Page 106 - DCAP508_DATABASE_ADMINISTRATION

Database Administration

Notes 7.1.3 Security Features of Database Mail

Off by default. To reduce the surface area of SQL Server, Database Mail stored procedures
are disabled by default.

To send Database Mail, you must be a member of the DatabaseMailUserRole database
role in the msdb database.
Profile security. Database Mail enforces security for mail profiles. You choose the msdb
database users or groups that have access to a Database Mail profile. You can grant access
to either specific users, or all users in msdb. A private profile restricts access to a specified
list of users. A public profile is available to all users in a database.
Attachment size governor. Database Mail enforces a configurable limit on the attachment
file size. You can change this limit by using the sysmail_configure_sp stored procedure.

Prohibited file extensions. Database Mail maintains a list of prohibited file extensions.
Users cannot attach files with an extension that appears in the list. You can change this list
by using sysmail_configure_sp.
Database Mail runs under the SQL Server Engine service account. To attach a file from a
folder to an email, the SQL Server engine account should have permissions to access the
folder with the file.

7.1.4 Supportability Features of Database Mail

Integrated configuration. Database Mail maintains the information for e-mail accounts
within SQL Server Database Engine. There is no need to manage a mail profile in an
external client application. Database Mail Configuration Wizard provides a convenient
interface for configuring Database Mail. You can also create and maintain Database Mail
configurations using Transact-SQL.

Logging. Database Mail logs e-mail activity to SQL Server, the Microsoft Windows
application event log, and to tables in the msdb database.

Auditing. Database Mail keeps copies of messages and attachments sent in the msdb
database. You can easily audit Database Mail usage and review the retained messages.
Support for HTML. Database Mail allows you to send e-mail formatted as HTML.
Database Mail provides a robust, high-performance replacement for the most commonly
requested features of SQL Mail. Database Mail is designed to operate with SMTP servers, and is
tested with Microsoft SMTP servers.

Notes Database Mail is not available in SQL Server Express.

7.1.5 Database Mail Configuration Wizard

The Database Mail Configuration Wizard provides a convenient way to manage Database Mail
configuration objects and enables Database Mail, if needed. To use this wizard, you must be a
member of the sysadmin fixed server role. To send Database Mail, you must be a member of the
DatabaseMailUserRole database role in the msdb database.

100 LOVELY PROFESSIONAL UNIVERSITY