Re: Audit Login Failed Event

From: Dejan Sarka (dejan_please_reply_to_newsgroups.sarka_at_avtenta.si)
Date: 02/19/04 

Date: Thu, 19 Feb 2004 09:34:02 +0100

Audit Login option is limited with info on the structure of the Windows
Event Log. You can get more info, including comuter name, with Profiler.
Check the Profiler in Books OnLine if this is what you need. 

-- 
Dejan Sarka, SQL Server MVP
Associate Mentor
Solid Quality Learning
More than just Training
www.SolidQualityLearning.com
"Jwtimoney" <anonymous@discussions.microsoft.com> wrote in message
news:418A7655-A12B-4246-8BFD-491F6F087615@microsoft.com...
> I know my SQL server is detecting a login failure, but how do I know who
login incorrectly? Is there a way to record the IP Address or PC name.  I
need to find out if someone just typed in a bad password or if someone Is
trying to hack my server.
> thank you
> John

Relevant Pages

  • Re: User and Login auditing
    ... You can use Profiler to do this. ... If you are on SQL Server ... look at Profiler and the Securiity Audit Event ... >Does anyone know how I can audit user and login adding, ...
    (microsoft.public.sqlserver.security)
  • Re: SQL Profiler wont allow a developer to login
    ... I can login to Profiler he get an Invalid ... whether they are sysadmin. ... Tibor Karaszi, SQL Server MVP ...
    (microsoft.public.sqlserver.tools)
  • Re: The error log that ate the server!!!!!
    ... You can do this in profiler, but I suspect it would be more efficient to do ... Wayne Snyder, MCDBA, SQL Server MVP ... Since I can't intercept the login the best I ... > blowing up my error log. ...
    (microsoft.public.sqlserver.server)
  • Re: Updating Subscriber Question
    ... Through profiler I have determined the process is hanging up in the update ... trigger when the sp_MSget_publisher_rpc procedure is called. ... MSsubscription_properties table is queried to get the login id for the ... "Paul Ibison" wrote: ...
    (microsoft.public.sqlserver.replication)
  • Re: Cant connect to SQL server in Windows XP SP2
    ... Thanks, I'm not sure how to turn on login auditing, but using profiler is a ... > monitor for login failures in Profiler. ... >>vague about sql server does not exist or access denied. ... >>Chris Pankhurst ...
    (microsoft.public.sqlserver.connect)