Ensuring logins are not used

  • There are approximately 30 logins on one of our PROD instances of SQL Server that I believe are unused. Here is what I have checked so far:

    1) Audited failed and successful logins for 1 month

    2) Used RedGate SQL Search to ensure the logins aren't hard-coded into any DB objects

    Is there anything else I should check to see if a login is being used?

    Thanks!

  • Also maybe check:

    SQL Jobs (who knows, maybe a yearly job)

    SSIS data sources / SSIS packages

    SQL DBA,SQL Server MVP(07, 08, 09) "It's a dog-eat-dog world, and I'm wearing Milk-Bone underwear." "Norm", on "Cheers". Also from "Cheers", from "Carla": "You need to know 3 things about Tortelli men: Tortelli men draw women like flies; Tortelli men treat women like flies; Tortelli men's brains are in their flies".

  • If you've enabled login auditing, and you've confirmed no logins for past month, then should do it. At this point disable them and have an email alert notify you in event of a failed login.

    "Do not seek to follow in the footsteps of the wise. Instead, seek what they sought." - Matsuo Basho

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply