Saturday, February 25, 2012

Audit Add Windows Login?

Hi,
I want to audit add/drop of windows login to my sql server.
Through SQL Profiler Add/Drop login I can only Audit Add/Drop login of SQL
Security Login and not the windows login.
Is there any way to audit Adding of windows login?
Thanks
PushkarWhich version of SQL Server are you using?
"Pushkar" <pushkartiwari@.gmail.com> wrote in message
news:%23hFBWR3NGHA.1288@.TK2MSFTNGP09.phx.gbl...
> Hi,
> I want to audit add/drop of windows login to my sql server.
> Through SQL Profiler Add/Drop login I can only Audit Add/Drop login of SQL
> Security Login and not the windows login.
> Is there any way to audit Adding of windows login?
> Thanks
> Pushkar
>|||I am using SQL Server SP4.
"Uri Dimant" <urid@.iscar.co.il> wrote in message
news:ORZFdc3NGHA.720@.TK2MSFTNGP14.phx.gbl...
> Which version of SQL Server are you using?
>
> "Pushkar" <pushkartiwari@.gmail.com> wrote in message
> news:%23hFBWR3NGHA.1288@.TK2MSFTNGP09.phx.gbl...
>|||Run SQL Server Profiler to capture this event.
"Pushkar" <pushkartiwari@.gmail.com> wrote in message
news:OBHamF4NGHA.2624@.TK2MSFTNGP12.phx.gbl...
>I am using SQL Server SP4.
> "Uri Dimant" <urid@.iscar.co.il> wrote in message
> news:ORZFdc3NGHA.720@.TK2MSFTNGP14.phx.gbl...
>|||SQL Server profiler does not capture add/drop login for windows login.
"Uri Dimant" <urid@.iscar.co.il> wrote in message
news:eFOPVo6NGHA.2992@.tk2msftngp13.phx.gbl...
> Run SQL Server Profiler to capture this event.
>
>
> "Pushkar" <pushkartiwari@.gmail.com> wrote in message
> news:OBHamF4NGHA.2624@.TK2MSFTNGP12.phx.gbl...
>|||Take a look at syslogins system. Perform SELECT statement to compare rows
with a history ( of syslogins) for example table
I was thinking that you wanted to track a LOGIN connections , sorry
"Pushkar" <pushkartiwari@.gmail.com> wrote in message
news:%23Qr2vD7NGHA.2036@.TK2MSFTNGP14.phx.gbl...
> SQL Server profiler does not capture add/drop login for windows login.
> "Uri Dimant" <urid@.iscar.co.il> wrote in message
> news:eFOPVo6NGHA.2992@.tk2msftngp13.phx.gbl...
>|||Yes, it does.
You need to trace the "Audit AddLogin" event.
The "EventSubClass" data column holds the type of event (Add or Drop).
The "TargetLoginName" data column holds the name of the login.
Of course you need to set up a custom trace.
ML
http://milambda.blogspot.com/|||Sorry!
Correction:
Event is: "Audit Login GDR Event" (EventSubClass data column holds either
Grant or Deny).
ML
p.s. I get stupid as my coffee gets cold.
http://milambda.blogspot.com/|||Thanks!!! It works.
Pushkar
"ML" <ML@.discussions.microsoft.com> wrote in message
news:47D3D9B6-DBBB-47E0-9737-59265B96F201@.microsoft.com...
> Sorry!
> Correction:
> Event is: "Audit Login GDR Event" (EventSubClass data column holds either
> Grant or Deny).
>
> ML
> p.s. I get stupid as my coffee gets cold.
> --
> http://milambda.blogspot.com/

No comments:

Post a Comment