Re: Tracing sql server user logins

From: Neil Bailey (neil.bailey@mkgeneral.nhs.uk)
Date: 07/31/02 

From: "Neil Bailey" <neil.bailey@mkgeneral.nhs.uk>
Date: Wed, 31 Jul 2002 06:32:43 -0700

Many thanks, this is a good start. Is there a way to then
get this information to be inserted into a table as they
occur, I would be grateful for any code help if possible.

>-----Original Message-----
>Neil,
>
>You have to start auditing, SQL Server does not audit by
default. Base login
>auditing can be turned on with procedure:
>Right-click a server, and then click Properties.
>Under Audit level, select the level at which user
accesses to Microsoft® SQL
>ServerT are recorded in the SQL Server error log:
>None causes no auditing to be performed.
>Success causes only successful login attempts to be
audited.
>Failure causes only failed login attempts to be audited.
>All causes successful and failed login attempts to be
audited.
>More detailed info can be gathered with the Profiler.
>
>--
>Dejan Sarka, SQL Server MVP
>FAQ from Neil & others at: http://www.sqlserverfaq.com
>Please reply only to the newsgroups.
>PASS - the definitive, global community
>for SQL Server professionals - http://www.sqlpass.org
>
>"Neil Bailey" <neil.bailey@mkgeneral.nhs.uk> wrote in
message
>news:407001c23869$a65bc9b0$35ef2ecf@TKMSFTNGXA11...
>> Does anybody know how to query SQL server (7 & 2000) to
>> find the last time a user logged in.
>
>
>.
>

Relevant Pages

  • Re: How trace logon failed
    ... You'd have to capture the host name (which may not ... >> SQL Server supports four kinds of Audit levels to record the user accesses ... All - successful and failed login attempts are both audited. ...
    (microsoft.public.sqlserver.security)
  • Re: Tracing sql server user logins
    ... Now for your question: base auditing ... > GroupName sysname NULL, ... SQL Server does not audit by ... >>Failure causes only failed login attempts to be audited. ...
    (microsoft.public.sqlserver.security)
  • RE: Security Audit Level
    ... accesses to Microsoft SQL Server are recorded in the SQL Server error log. ... None causes no auditing to be performed. ... All causes successful and failed login attempts to be audited. ... Anyway, Microsoft recommends auditing, at minimum, failed login attempts. ...
    (microsoft.public.sqlserver.server)
  • Re: How trace logon failed
    ... > SQL Server supports four kinds of Audit levels to record the user accesses ... All - successful and failed login attempts are both audited. ...
    (microsoft.public.sqlserver.security)
  • RE: How trace logon failed
    ... SQL Server supports four kinds of Audit levels to record the user accesses ... None - no auditing is performed. ... All - successful and failed login attempts are both audited. ...
    (microsoft.public.sqlserver.security)