Re: Find who changed a password on SQL 7

From: Andrew J. Kelly (ajkellynospam_at_attbi.com)
Date: 05/26/03


Date: Mon, 26 May 2003 11:37:31 -0400


If you weren't monitoring the box at the time it will be almost imposable to
tell. One tool that may help is available from www.lumigent.com. The Log
Explorer will allow you to look into the existing logs and if you want to
monitor stuff like this in the future you can take a look at Integra.

-- 
Andrew J. Kelly
SQL Server MVP
"Stefano Peduzzi" <stefano.peduzzi@visible.it> wrote in message
news:eFDy5a5IDHA.3272@tk2msftngp13.phx.gbl...
> Hi,
> I have this problem: someone changed the password of an administrative
> account on my SQL 7. I'd like to find out when the change occured and who
> was the user (possibly the ip of the machine where the operation was done:
I
> think he/she/it used the sa user) that made the change... Then I'll kill
> him!! ;))
> I hope this is possible and if someone tells me how it would be really
> appreciated.
>
> Ciao,
> Stefano
>
>


Relevant Pages

  • Re: One things for certain in the Tennessee/Alabama game ...
    ... >Tennessee is going to make sure a neutral party is monitoring the ... >sprinkler button. ... This made me laugh. ... Andrew <-- is it SEPTEMBER yet? ...
    (rec.sport.football.college)
  • Re: Interacting with Shell from Win32 Service
    ... andrew wrote: ... > Unfortunately FindFirstChange/FindNextChange doesn't return the name ... > of the object in the way if you are monitoring all of the objects ... Tim Robinson (MVP, Windows SDK) ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Post SP1 error events
    ... monitoring). ... Regards ... Andrew ... Prev by Date: ...
    (microsoft.public.windows.server.sbs)