Misc changes

Author: David Curwin

articles/backup/backup-configure-vault.md

@@ -58,6 +58,8 @@ If your machine has limited internet access, ensure that firewall settings on th
 * 20.190.128.0/18
 * 40.126.0.0/18
 
+Access to all of the URLs and IP addresses listed above uses the HTTPS protocol on port 443.
+
 ## Create a Recovery Services vault
 
 A Recovery Services vault stores all the backups and recovery points you create over time, and contains the backup policy applied to backed up machines. Create a vault as follows:

articles/backup/backup-sql-server-database-azure-vms.md

@@ -226,9 +226,7 @@ To create a backup policy:
 
     ![Edit the log backup policy](./media/backup-azure-sql-database/log-backup-policy-editor.png)
 
-13. On the **Backup policy** menu, choose whether to enable **SQL Backup Compression**.
-    * Compression is disabled by default.
-    * On the back end, Azure Backup uses SQL native backup compression.
+13. On the **Backup policy** menu, choose whether to enable **SQL Backup Compression** or not. This option is disabled by default. If enabled, SQL Server will send a compressed backup stream to the VDI.  Please note that Azure Backup overrides instance level defaults with COMPRESSION / NO_COMPRESSION clause depending on the value of this control.
 
 14. After you complete the edits to the backup policy, select **OK**.
 

articles/backup/restore-sql-database-azure-vm.md

@@ -104,7 +104,15 @@ To restore the backup data as .bak files instead of a database, choose **Restore
 
 1. In the **Restore Configuration** menu, under **Where to Restore**, select **Restore as files**.
 2. Select the SQL Server name to which you want to restore the backup files.
-3. In the **Destination path on the server** input the folder path on the server selected in step 2. This is the location where the service will dump all the necessary backup files. Typically, a network share path, or path of a mounted Azure file share when specified as the destination path, enables easier access to these files by other machines in the same network or with the same Azure file share mounted on them.
+3. In the **Destination path on the server** input the folder path on the server selected in step 2. This is the location where the service will dump all the necessary backup files. Typically, a network share path, or path of a mounted Azure file share when specified as the destination path, enables easier access to these files by other machines in the same network or with the same Azure file share mounted on them.<BR>
+
+>To restore the database backup files on an Azure File Share mounted on the target registered VM, make sure that NT AUTHORITY\SYSTEM has access to the file share. You can perform the steps given below to grant the read/write permissions to the AFS mounted on the VM:
+>- Run `PsExec -s cmd` to enter into NT AUTHORITY\SYSTEM shell
+>   - Execute `cmdkey /add:<storageacct>.file.core.windows.net /user:AZURE\<storageacct> /pass:<storagekey>`
+>   - Verify access with `dir \\<storageacct>.file.core.windows.net\<filesharename>`
+>- Kick off a restore as files from the Backup Vault to `\\<storageacct>.file.core.windows.net\<filesharename>` as the path<BR>
+You can download Psexec via <https://docs.microsoft.com/sysinternals/downloads/psexec>
+
 4. Select **OK**.
 
 ![Select Restore As Files](./media/backup-azure-sql-database/restore-as-files.png)