</DMF:ActiveStartDate>
</DMF:Policy>
</data>
</document>
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/ObjectSet/SQL Server Password Policy__ObjectSet</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:ObjectSet xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:TargetSets>
<sfc:Collection>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/ObjectSet/SQL Server Password Policy__ObjectSet/TargetSet/Server_/Login</sml:Uri>
</sfc:Reference>
</sfc:Collection>
</DMF:TargetSets>
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:Name type="string">SQL Server Password Policy_ObjectSet</DMF:Name>
<DMF:Facet type="string">ILoginOptions</DMF:Facet>
</DMF:ObjectSet>
</data>
</document>
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/Condition/Password Policy Enforced</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:Condition xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:Expression type="string">
&lt;Operator&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Bool&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;OpType&gt;EQ&lt;/OpType&gt;&lt;?char 13?&gt;
&lt;Count&gt;2&lt;/Count&gt;&lt;?char 13?&gt;
&lt;Attribute&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Bool&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;Name&gt;PasswordPolicyEnforced&lt;/Name&gt;&lt;?char 13?&gt;
&lt;/Attribute&gt;&lt;?char 13?&gt;
&lt;Function&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Bool&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;FunctionType&gt;True&lt;/FunctionType&gt;&lt;?char 13?&gt;
&lt;ReturnType&gt;Bool&lt;/ReturnType&gt;&lt;?char 13?&gt;
&lt;Count&gt;0&lt;/Count&gt;&lt;?char 13?&gt;
&lt;/Function&gt;&lt;?char 13?&gt;
&lt;/Operator&gt;
</DMF:Expression>
<DMF:Name type="string">Password Policy Enforced</DMF:Name>
<DMF:Description type="string">Confirms that the enforce password option on SQL Server logins is enabled.</DMF:Description>
<DMF:Facet type="string">ILoginOptions</DMF:Facet>
</DMF:Condition>
</data>
</document>
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/Condition/SQL Server 2005 or a Later Version</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:Condition xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:Expression type="string">
&lt;Operator&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Bool&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;OpType&gt;GE&lt;/OpType&gt;&lt;?char 13?&gt;
&lt;Count&gt;2&lt;/Count&gt;&lt;?char 13?&gt;
&lt;Attribute&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Numeric&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;Name&gt;VersionMajor&lt;/Name&gt;&lt;?char 13?&gt;
&lt;/Attribute&gt;&lt;?char 13?&gt;
&lt;Constant&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Numeric&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;ObjType&gt;System.Int32&lt;/ObjType&gt;&lt;?char 13?&gt;
&lt;Value&gt;9&lt;/Value&gt;&lt;?char 13?&gt;
&lt;/Constant&gt;&lt;?char 13?&gt;
&lt;/Operator&gt;
</DMF:Expression>
<DMF:Name type="string">SQL Server 2005 or a Later Version</DMF:Name>
<DMF:Description type="string">Confirms that the version of SQL Server is 2005 or a later version.</DMF:Description>
<DMF:Facet type="string">Server</DMF:Facet>
</DMF:Condition>
</data>
</document>
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/PolicyCategory/Microsoft Best Practices_b Security</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:PolicyCategory xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:Name type="string">Microsoft Best Practices: Security</DMF:Name>
</DMF:PolicyCategory>
</data>
</document>
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/ObjectSet/SQL Server Password Policy__ObjectSet/TargetSet/Server_/Login</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:TargetSet xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:Levels>
<sfc:Collection>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/ObjectSet/SQL Server Password Policy__ObjectSet/TargetSet/Server_/Login/TargetSetLevel/Server_/Login</sml:Uri>
</sfc:Reference>
</sfc:Collection>
</DMF:Levels>
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/ObjectSet/SQL Server Password Policy__ObjectSet</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:TargetTypeSkeleton type="string">Server/Login</DMF:TargetTypeSkeleton>
<DMF:Enabled type="boolean">true</DMF:Enabled>
</DMF:TargetSet>
</data>
</document>
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/Condition/SQL Server Authenticated Logins</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:Condition xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:Expression type="string">
&lt;Operator&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Bool&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;OpType&gt;EQ&lt;/OpType&gt;&lt;?char 13?&gt;
&lt;Count&gt;2&lt;/Count&gt;&lt;?char 13?&gt;
&lt;Attribute&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Numeric&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;Name&gt;LoginType&lt;/Name&gt;&lt;?char 13?&gt;
&lt;/Attribute&gt;&lt;?char 13?&gt;
&lt;Function&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Numeric&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;FunctionType&gt;Enum&lt;/FunctionType&gt;&lt;?char 13?&gt;
&lt;ReturnType&gt;Numeric&lt;/ReturnType&gt;&lt;?char 13?&gt;
&lt;Count&gt;2&lt;/Count&gt;&lt;?char 13?&gt;
&lt;Constant&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;String&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;ObjType&gt;System.String&lt;/ObjType&gt;&lt;?char 13?&gt;
&lt;Value&gt;Microsoft.SqlServer.Management.Smo.LoginType&lt;/Value&gt;&lt;?char 13?&gt;
&lt;/Constant&gt;&lt;?char 13?&gt;
&lt;Constant&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;String&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;ObjType&gt;System.String&lt;/ObjType&gt;&lt;?char 13?&gt;
&lt;Value&gt;SqlLogin&lt;/Value&gt;&lt;?char 13?&gt;
&lt;/Constant&gt;&lt;?char 13?&gt;
&lt;/Function&gt;&lt;?char 13?&gt;
&lt;/Operator&gt;
</DMF:Expression>
<DMF:Name type="string">SQL Server Authenticated Logins</DMF:Name>
<DMF:Description type="string" />
<DMF:Facet type="string">Login</DMF:Facet>
</DMF:Condition>
</data>
</document>
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/ObjectSet/SQL Server Password Policy__ObjectSet/TargetSet/Server_/Login/TargetSetLevel/Server_/Login</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:TargetSetLevel xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/ObjectSet/SQL Server Password Policy__ObjectSet/TargetSet/Server_/Login</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:TargetSetLevelCondition>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/Condition/SQL Server Authenticated Logins</sml:Uri>
</sfc:Reference>
</DMF:TargetSetLevelCondition>
<DMF:TargetTypeSkeleton type="string">Server/Login</DMF:TargetTypeSkeleton>
<DMF:LevelName type="string">Login</DMF:LevelName>
<DMF:Condition type="string">SQL Server Authenticated Logins</DMF:Condition>
</DMF:TargetSetLevel>
</data>
</document>
</instances>
</DMF:bufferData>
</xs:schema>
</data>
</document>
</definitions>
</xs:bufferSchema>
</model>