Auditing failed logins

From: xdba (xdba_at_hotmail.com)
Date: 05/30/03


Date: 30 May 2003 08:51:41 -0700


Hi,

I need to audit failed logins at all times and successful logins at
night and weekends. It is to centrally monitor a number of servers so
profiler would not be much use.

The default SQL Server audting can only log failures or *all*
successes. This would produce too much information.

Also, the default SQL Server auditing just says 'Login failed for user
'sa' whereas I need to know which machine and application was used.

The errors would ideally appear in the Windows log to be picked up by
monitoring software.

These seem basic auditing requirements but I can't see how to do it.

Thanks in advance.



Relevant Pages

  • Re: Compromised Server? Anyone recognize the suspect Services?
    ... I finally discovered that there was a whole folder structure under ... Event viewer shows normal logins, but I did not have it set to record ... there are a bunch of logins for Website Accounts created by the ... order to find those files on the Web Server I had to make sure that System ...
    (microsoft.public.windows.server.networking)
  • Re: Enabling STARTTLS in Exchange 2003 IMAP service?
    ... For the first, if you simply want to enable encrypted logins, then once you ... I guess I don't understand the need to have that command listed. ... > This section describes a means for "upgrading" an ordinary cleartext IMAP ... In order to use it, however, the server must advertise support for ...
    (microsoft.public.exchange.admin)
  • Re: Enabling STARTTLS in Exchange 2003 IMAP service?
    ... For the first, if you simply want to enable encrypted logins, then once you ... I guess I don't understand the need to have that command listed. ... > This section describes a means for "upgrading" an ordinary cleartext IMAP ... In order to use it, however, the server must advertise support for ...
    (microsoft.public.exchange2000.protocols)
  • Re: Enabling STARTTLS in Exchange 2003 IMAP service?
    ... For the first, if you simply want to enable encrypted logins, then once you ... I guess I don't understand the need to have that command listed. ... > This section describes a means for "upgrading" an ordinary cleartext IMAP ... In order to use it, however, the server must advertise support for ...
    (microsoft.public.exchange2000.admin)
  • Re: Transferring logins form 6.5 to 2000, anyone?!
    ... > server is case-insenstive, and the 2000 server is case-sensitive, then you ... > end up with all your passwords in upper case when they're copied. ... > /* Get 6.5 login information into the worktable, excluding system logins. ... >> Microsoft Online Support Engineer ...
    (microsoft.public.sqlserver.security)