Hello,
I want to setup authentication so that if any requests come from a
certain ip address they are automattically accepted. Is there an easy
way to do this or is using some kind of custom extension using forms
the only way?
Thanks,
DavidAccepted or rejected? Rejected can easily be done by configuring IIS to
reject a particular IP address. If you want it to accept then I don't see
any way to do this other than with a custom extension.
Bruce L-C
"David" <davidbjunk@.gmail.com> wrote in message
news:67845027.0409231000.7feb8eb5@.posting.google.com...
> Hello,
> I want to setup authentication so that if any requests come from a
> certain ip address they are automattically accepted. Is there an easy
> way to do this or is using some kind of custom extension using forms
> the only way?
> Thanks,
> Davidsql
Showing posts with label certain. Show all posts
Showing posts with label certain. Show all posts
Sunday, March 25, 2012
Thursday, March 22, 2012
Authentication permissions
I'm fairly certain that I understand the difference between the AUTHENTICATE SERVER and AUTHENTICATE permission, but I'm not positive.
For these purposes, I'm leaving off the authorization portion as well as assuming a TSQL endpoint.
My understanding:
The authentication process is broken into two stages - connection and authentication. In order to successfully authenticate to an instance, the following must apply:
1. I must have CONNECT SQL permission
2. I must have CONNECT permission on the endpoint that I am using
3. The endpoint that I am using must be in a STARTED state
4. The login that I am using must be enabled
Once the connection is established, I need AUTHENTICATE SERVER permission in order to authenticate to the instance. (Or do I simply need AUTHENTICATE permission?)
AUTHENTICATE & AUTHENTICATE SERVER permissions are only used when using EXECUTE AS in cross database and server-access (respectively) scenarios.
When a new session is established in SQL Server, the server itself will perform the authentication and the no AUTHENTICATEAUTHENTICATE SERVER permission is checked.
When using EXECUTE AS USER, permissions are checked at the DB scope, therefore the DBO has absolute control over this type of impersonation, and the DBO is said to vouch for the token and becomes the authenticator. In case of a digitally signed module (marked with EXECUTE AS) the story is similar, but the certificate can act as an authenticator.
In order to avoid unintended escalations, by default these impersonated tokens cannot move outside the current database (i.e. cannot access resources outside it) unless the DB is marked as trustworthy or they come from a digitally signed module. Being able to get outside the DB is not sufficient, the authenticator must be trusted at the scope of the resource the impersonated context is trying to access; for example, if trying to access a table on another DB, the DBO of the target DB must have granted AUTHENTICATE to the authenticator of the impersonated context.
I strongly recommend reading the following topic from BOL: Extending Database Impersonation by Using EXECUTE AS (http://msdn2.microsoft.com/en-us/library/ms188304.aspx )
I hope this information helps,
-Raul Garcia
SDE/T
SQL Server Engine
sqlSunday, March 11, 2012
Auditing Select Statements
Hello,
I need to find out if there is a way to audit selects against a certain
table. I know you can use triggers to monitor inserts, updates and
deletes but is there a way to monitor when someone selects specific
data? Thanks!
Rachael
*** Sent via Devdex http://www.devdex.com ***
Don't just participate in USENET...get rewarded for it!Go to Lumigents web site... www.lumigent.com... I beleive they have an
auditing tool that does what you wish..
--
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"Rachael" <rachael_faber@.hotmail.com> wrote in message
news:eu0FLAVVEHA.584@.TK2MSFTNGP09.phx.gbl...
> Hello,
> I need to find out if there is a way to audit selects against a certain
> table. I know you can use triggers to monitor inserts, updates and
> deletes but is there a way to monitor when someone selects specific
> data? Thanks!
> Rachael
>
> *** Sent via Devdex http://www.devdex.com ***
> Don't just participate in USENET...get rewarded for it!
I need to find out if there is a way to audit selects against a certain
table. I know you can use triggers to monitor inserts, updates and
deletes but is there a way to monitor when someone selects specific
data? Thanks!
Rachael
*** Sent via Devdex http://www.devdex.com ***
Don't just participate in USENET...get rewarded for it!Go to Lumigents web site... www.lumigent.com... I beleive they have an
auditing tool that does what you wish..
--
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"Rachael" <rachael_faber@.hotmail.com> wrote in message
news:eu0FLAVVEHA.584@.TK2MSFTNGP09.phx.gbl...
> Hello,
> I need to find out if there is a way to audit selects against a certain
> table. I know you can use triggers to monitor inserts, updates and
> deletes but is there a way to monitor when someone selects specific
> data? Thanks!
> Rachael
>
> *** Sent via Devdex http://www.devdex.com ***
> Don't just participate in USENET...get rewarded for it!
Auditing IN SQL 2k
Hello
I need to record the activities/changes in certain tables in my application
including who effected the change,time, the field that was changed, the new
and old value of the field. How do i go about doing this? I need to do this
without actually making code changes in my application.
Would be quite helpful if someone could help me with clear steps as to how
this is to be done as I'm a newbie to this field.
Thanks in advance
Regds
Rachel
Take a look at
http://www.microsoft.com/technet/sec.../sql2kaud.mspx
You could also do a Google search on "SQL Server 2000 Auditing" which will
turn up alternatives. For example:
http://www.akadia.com/services/sqlsr..._auditing.html
Hal Berenson, President
PredictableIT, LLC
"rachel" <rachel@.discussions.microsoft.com> wrote in message
news:7F547B93-A7FF-4200-93DB-8980A1E8A53E@.microsoft.com...
> Hello
> I need to record the activities/changes in certain tables in my
> application
> including who effected the change,time, the field that was changed, the
> new
> and old value of the field. How do i go about doing this? I need to do
> this
> without actually making code changes in my application.
> Would be quite helpful if someone could help me with clear steps as to how
> this is to be done as I'm a newbie to this field.
> Thanks in advance
> Regds
> Rachel
>
>
I need to record the activities/changes in certain tables in my application
including who effected the change,time, the field that was changed, the new
and old value of the field. How do i go about doing this? I need to do this
without actually making code changes in my application.
Would be quite helpful if someone could help me with clear steps as to how
this is to be done as I'm a newbie to this field.
Thanks in advance
Regds
Rachel
Take a look at
http://www.microsoft.com/technet/sec.../sql2kaud.mspx
You could also do a Google search on "SQL Server 2000 Auditing" which will
turn up alternatives. For example:
http://www.akadia.com/services/sqlsr..._auditing.html
Hal Berenson, President
PredictableIT, LLC
"rachel" <rachel@.discussions.microsoft.com> wrote in message
news:7F547B93-A7FF-4200-93DB-8980A1E8A53E@.microsoft.com...
> Hello
> I need to record the activities/changes in certain tables in my
> application
> including who effected the change,time, the field that was changed, the
> new
> and old value of the field. How do i go about doing this? I need to do
> this
> without actually making code changes in my application.
> Would be quite helpful if someone could help me with clear steps as to how
> this is to be done as I'm a newbie to this field.
> Thanks in advance
> Regds
> Rachel
>
>
Auditing IN SQL 2k
Hello
I need to record the activities/changes in certain tables in my application
including who effected the change,time, the field that was changed, the new
and old value of the field. How do i go about doing this? I need to do this
without actually making code changes in my application.
Would be quite helpful if someone could help me with clear steps as to how
this is to be done as I'm a newbie to this field.
Thanks in advance
Regds
RachelTake a look at
http://www.microsoft.com/technet/security/prodtech/sqlserver/sql2kaud.mspx
You could also do a Google search on "SQL Server 2000 Auditing" which will
turn up alternatives. For example:
http://www.akadia.com/services/sqlsrv_table_auditing.html
Hal Berenson, President
PredictableIT, LLC
"rachel" <rachel@.discussions.microsoft.com> wrote in message
news:7F547B93-A7FF-4200-93DB-8980A1E8A53E@.microsoft.com...
> Hello
> I need to record the activities/changes in certain tables in my
> application
> including who effected the change,time, the field that was changed, the
> new
> and old value of the field. How do i go about doing this? I need to do
> this
> without actually making code changes in my application.
> Would be quite helpful if someone could help me with clear steps as to how
> this is to be done as I'm a newbie to this field.
> Thanks in advance
> Regds
> Rachel
>
>
I need to record the activities/changes in certain tables in my application
including who effected the change,time, the field that was changed, the new
and old value of the field. How do i go about doing this? I need to do this
without actually making code changes in my application.
Would be quite helpful if someone could help me with clear steps as to how
this is to be done as I'm a newbie to this field.
Thanks in advance
Regds
RachelTake a look at
http://www.microsoft.com/technet/security/prodtech/sqlserver/sql2kaud.mspx
You could also do a Google search on "SQL Server 2000 Auditing" which will
turn up alternatives. For example:
http://www.akadia.com/services/sqlsrv_table_auditing.html
Hal Berenson, President
PredictableIT, LLC
"rachel" <rachel@.discussions.microsoft.com> wrote in message
news:7F547B93-A7FF-4200-93DB-8980A1E8A53E@.microsoft.com...
> Hello
> I need to record the activities/changes in certain tables in my
> application
> including who effected the change,time, the field that was changed, the
> new
> and old value of the field. How do i go about doing this? I need to do
> this
> without actually making code changes in my application.
> Would be quite helpful if someone could help me with clear steps as to how
> this is to be done as I'm a newbie to this field.
> Thanks in advance
> Regds
> Rachel
>
>
Auditing IN SQL 2k
Hello
I need to record the activities/changes in certain tables in my application
including who effected the change,time, the field that was changed, the new
and old value of the field. How do i go about doing this? I need to do this
without actually making code changes in my application.
Would be quite helpful if someone could help me with clear steps as to how
this is to be done as I'm a newbie to this field.
Thanks in advance
Regds
RachelTake a look at
http://www.microsoft.com/technet/se...r/sql2kaud.mspx
You could also do a Google search on "SQL Server 2000 Auditing" which will
turn up alternatives. For example:
http://www.akadia.com/services/sqls...e_auditing.html
Hal Berenson, President
PredictableIT, LLC
"rachel" <rachel@.discussions.microsoft.com> wrote in message
news:7F547B93-A7FF-4200-93DB-8980A1E8A53E@.microsoft.com...
> Hello
> I need to record the activities/changes in certain tables in my
> application
> including who effected the change,time, the field that was changed, the
> new
> and old value of the field. How do i go about doing this? I need to do
> this
> without actually making code changes in my application.
> Would be quite helpful if someone could help me with clear steps as to how
> this is to be done as I'm a newbie to this field.
> Thanks in advance
> Regds
> Rachel
>
>
I need to record the activities/changes in certain tables in my application
including who effected the change,time, the field that was changed, the new
and old value of the field. How do i go about doing this? I need to do this
without actually making code changes in my application.
Would be quite helpful if someone could help me with clear steps as to how
this is to be done as I'm a newbie to this field.
Thanks in advance
Regds
RachelTake a look at
http://www.microsoft.com/technet/se...r/sql2kaud.mspx
You could also do a Google search on "SQL Server 2000 Auditing" which will
turn up alternatives. For example:
http://www.akadia.com/services/sqls...e_auditing.html
Hal Berenson, President
PredictableIT, LLC
"rachel" <rachel@.discussions.microsoft.com> wrote in message
news:7F547B93-A7FF-4200-93DB-8980A1E8A53E@.microsoft.com...
> Hello
> I need to record the activities/changes in certain tables in my
> application
> including who effected the change,time, the field that was changed, the
> new
> and old value of the field. How do i go about doing this? I need to do
> this
> without actually making code changes in my application.
> Would be quite helpful if someone could help me with clear steps as to how
> this is to be done as I'm a newbie to this field.
> Thanks in advance
> Regds
> Rachel
>
>
Wednesday, March 7, 2012
Audit Logs in SQL SERVER ?
Hi,
Does SQL provide an Audit log on who is accessing which database and what's
being done on each table that's kept in certain system tables or is there an
y
stored procedures to keep track of this ?
tks & rdgs
maxzsimHi maxzsim
I think SQL Profiler can help you in achieving this task.
best Regards,
Chandra
http://chanduas.blogspot.com/
---
"maxzsim" wrote:
> Hi,
> Does SQL provide an Audit log on who is accessing which database and what
's
> being done on each table that's kept in certain system tables or is there
any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim|||Hi Chandra,
is there any alternative besides the SQL Profiler ?
rdgs
"Chandra" wrote:
[vbcol=seagreen]
> Hi maxzsim
> I think SQL Profiler can help you in achieving this task.
>
> --
> best Regards,
> Chandra
> http://chanduas.blogspot.com/
> ---
>
> "maxzsim" wrote:
>|||Hi maxzsim
You can use NT EventLog for this, but it will not give you all the
information that you require. I prefer using SQL Profiler for this purpose.
best Regards,
Chandra
http://chanduas.blogspot.com/
---
"maxzsim" wrote:
[vbcol=seagreen]
> Hi Chandra,
> is there any alternative besides the SQL Profiler ?
> rdgs
> "Chandra" wrote:
>|||Hi,
I recommend you to enable server side tracing if the server is Production.
This will use the resouce very less compared to SQL Profiler.
Have a look into the below great article from Vyas on server side tracing
with examples to configure:-
http://vyaskn.tripod.com/server_sid..._sql_server.htm
Thanks
Hari
SQL Server MVP
"maxzsim" <maxzsim@.discussions.microsoft.com> wrote in message
news:6485BF63-1708-4D96-B245-E056D12EEEAD@.microsoft.com...
> Hi,
> Does SQL provide an Audit log on who is accessing which database and
what's
> being done on each table that's kept in certain system tables or is there
any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim|||An alternative might be to look at many of the transaction log analyzers out
there:
http://www.apexsql.com/sql_tools_log.htm
http://www.lumigent.com/products/entegra.html
http://www.logpi.com/
to name but three.
"maxzsim" wrote:
> Hi,
> Does SQL provide an Audit log on who is accessing which database and what
's
> being done on each table that's kept in certain system tables or is there
any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim|||It might be worth mentioning that SELECT cannot be obtained from the transac
tion log. So the tools
that can audit reads do this using a background profiler trace...
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"Scrat" <Scrat@.discussions.microsoft.com> wrote in message
news:19322556-D9C2-467F-ABBA-BC1C8845E222@.microsoft.com...[vbcol=seagreen]
> An alternative might be to look at many of the transaction log analyzers o
ut
> there:
> http://www.apexsql.com/sql_tools_log.htm
> http://www.lumigent.com/products/entegra.html
> http://www.logpi.com/
> to name but three.
> "maxzsim" wrote:
>
Does SQL provide an Audit log on who is accessing which database and what's
being done on each table that's kept in certain system tables or is there an
y
stored procedures to keep track of this ?
tks & rdgs
maxzsimHi maxzsim
I think SQL Profiler can help you in achieving this task.
best Regards,
Chandra
http://chanduas.blogspot.com/
---
"maxzsim" wrote:
> Hi,
> Does SQL provide an Audit log on who is accessing which database and what
's
> being done on each table that's kept in certain system tables or is there
any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim|||Hi Chandra,
is there any alternative besides the SQL Profiler ?
rdgs
"Chandra" wrote:
[vbcol=seagreen]
> Hi maxzsim
> I think SQL Profiler can help you in achieving this task.
>
> --
> best Regards,
> Chandra
> http://chanduas.blogspot.com/
> ---
>
> "maxzsim" wrote:
>|||Hi maxzsim
You can use NT EventLog for this, but it will not give you all the
information that you require. I prefer using SQL Profiler for this purpose.
best Regards,
Chandra
http://chanduas.blogspot.com/
---
"maxzsim" wrote:
[vbcol=seagreen]
> Hi Chandra,
> is there any alternative besides the SQL Profiler ?
> rdgs
> "Chandra" wrote:
>|||Hi,
I recommend you to enable server side tracing if the server is Production.
This will use the resouce very less compared to SQL Profiler.
Have a look into the below great article from Vyas on server side tracing
with examples to configure:-
http://vyaskn.tripod.com/server_sid..._sql_server.htm
Thanks
Hari
SQL Server MVP
"maxzsim" <maxzsim@.discussions.microsoft.com> wrote in message
news:6485BF63-1708-4D96-B245-E056D12EEEAD@.microsoft.com...
