Re: How trace logon failed

From: Sue Hoegemeier (Sue_H@nomail.please)
Date: 01/02/03


From: Sue Hoegemeier <Sue_H@nomail.please>
Date: Thu, 02 Jan 2003 06:39:24 -0700


Profiler doesn't have the IP address as one of the data
columns. You'd have to capture the host name (which may not
be available) or you can try to get the mac address by
querying sysprocesses.

-Sue

On Thu, 2 Jan 2003 08:47:02 +0100, "MMarc"
<magnanimarc@libero.it> wrote:

>Thanks, but I don't find the IP address.
>
>"linda deng[MS]" <lideng@online.microsoft.com> ha scritto nel messaggio
>news:s4IrfgxqCHA.2276@cpmsftngxa09...
>> Hi,
>>
>> SQL Server supports four kinds of Audit levels to record the user accesses
>> into the SQL Server error log files:
>>
>> 1. None - no auditing is performed.
>> 2. Success - only successful login attempts are audited.
>> 3. Failure - only failed login attempts are audited.
>> 4. All - successful and failed login attempts are both audited.
>>
>> As for tracing the IP address or the computer name of these failed logon
>> attempts, you can use SQL trace to monitor the information.
>>
>> HTH.
>>
>> Sincerely,
>>
>> Linda Deng
>> Microsoft Corporation
>>
>> This posting is provided "AS IS" with no warranties, and confers no
>rights.
>>
>



Relevant Pages

  • Re: Tracing sql server user logins
    ... >You have to start auditing, SQL Server does not audit by ... >Failure causes only failed login attempts to be audited. ... >All causes successful and failed login attempts to be ...
    (microsoft.public.sqlserver.security)
  • Re: How trace logon failed
    ... > SQL Server supports four kinds of Audit levels to record the user accesses ... All - successful and failed login attempts are both audited. ...
    (microsoft.public.sqlserver.security)
  • RE: How trace logon failed
    ... SQL Server supports four kinds of Audit levels to record the user accesses ... None - no auditing is performed. ... All - successful and failed login attempts are both audited. ...
    (microsoft.public.sqlserver.security)
  • Re: Failure Audit Event ID: 18456 SQL Server Error
    ... you can always turn off failed login audit. ... "Anand Ganesh" wrote: ... The server has a public domain name. ... I am getting the following error in MS SQL SERVER 2005 Enterprise ...
    (microsoft.public.sqlserver.connect)
  • Re: Failure Audit Event ID: 18456 SQL Server Error
    ... you can always turn off failed login audit. ... "Anand Ganesh" wrote: ... The server has a public domain name. ... I am getting the following error in MS SQL SERVER 2005 Enterprise ...
    (microsoft.public.sqlserver.connect)