RE: How trace logon failed

From: linda deng[MS] (lideng@online.microsoft.com)
Date: 12/24/02


From: lideng@online.microsoft.com (linda deng[MS])
Date: Tue, 24 Dec 2002 06:46:40 GMT


Hi,

SQL Server supports four kinds of Audit levels to record the user accesses
into the SQL Server error log files:

1. None - no auditing is performed.
2. Success - only successful login attempts are audited.
3. Failure - only failed login attempts are audited.
4. All - successful and failed login attempts are both audited.

As for tracing the IP address or the computer name of these failed logon
attempts, you can use SQL trace to monitor the information.

HTH.

Sincerely,

Linda Deng
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.



Relevant Pages

  • Re: Tracing sql server user logins
    ... Now for your question: base auditing ... > GroupName sysname NULL, ... SQL Server does not audit by ... >>Failure causes only failed login attempts to be audited. ...
    (microsoft.public.sqlserver.security)
  • Re: Tracing sql server user logins
    ... >You have to start auditing, SQL Server does not audit by ... >Failure causes only failed login attempts to be audited. ... >All causes successful and failed login attempts to be ...
    (microsoft.public.sqlserver.security)
  • RE: Security Audit Level
    ... accesses to Microsoft SQL Server are recorded in the SQL Server error log. ... None causes no auditing to be performed. ... All causes successful and failed login attempts to be audited. ... Anyway, Microsoft recommends auditing, at minimum, failed login attempts. ...
    (microsoft.public.sqlserver.server)
  • Re: How trace logon failed
    ... > SQL Server supports four kinds of Audit levels to record the user accesses ... All - successful and failed login attempts are both audited. ...
    (microsoft.public.sqlserver.security)
  • Re: Handling an exception
    ... Kind regards ... | to start SQL server & connect to the DB then if it s successful then have ... "goto retry" could be used for evil, however it can also be used for good... ...
    (microsoft.public.dotnet.distributed_apps)