> Hi,
> Does SQL provide an Audit log on who is accessing which database and
what's
> being done on each table that's kept in certain system tables or is there
any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim|||An alternative might be to look at many of the transaction log analyzers out
there:
http://www.apexsql.com/sql_tools_log.htm
http://www.lumigent.com/products/entegra.html
http://www.logpi.com/
to name but three.
"maxzsim" wrote:
> Hi,
> Does SQL provide an Audit log on who is accessing which database and what
's
> being done on each table that's kept in certain system tables or is there
any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim|||It might be worth mentioning that SELECT cannot be obtained from the transac
tion log. So the tools
that can audit reads do this using a background profiler trace...
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"Scrat" <Scrat@.discussions.microsoft.com> wrote in message
news:19322556-D9C2-467F-ABBA-BC1C8845E222@.microsoft.com...[vbcol=seagreen]
> An alternative might be to look at many of the transaction log analyzers o
ut
> there:
> http://www.apexsql.com/sql_tools_log.htm
> http://www.lumigent.com/products/entegra.html
> http://www.logpi.com/
> to name but three.
> "maxzsim" wrote:
>
Audit Logs in SQL SERVER ?
Hi,
Does SQL provide an Audit log on who is accessing which database and what's
being done on each table that's kept in certain system tables or is there any
stored procedures to keep track of this ?
tks & rdgs
maxzsim
Hi maxzsim
I think SQL Profiler can help you in achieving this task.
best Regards,
Chandra
http://chanduas.blogspot.com/
"maxzsim" wrote:
> Hi,
> Does SQL provide an Audit log on who is accessing which database and what's
> being done on each table that's kept in certain system tables or is there any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim
|||Hi Chandra,
is there any alternative besides the SQL Profiler ?
rdgs
"Chandra" wrote:
[vbcol=seagreen]
> Hi maxzsim
> I think SQL Profiler can help you in achieving this task.
>
> --
> best Regards,
> Chandra
> http://chanduas.blogspot.com/
>
> "maxzsim" wrote:
|||Hi maxzsim
You can use NT EventLog for this, but it will not give you all the
information that you require. I prefer using SQL Profiler for this purpose.
best Regards,
Chandra
http://chanduas.blogspot.com/
"maxzsim" wrote:
[vbcol=seagreen]
> Hi Chandra,
> is there any alternative besides the SQL Profiler ?
> rdgs
> "Chandra" wrote:
|||Hi,
I recommend you to enable server side tracing if the server is Production.
This will use the resouce very less compared to SQL Profiler.
Have a look into the below great article from Vyas on server side tracing
with examples to configure:-
http://vyaskn.tripod.com/server_side...sql_server.htm
Thanks
Hari
SQL Server MVP
"maxzsim" <maxzsim@.discussions.microsoft.com> wrote in message
news:6485BF63-1708-4D96-B245-E056D12EEEAD@.microsoft.com...
> Hi,
> Does SQL provide an Audit log on who is accessing which database and
what's
> being done on each table that's kept in certain system tables or is there
any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim
|||An alternative might be to look at many of the transaction log analyzers out
there:
http://www.apexsql.com/sql_tools_log.htm
http://www.lumigent.com/products/entegra.html
http://www.logpi.com/
to name but three.
"maxzsim" wrote:
> Hi,
> Does SQL provide an Audit log on who is accessing which database and what's
> being done on each table that's kept in certain system tables or is there any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim
|||It might be worth mentioning that SELECT cannot be obtained from the transaction log. So the tools
that can audit reads do this using a background profiler trace...
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"Scrat" <Scrat@.discussions.microsoft.com> wrote in message
news:19322556-D9C2-467F-ABBA-BC1C8845E222@.microsoft.com...[vbcol=seagreen]
> An alternative might be to look at many of the transaction log analyzers out
> there:
> http://www.apexsql.com/sql_tools_log.htm
> http://www.lumigent.com/products/entegra.html
> http://www.logpi.com/
> to name but three.
> "maxzsim" wrote:
Does SQL provide an Audit log on who is accessing which database and what's
being done on each table that's kept in certain system tables or is there any
stored procedures to keep track of this ?
tks & rdgs
maxzsim
Hi maxzsim
I think SQL Profiler can help you in achieving this task.
best Regards,
Chandra
http://chanduas.blogspot.com/
"maxzsim" wrote:
> Hi,
> Does SQL provide an Audit log on who is accessing which database and what's
> being done on each table that's kept in certain system tables or is there any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim
|||Hi Chandra,
is there any alternative besides the SQL Profiler ?
rdgs
"Chandra" wrote:
[vbcol=seagreen]
> Hi maxzsim
> I think SQL Profiler can help you in achieving this task.
>
> --
> best Regards,
> Chandra
> http://chanduas.blogspot.com/
>
> "maxzsim" wrote:
|||Hi maxzsim
You can use NT EventLog for this, but it will not give you all the
information that you require. I prefer using SQL Profiler for this purpose.
best Regards,
Chandra
http://chanduas.blogspot.com/
"maxzsim" wrote:
[vbcol=seagreen]
> Hi Chandra,
> is there any alternative besides the SQL Profiler ?
> rdgs
> "Chandra" wrote:
|||Hi,
I recommend you to enable server side tracing if the server is Production.
This will use the resouce very less compared to SQL Profiler.
Have a look into the below great article from Vyas on server side tracing
with examples to configure:-
http://vyaskn.tripod.com/server_side...sql_server.htm
Thanks
Hari
SQL Server MVP
"maxzsim" <maxzsim@.discussions.microsoft.com> wrote in message
news:6485BF63-1708-4D96-B245-E056D12EEEAD@.microsoft.com...
> Hi,
> Does SQL provide an Audit log on who is accessing which database and
what's
> being done on each table that's kept in certain system tables or is there
any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim
|||An alternative might be to look at many of the transaction log analyzers out
there:
http://www.apexsql.com/sql_tools_log.htm
http://www.lumigent.com/products/entegra.html
http://www.logpi.com/
to name but three.
"maxzsim" wrote:
> Hi,
> Does SQL provide an Audit log on who is accessing which database and what's
> being done on each table that's kept in certain system tables or is there any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim
|||It might be worth mentioning that SELECT cannot be obtained from the transaction log. So the tools
that can audit reads do this using a background profiler trace...
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"Scrat" <Scrat@.discussions.microsoft.com> wrote in message
news:19322556-D9C2-467F-ABBA-BC1C8845E222@.microsoft.com...[vbcol=seagreen]
> An alternative might be to look at many of the transaction log analyzers out
> there:
> http://www.apexsql.com/sql_tools_log.htm
> http://www.lumigent.com/products/entegra.html
> http://www.logpi.com/
> to name but three.
> "maxzsim" wrote:
Audit Logs in SQL SERVER ?
Hi,
Does SQL provide an Audit log on who is accessing which database and what's
being done on each table that's kept in certain system tables or is there any
stored procedures to keep track of this ?
tks & rdgs
maxzsimHi maxzsim
I think SQL Profiler can help you in achieving this task.
best Regards,
Chandra
http://chanduas.blogspot.com/
---
"maxzsim" wrote:
> Hi,
> Does SQL provide an Audit log on who is accessing which database and what's
> being done on each table that's kept in certain system tables or is there any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim|||Hi Chandra,
is there any alternative besides the SQL Profiler ?
rdgs
"Chandra" wrote:
> Hi maxzsim
> I think SQL Profiler can help you in achieving this task.
>
> --
> best Regards,
> Chandra
> http://chanduas.blogspot.com/
> ---
>
> "maxzsim" wrote:
> > Hi,
> >
> > Does SQL provide an Audit log on who is accessing which database and what's
> > being done on each table that's kept in certain system tables or is there any
> > stored procedures to keep track of this ?
> >
> > tks & rdgs
> > maxzsim|||Hi maxzsim
You can use NT EventLog for this, but it will not give you all the
information that you require. I prefer using SQL Profiler for this purpose.
best Regards,
Chandra
http://chanduas.blogspot.com/
---
"maxzsim" wrote:
> Hi Chandra,
> is there any alternative besides the SQL Profiler ?
> rdgs
> "Chandra" wrote:
> > Hi maxzsim
> > I think SQL Profiler can help you in achieving this task.
> >
> >
> > --
> > best Regards,
> > Chandra
> > http://chanduas.blogspot.com/
> > ---
> >
> >
> >
> > "maxzsim" wrote:
> >
> > > Hi,
> > >
> > > Does SQL provide an Audit log on who is accessing which database and what's
> > > being done on each table that's kept in certain system tables or is there any
> > > stored procedures to keep track of this ?
> > >
> > > tks & rdgs
> > > maxzsim|||Hi,
I recommend you to enable server side tracing if the server is Production.
This will use the resouce very less compared to SQL Profiler.
Have a look into the below great article from Vyas on server side tracing
with examples to configure:-
http://vyaskn.tripod.com/server_side_tracing_in_sql_server.htm
Thanks
Hari
SQL Server MVP
"maxzsim" <maxzsim@.discussions.microsoft.com> wrote in message
news:6485BF63-1708-4D96-B245-E056D12EEEAD@.microsoft.com...
> Hi,
> Does SQL provide an Audit log on who is accessing which database and
what's
> being done on each table that's kept in certain system tables or is there
any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim|||An alternative might be to look at many of the transaction log analyzers out
there:
http://www.apexsql.com/sql_tools_log.htm
http://www.lumigent.com/products/entegra.html
http://www.logpi.com/
to name but three.
"maxzsim" wrote:
> Hi,
> Does SQL provide an Audit log on who is accessing which database and what's
> being done on each table that's kept in certain system tables or is there any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim|||It might be worth mentioning that SELECT cannot be obtained from the transaction log. So the tools
that can audit reads do this using a background profiler trace...
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"Scrat" <Scrat@.discussions.microsoft.com> wrote in message
news:19322556-D9C2-467F-ABBA-BC1C8845E222@.microsoft.com...
> An alternative might be to look at many of the transaction log analyzers out
> there:
> http://www.apexsql.com/sql_tools_log.htm
> http://www.lumigent.com/products/entegra.html
> http://www.logpi.com/
> to name but three.
> "maxzsim" wrote:
>> Hi,
>> Does SQL provide an Audit log on who is accessing which database and what's
>> being done on each table that's kept in certain system tables or is there any
>> stored procedures to keep track of this ?
>> tks & rdgs
>> maxzsim
Does SQL provide an Audit log on who is accessing which database and what's
being done on each table that's kept in certain system tables or is there any
stored procedures to keep track of this ?
tks & rdgs
maxzsimHi maxzsim
I think SQL Profiler can help you in achieving this task.
best Regards,
Chandra
http://chanduas.blogspot.com/
---
"maxzsim" wrote:
> Hi,
> Does SQL provide an Audit log on who is accessing which database and what's
> being done on each table that's kept in certain system tables or is there any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim|||Hi Chandra,
is there any alternative besides the SQL Profiler ?
rdgs
"Chandra" wrote:
> Hi maxzsim
> I think SQL Profiler can help you in achieving this task.
>
> --
> best Regards,
> Chandra
> http://chanduas.blogspot.com/
> ---
>
> "maxzsim" wrote:
> > Hi,
> >
> > Does SQL provide an Audit log on who is accessing which database and what's
> > being done on each table that's kept in certain system tables or is there any
> > stored procedures to keep track of this ?
> >
> > tks & rdgs
> > maxzsim|||Hi maxzsim
You can use NT EventLog for this, but it will not give you all the
information that you require. I prefer using SQL Profiler for this purpose.
best Regards,
Chandra
http://chanduas.blogspot.com/
---
"maxzsim" wrote:
> Hi Chandra,
> is there any alternative besides the SQL Profiler ?
> rdgs
> "Chandra" wrote:
> > Hi maxzsim
> > I think SQL Profiler can help you in achieving this task.
> >
> >
> > --
> > best Regards,
> > Chandra
> > http://chanduas.blogspot.com/
> > ---
> >
> >
> >
> > "maxzsim" wrote:
> >
> > > Hi,
> > >
> > > Does SQL provide an Audit log on who is accessing which database and what's
> > > being done on each table that's kept in certain system tables or is there any
> > > stored procedures to keep track of this ?
> > >
> > > tks & rdgs
> > > maxzsim|||Hi,
I recommend you to enable server side tracing if the server is Production.
This will use the resouce very less compared to SQL Profiler.
Have a look into the below great article from Vyas on server side tracing
with examples to configure:-
http://vyaskn.tripod.com/server_side_tracing_in_sql_server.htm
Thanks
Hari
SQL Server MVP
"maxzsim" <maxzsim@.discussions.microsoft.com> wrote in message
news:6485BF63-1708-4D96-B245-E056D12EEEAD@.microsoft.com...
> Hi,
> Does SQL provide an Audit log on who is accessing which database and
what's
> being done on each table that's kept in certain system tables or is there
any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim|||An alternative might be to look at many of the transaction log analyzers out
there:
http://www.apexsql.com/sql_tools_log.htm
http://www.lumigent.com/products/entegra.html
http://www.logpi.com/
to name but three.
"maxzsim" wrote:
> Hi,
> Does SQL provide an Audit log on who is accessing which database and what's
> being done on each table that's kept in certain system tables or is there any
> stored procedures to keep track of this ?
> tks & rdgs
> maxzsim|||It might be worth mentioning that SELECT cannot be obtained from the transaction log. So the tools
that can audit reads do this using a background profiler trace...
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"Scrat" <Scrat@.discussions.microsoft.com> wrote in message
news:19322556-D9C2-467F-ABBA-BC1C8845E222@.microsoft.com...
> An alternative might be to look at many of the transaction log analyzers out
> there:
> http://www.apexsql.com/sql_tools_log.htm
> http://www.lumigent.com/products/entegra.html
> http://www.logpi.com/
> to name but three.
> "maxzsim" wrote:
>> Hi,
>> Does SQL provide an Audit log on who is accessing which database and what's
>> being done on each table that's kept in certain system tables or is there any
>> stored procedures to keep track of this ?
>> tks & rdgs
>> maxzsim
Saturday, February 25, 2012
Audit All SQL Queries against all or specific databases
Hello,
I have a problem. I suspect a certain user in my company is using the SA account to log into Databases and run queries(query analyzer) to gather information this user is not suppose to view. The problem I have is this is an IT person so they know the SA password. How can I log specific or all queries run against all databases/tables/fields to find out exactly what this person is doing/seeing? Or if there is an alternative to find out this information?
Please advise?
Hi,
well that depends...on your way for data retrieval. If your only way for data retrieval are stored procedures, you could easily plugin another logging procedure in that code. If they can work with Select statement you will have to let the profiler run on some machine, capturing the SQL and Statement events with specifying additional attributes like the user_name and the host_name from where the user is connecting. That might get you a good information about the called statements. With putting a filter on the profiler you can narrow the event down to a database / HostName / Application etc.
HTH, Jens K. Suessmeyer.
http://www.sqlserver20095.de
|||Hi,
Well they are only running these in Select statements. These are not stored procedures. So I am assuming the SQL profiler would work with capturing the data on the database / hostname /application, etc. If you have a good example, that would be great.
Please advise?
-K
|||Simply run profiler and select the RPC / STMT / SQL Events which the appropiate data you want to capture. Thats all.HTH, Jens K. Suessmeyer.
http://www.sqlserver2005.de
Friday, February 24, 2012
Attribute Drill Through not working on certain servers
When I create a report on my local server using Report Builder, and place an attribute on the report that I have set EnableDrillThrough = true, the report behaves as expected when run. That attribute, when hovered over, displays a hand cursor and navigates to the raw data display (not another report) of the related row(role).
This is not working on our network server. When I run the Report Builder from that server, using the exact same model, there is no drill through behavior at all. I don't see the hand cursor, and nothing happens when the column cell is clicked on.
Could this be a security issue? Any help would be appreciated.
I figured it out. Our other server has the Standard edition, not Enterprise or Developer.
Subscribe to:
Posts (Atom)