Re: User and Login auditing

From: Sue Hoegemeier (Sue_H@nomail.please)
Date: 06/26/02


From: Sue Hoegemeier <Sue_H@nomail.please>
Date: Wed, 26 Jun 2002 11:02:21 -0600


Gabe,
You could use server side traces to trace the same things
instead of running Profiler. But again, how you implemented
for your needs depends on what version of SQL Server you are
running. You could put triggers on your trace table.
If on SQL 7, you can use extended stored procedures to trace
directly to a table. take a look at:
INF: How to Trace in SQL Server by Using Extended Stored
Procedures (Q258990)
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q258990
For SQL 2000 you might be more limited with client side
traces as you need to do this trace to a file. But you could
schedule something to load the files into a table:
INF: How to Programmatically Load Trace Files into Tables
(Q270599)
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q270599

-Sue

On Wed, 26 Jun 2002 13:49:11 -0700, "Gabe"
<Lajma@fibertel.com.ar> wrote:

>Thx Sue, but I need to constantly be notified when someone
>adds/modidesd/delete a user or login. Thats why I was thinking of triggers
>insted of Profiler, since I dont want to run Profiler on a minute to minute
>basis....
>
>I would like to be able to report what users and logins I had yesterday and
>compare them to todays
>users and logins. I suppose I have to track these changes with user defines
>tables right ?
>
>It would be easier with Triggers on sysuers and syslogin,s but I have never
>seen anyone do this and besides, MS does not reccomend it...
>
>Any suggestions ?
>
>"Sue Hoegemeier" <Sue_H@nomail.please> wrote in message
>news:skqjhukqio6htda4r15h8purgdprptkbas@4ax.com...
>> You can use Profiler to do this. If you are on SQL Server
>> 2000, look at Profiler and the Securiity Audit Event
>> classes. On SQL 7, you could still monitor for executions of
>> sp_grantdbaccess, sp_denydbaccess, sp_grantlogin,
>> sp_addlogin, and sp_denylogin.
>>
>> -Sue
>>
>> On Wed, 26 Jun 2002 13:17:59 -0700, "Gabriel"
>> <Lajma@fibertel.com.ar> wrote:
>>
>> >Does anyone know how I can audit user and login adding, deleting and
>> >modification ?
>> >
>> >I need to know when and who is adding users and logins to my server and
>> >databases..
>> >
>> >I was thinking of triggers on sysuers and syslogins tables, but MS does
>not
>> >reccomend this...
>> >
>> >Any hints ??
>> >
>> >Thx
>> >
>> >Gabe
>> >
>>
>



Relevant Pages

  • Re: Running profiler on busy 8-cpu Sql Server
    ... I always start with a light trace and add more detail as I go along to ... SQL Server MVP ... > I think it's also worth saying that you should introduce Profiler ... > SQL Server MVP ...
    (microsoft.public.sqlserver.server)
  • Re: URGENT deadlock question
    ... > Profiler to view a trace, SQL Server dumps rowsets across the network to ... > SQL Server doesn't feel like it can keep up with all the activity. ... > server-side trace to a trace file guarantees you'll see everything. ...
    (microsoft.public.sqlserver.server)
  • Re: Running profiler on busy 8-cpu Sql Server
    ... * I regularly run Profiler on VERy busy servers. ... where customers have told me 'theres no way to run Profiler, our server is ... SQL Server MVP ...
    (microsoft.public.sqlserver.server)
  • Re: URGENT deadlock question
    ... >> network to the Profiler client, but there is no guarantee you'll see ... >> everything if SQL Server doesn't feel like it can keep up with all ... Just make sure the trace file is created on a local ...
    (microsoft.public.sqlserver.server)
  • Re: Running profiler on busy 8-cpu Sql Server
    ... I also regularly use it on VERY busy servers nearly always without ... I think it's also worth saying that you should introduce Profiler gradually ... SQL Server MVP ... > SQL Server MVP ...
    (microsoft.public.sqlserver.server)