SQL Server Policy Tuning
In this section, you created and defined a process set for SQL Server that grants certain executables –in this case sqlservr.exe- unrestricted access to the database files. The need may arise to allow other executables, and/or users, access to the files.
You can grant this access by:
-
Adding to the existing process set
-
Creating a new one
The best option depends on the access requirements. The key decision is whether or not to select the Apply Key effect along with Permit or not. Omitting Apply Key on a security rule that still contains Permit allows the specified user or process to access to the data, but does not apply the encryption key, so therefore only shows them the data in its encrypted, cypher-text format. This is useful for anti-virus or backup software that may need to scan or copy the file, but does not necessarily need to see the contents.
