August 10, 2021 at 10:24 pm
Looking to find the login information who started the SQL Server service. However, this is what I found in the log. Does this mean SQL Service may not have been restarted by a person, but rather was some service?
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 8/10/2021
Time: 10:02:02 AM
User: N/A
Computer: xxxxxxxxxxxx
Description:
The SQL Server (MSSQLSERVER) service entered the running state.
August 11, 2021 at 11:15 am
Hi,
maybe you can find these informations in the windows event viewer.
Just take a look at the "system" tab, and check the time fram, when the service was startet.
Good luck,
Andreas
August 11, 2021 at 3:30 pm
The log I provided is from windows event viewer. I know when it started, but I am trying to find who started?
August 11, 2021 at 4:55 pm
Hi sqlguru,
It looks not so easy to determine exactly what happened or what user is involved, I think you will need to implement a SQL Server Audit to fulfill your request, take a look at the following link , you will need to configure the audit.
I always have the following link also close to me just in case,
https://www.mssqltips.com/sqlservertip/2501/find-last-restart-of-sql-server/
The information about who was the user is not easily derived from the event viewer.
Good Luck
Regards
August 16, 2021 at 5:38 am
This was removed by the editor as SPAM
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply