logging failed SA login attempts

  • I posted this in the testing center by mistake -sorry for duplicating-

    There must be a way to monitor failed loging attempts... especially SA ones! but i cant find a method. Can this sort of information written to a log somewhere? I'd prefer to see this information outside of the database if possible.

    So how can one know if someone attempted to login as SA and failed?

    SQL 2012 Standard VPS Windows 2012 Server Standard

  • In SQL 2005 you can connect to your SQL server using SQL Server Management Studio.  Right-click on the server (top level), choose Properties.  On the left side click Security.  On the Security page under the "Login Auditing" section select "Failed logins only" - or your can audit successful and failed if you want.

    I believe this information will be written to your server Event Viewer- Security log which is viewed outside SQL itself.

    Note- changing the audit setting requires restarting your sql server service too.. oh and this is not specific to 'sa' login attempt only of course..

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply