Who dropped the database?

  • Is there a way to tell who dropped a database?



    A.J.
    DBA with an attitude

  • Hi AJ,

    I don't think you can tell unless you have some form of auditing enabled or using ddl triggers.

    Hope this helps

    Gethyn Elliswww.gethynellis.com

  • If the default trace is running you may be able to track that down since one of the event classes it captures is Object : Deleted. To find out if the trace is running SELECT * FROM sys.traces.

    The traces are stored in C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\ and can be opened in profiler or by using the fn_trace_gettable command.

    SELECT * FROM fn_trace_gettable('C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\log.trc', default);

  • above are applicable only for SQL 2005.

    If you don;t have traces running, you have no way to find out in SQL 2K

  • Could you look on your server to see which users have the rights to do so?

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply