May 29, 2007 at 1:14 pm
Someone deleted database how can I find who deleted the database.
We have windows authentication.
I know this information should be stored in system database. Can someone help me please.
Nita
May 29, 2007 at 1:29 pm
Unless you had a trace running, I think you are S.O.L, unless somebody fesses up to it. In the future, don't give anyone access that will allow them to do this if you cannot trust them to be honest if they make a mistake. You on SQL 2000 right, not 2005?
A.J.
DBA with an attitude
May 29, 2007 at 3:40 pm
If you have SQL Server security auditting enabled, you can check the error log to see who was logged in at that time. But SQL Server doesn't keep track of that kind of information. Basically, it figures that if you have permission to drop something, then you can drop it and why should it care?
-SQLBill
May 29, 2007 at 5:03 pm
It may also be helpful to look for the MDF and LDF files in case the database has just been detached instead of deleted.
May 29, 2007 at 11:33 pm
...and, if there hasn't been too much activity, you may be able to recover the MDF and LDF files if they were, in fact, deleted.
--Jeff Moden
Change is inevitable... Change for the better is not.
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply