Mike Zeff Development Advisor ISV Microsoft New Zealand

Managing increasing IT and regulatory requirements Meeting SLAs for system availability Ensuring performance as load increases

Dynamic Development Beyond Relational Pervasive Insight Enterprise Data Platform Mobile and Desktop OLAP FILE XML RDBMS Services Query AnalysisReportingIntegrationSynch Search Cloud Server

Optimise performance Manage mixed workloads Scale performance Ensure system availability Minimise planned downtime Concurrent data access Secure data access Protect your system Simplify compliance Mission-Critical Applications

Highly secure data access Highly secure configuration Rich authentication Granular authorisation Help protect your data Transparent data encryption Extensible key management Simplify compliance All actions auditable Enterprise-wide security policies

Encrypt data and log files Protect backup files and detached database files Transparent to application No application modifications required to take advantage of encryption Secure with Database Encryption Key (DEK); DEK encrypted with A password Service Master Key Can use a Hardware Security Module (HSM) to store keys Use encrypted data in another server Import DEK to new server Attach encrypted database files Restore an encrypted backup SQL Server 2008 DEK Client Application ata Encrypted Data Page

Protect Data Access

Help protect your data with transparent data encryption Applications do not need to be aware of the encryption Data is highly protected because encrypted database files cannot be read without the Database Encryption Key Encryption keys can be exported and imported to trusted servers

Create an Audit object Automatically log actions Log To various formats A file, the Windows Application Log, or the Windows Security Log Create an audit specification Include server and database actions in an audit Predefined action groups Individual action filters

Define security policies Define audit, access policies by using Policy Management Framework Authentication standard Password policies Define surface area configurations as policies Apply across the enterprise Using Configuration Servers Helps to ensure enterprise-wide compliance

Simplify Compliance Secure Access Trustworthy Computing Granular Authorisation Data Encryption Rich Authentication Auditing Secure Configurations Protect Data Principals and Securables Roles Catalog Security Execution Context User Schema Separation Kerberos/NTLM Password Policy Enforcement End Point Authentication Encrypted Login Credentials Single Sign-On Native Cryptographic Capabilities Transparent Data Encryption Extensible Key Management Enterprise-wide Security Policies Security Updates Surface Area Minimised All Actions Audited Audit Actions to File, Windows Application Log, and Windows Security log Capture and Audit DDL Activities

Optimise performance Manage mixed workloads Scale performance Ensure system availability Minimise planned downtime Concurrent data access Secure data access Protect your system Simplify compliance Mission-Critical Applications

Help ensure system availability Failover clustering Database mirroring Log shipping Replication Minimise planned downtime Backup compression Dynamically add resources Online operations Enhance concurrent data access Database snapshots Snapshot isolation levels

Performance improvements Log compression Automatic page repair Prevents a corrupt data page from making a database unavailable Mirroring partner detects bad database page Requests valid copy from partner Log Stream compression

Principal Witness Data Log Mirror Data Log 1. Bad Page Detected X 2. Request page 3. Find page 4. Retrieve page 5. Transfer page 6. Write Page

Backup compression Standard backup commands and interface Off by default, configurable Restore from any SQL Server 2008 Edition Dynamically add resources Online-Add CPU Online-Add memory Backup Compression

Optimise performance Manage mixed workloads Scale performance Ensure system availability Minimise planned downtime Concurrent data access Secure data access Protect your system Simplify compliance Mission-Critical Applications

Optimise performance Data compression Enhanced partitioning DW query optimisations Improved indexed views Performance data collection (covered in manageability section) Manage mixed workloads Resource Governor Scale up/scale out

Storage cost savings Shrink large tables such as DW fact tables Improves query performance Results in less I/O but with some CPU cost Achieves a 2x to 7x compression ratio Independent of other features Works for data and indexes

Improved recognition of Star Join pattern in queries Enhanced rules to generate query plan alternatives Improved costing of Star Join plans

Resource Management Allocate resources Assign logins to workloads Map workloads to resources Define limits Prevent run-away queries Conduct online maintenance Prioritise your workloads Define priorities Dynamic re-allocation Backup Admin Tasks Continuous Loading ExecReports Ad-hoc Reports Report Workload OLTP Workload Admin Workload Admin Pool Application Pool Min Memory 10% Max Memory 20% Max CPU 20% Max CPU 90%

Managed Mixed Workloads

Using Resource Governor Configure the Resource Governor by using T-SQL or Management Studio Monitor the Resource Governor by using Management Studio and DMVs Change resource pool limits online and observe the change in real time

Growing product capabilities Increased management complexity Data volumes and users continue to grow Need relevant information for tuning and optimisation Data centre consolidation and virtualisation Increased need for management scalability

Manageability Multi-server management Visual administration Program tasks Consolidate performance information Report relevant insights Tune with best practices Define configurations Automate compliance Integrate with systems management

Manage across enterprise Manage single instance

CategoriesCategories TargetsTargets FacetsFacetsConditionsConditionsPoliciesPolicies

Reduce my surface area XPCmdShell == False SQLCLR == True DBMail == False RemoteDAC == False Reduce my surface area XPCmdShell == False SQLCLR == True DBMail == False RemoteDAC == False My table names must end with “%_tbl” Only Express and Developer Editions are allowed on developer workstations

Manual checking by administrator On Demand SQL Server Agent job checks periodically and logs non-compliance On Schedule, log out-of-compliance DDL trigger rolls back non-compliant changes Changes are attempted, prevent out-of-compliance Event Notification logs non-compliant changes Changes are attempted, log out-of-compliance

SQL Server 2008 supports Microsoft System Center Data Protection Manager 2007 Provides enterprise-wide SQL Server backup and restore operations Provides data centre redundancy Operations Manager 2007 SQL Server 2008 Management Pack

Manage By Policies

Simplify management with policies Make complex configuration management easier by combining multiple conditions into a single policy Manage Surface Area Configuration by policy, making compliance with security requirements easier to define and enforce Flexibility allows prevention or detection as well as monitoring and logging

Manageability Multi-server management Visual administration Program tasks Consolidate performance information Report relevant insights Tune with best practices Define configurations Automate compliance Integrate with systems management

Performance data collection OS perf indicators Performance data Extensible collection Central repository Consolidate information Open interface Management reports Canned reports Extensible

Management Data Warehouse Management Data Warehouse Management Studio Data Collection Management Studio Data Collection Target DataCollectorDataCollector CollectionSetsCollectionSets CollectionSetsCollectionSets Configuration Configuration Collection Set Reports

Use standard reports For user databases For data collector Disk usage Query statistics Server activity Build custom reports

Performance Reports Database Engine Tuning Advisor SQL Server Profiler Best Practices Policies Best Practices Analyser

Monitor with Insight

Gain system insight with Performance Data Collection Use built-in reports based on data collection to get insight into performance issues Monitor disk activity, query performance, server activity Performance Data Collection is extensible Build custom data collection sets Policy-based management integrates with Data Collection

Manageability Multi-server management Visual administration Program tasks Consolidate performance information Report relevant insights Tune with best practices Define configurations Automate compliance Integrate with systems management

Enterprise-wide policies Manage policies centrally Publish to all servers Monitor across multiple servers Multi-server configuration Single configuration server Custom server groups Multi-server queries

Centralised management Intellisense for productive management Error List window View dependencies Configuration servers Multi-server queries Replication Monitor

SQLCMD Create batch files Automate multiple scripts Server Management Objects (SMO) Create custom.NET management tools Powershell Integrated with Windows management scripting

Manage Interactively

Administer your systems across the enterprise Extend policy-based management to the enterprise Define groups of servers based on classes of features from a configuration server Apply policies to the server groups from the configuration server Clone a server configuration and apply it to a server group Management Studio supports enterprise management Query multiple servers at once

Install SQL Server 2008 CTP6 Start working with the new features Move to SQL Server 2005 for an easier upgrade to SQL Server 2008

Learn more about SQL Server Discover SQL Server 2008: Webcasts, Virtual Labs, and White Papers SQL Server 2008 training Download latest SQL Server CTP Join the SQL PASS community

Subscribe to our free, online newsletters to stay up to date with Microsoft news, information & events Don’t forget to fill in your Evaluation form! Hand in at end of day for complimentary software Tech  Ed 2008: 1-3 September, SkyCity Mark the dates. Registration opening soon.