RE: Can login permissions change on their own?

From: Alvin Zhao[MSFT] (alvinzh@online.microsoft.com)
Date: 12/19/02


From: alvinzh@online.microsoft.com (Alvin Zhao[MSFT])
Date: Thu, 19 Dec 2002 06:25:31 GMT


Hi Joe,

As a follow-up of my last response, you can use SQL Server Profiler to
audit how or if the database permissions are changed. To do so, please run
SQL Server Profiler and start a new trace. In the Trace Properties under
Events tab, please choose the following events to audit: Audit Add Login to
Server Role Event, Audit Add Member to DB Role Event, Audit Login Change
Property Event, Audit Object Derived Permission Event, Audit Object GDR
Event and Audit Object Permission Event. You can check if the access
permission to the database was changed through the trace.

Sincerely,

Alvin Zhao
Microsoft Support

This posting is provided "AS IS" with no warranties, and confers no rights.



Relevant Pages

  • Re: What rights do users have?
    ... Allows a process to execute an executable file whose permission ... effective uid of 0 ALL privileges are required. ... Allows a process to generate audit records. ... Assuming uid 0 requires all privileges to be asserted. ...
    (comp.unix.solaris)
  • Re: File Open/Close Auditing
    ... then I assume he got permission and I don't care how. ... you can create an audit ACE that triggers ... > when user foo opens the file for read, ... >> folders for auditing. ...
    (microsoft.public.platformsdk.security)
  • Re: 2.6.12-rc4-mm2 - sleeping function called from invalid context at mm/slab.c:2502
    ... caller holding locks on relevant objects) for permission ... >> checking and must never sleep. ... > off the audit context's aux list which refers to them. ... send the line "unsubscribe linux-kernel" in ...
    (Linux-Kernel)
  • Re: How to audit changes to permissions on registry keys?
    ... Use RegEdt32 to set the Auditing Settings on the key, ... If all you're interested in is permission ... > changes to permissions in the registry? ...
    (microsoft.public.win2000.security)