Audit trial report for user rights modifications and table modifications

  • How can we identify that which user created/modified/deleted existing users /user rights

    Also we need to know which user created/modified/deleted existing database objects like tables, views, functions, stored procedures etc.

  • After the fact this is hard, but log reader products can do it if the evidence hasn't been overwritten or truncated.

    Prior to the fact, there are 3rd party tools to audit for this sort of thing. Server-side traces can do it. DDL and Logon triggers can do it.

    K. Brian Kelley
    @kbriankelley

  • The SQL Default Trace contains the information.

  • This is true, the default trace has it, too. However, you'll need to read it using Profiler with respect to user-related events. The report handles objects (DDL changes) just fine, but doesn't report on the user/role security events which are stored in the default trace.

    K. Brian Kelley
    @kbriankelley

  • Thank you for your response.

    If 3rd parties can do this one then why Microsoft is not creating a tool for this?? :cool::cool::cool:

    Any way which one is recommended tool??:D:D

  • By default trace, do you mean that by default a trace runs for the SQL events always? What are the events that are logged in it?

    Where is it saved(default location)? How to read it using the profiler? Is it simply by opening the trace file?

    Please answer, as this might help me a lot........thanks in advance.

    Chandrachurh Ghosh
    DBA – MS SQL Server
    Ericsson India Global Services Limited
    Quality is not an act, it is a habit.

  • I think in default trace only few events are logged in

    By using the below sql statement we can view the trace details

    SELECT * FROM fn_trace_gettable((select path from sys.traces), default);

    But it is not showing all events like table creation, table alteration, table renaming, user creation, user alteration etc.

    if there is any other way to view trace details please let me know.

    Thanks in Advance

Viewing 7 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic. Login to reply