How Can I find who drop a database

Question

Post reply

How Can I find who drop a database

hgranja

Valued Member

Points: 53
More actions
September 9, 2003 at 12:32 pm

#176706

Hi Guys,
How are you, I hope fine...
I need know who drop one database in my server and when.
Where i find this...
Tank's for your help

Viewing 12 posts - 1 through 11 (of 11 total)

You must be logged in to reply to this topic. Login to reply

Antares686 SSC Guru Points: 125444 More actions · Answer 1

To the best of my knowledge unless you had a trace running to watch this you cannot find out.

K. Brian Kelley SSC Guru Points: 114642 More actions · Answer 2

Short of resorting to torturing all with the appropriate rights... I'm in an evil mood!

K. Brian Kelley

http://www.truthsolutions.com/

Author: Start to Finish Guide to SQL Server Performance Monitoring

http://www.netimpress.com/

K. Brian Kelley
@kbriankelley

mybid2003 SSCertifiable Points: 6620 More actions · Answer 3

Antares686 & Brian: Can we find it thru ERRORLOG file??

hgranja:What is your SQL Server Version?

.

K. Brian Kelley SSC Guru Points: 114642 More actions · Answer 4

Not necessarily. I just did a test and the drop database did not get recorded to the ERRORLOG. The "starting up database" did for the create, but that's it.

K. Brian Kelley

http://www.truthsolutions.com/

Author: Start to Finish Guide to SQL Server Performance Monitoring

http://www.netimpress.com/

K. Brian Kelley
@kbriankelley

Steve Jones - SSC Editor SSC Guru Points: 736270 More actions · Answer 5

I don't think there is a way to know this after the fact. Possibly Log Explorer from Lumigent could get this info.

Steve Jones

sjones@sqlservercentral.com

http://www.sqlservercentral.com/columnists/sjones

The Best of SQL Server Central.com 2002 - http://www.sqlservercentral.com/bestof/

http://www.dkranch.net

Antares686 SSC Guru Points: 125444 More actions · Answer 6

quote:
I don't think there is a way to know this after the fact. Possibly Log Explorer from Lumigent could get this info.
Steve Jones
sjones@sqlservercentral.com
http://www.sqlservercentral.com/columnists/sjones
The Best of SQL Server Central.com 2002 - http://www.sqlservercentral.com/bestof/
http://www.dkranch.net

But that is only if the transaction logs have not been truncated yet.

Frank Kalis SSC Guru Points: 111183 More actions · Answer 7

Does it really matter who did this?

I mean apart from personal satisfaction derived from tar and feather this evil person?

What about restoring and setting appropriate rights and keep this lesson in mind for the future

Frank

--
Frank Kalis
Microsoft SQL Server MVP
Webmaster: http://www.insidesql.org/blogs
My blog: http://www.insidesql.org/blogs/frankkalis/[/url]

Steven. SSCrazy Eights Points: 9806 More actions · Answer 8

Maybe you need to look at the security on the server, and see who really needs dbo level access or above.

If you can restrict who can do this, it should reduce the chances of it happening again.

Steven

jack-64275 SSCrazy Points: 2017 More actions · Answer 9

This won't help your current situation but...

NetIQ configuration manager is very robust and tracks a large array of changes including the dropping of objects/databases.

Arti SSC Veteran Points: 215 More actions · Answer 10

Lumigent has free tool called Lumigent Schema Alert.

It can email you changes to db schema.

Arti

mybid2003 SSCertifiable Points: 6620 More actions · Answer 11

But again Lumigent Schema Alert need to be installed in any one of the client machine for monitoring. Also it should be up and running at that time. I use this all the time. But if this tool is not running at that time, you don't get the notifications.

Its obvious I can't install this on the server. Coz of Risk.

Edited by - mdamera on 09/10/2003 09:46:47 AM

.