Post reply

Server Login Audit

  • October 22, 2009 at 10:00 pm

    #385633

    Hi All,

    I need to know where the server audit(Login failure, none etc) is stored (some table/registry) in the security tab of Server Properties.

    This is for audit purpose.


    Pradeep Singh

  • October 22, 2009 at 10:36 pm

    #1069781

    in the sqlserver log/error file

  • October 22, 2009 at 11:31 pm

    #1069796

    It is stored in the registry in the instance specific registry, the Key is AuditLevel. On my machine for SQL 2008 Express is at:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQLServer

    0 = None

    1 = Success Only

    2 = Failed Only

    3 = Both

    CEWII

  • October 23, 2009 at 12:07 am

    #1069814

    Keep in mind this reg key only influences if SQLServer will write a notification in its ERRORLOG file.

    If you want an actual recording, regardless of this reg key setting, you should use sqlserver events to persist the data in your own audit table.

    cfr: http://qa.sqlservercentral.com/articles/Administration/64974/

    Johan

    Learn to play, play to learn !

    Dont drive faster than your guardian angel can fly ...
    but keeping both feet on the ground wont get you anywhere :w00t:

    - How to post Performance Problems
    - How to post data/code to get the best help[/url]

    - How to prevent a sore throat after hours of presenting ppt

    press F1 for solution, press shift+F1 for urgent solution 😀

    Need a bit of Powershell? How about this

    Who am I ? Sometimes this is me but most of the time this is me

  • October 23, 2009 at 1:40 am

    #1069829

    Thanks Elliot and Alzdba, This is what i wanted. I checked by changing the security audit level and the same is reflecting in the registry immediately.

    Thanks again for your help!!


    Pradeep Singh

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply