I just set up an alert to know when someone try to use the SA account.
This morning I received the alert in my inbox. Is working fine.
Do you know if there is any way that I can Know WHO is the user or computer
trying to use the SA account?
You help will be really aprecitated.
Kind Regards.
Hernan VilarHi,
Alert can fire a task which will search the sysprocesses table and
insert into a audit table (Normal table) with the below info,
HOSTNAME,
NTusername,
GETDATE()
Thanks
Hari
MCDBA
"Hernan Vilar" <hvilar@.corin.co.uk> wrote in message
news:0FE5FF70-C4F2-457B-8A68-F916DF6E3550@.microsoft.com...
quote:
> Hi!
> I just set up an alert to know when someone try to use the SA account.
> This morning I received the alert in my inbox. Is working fine.
> Do you know if there is any way that I can Know WHO is the user or
computer trying to use the SA account?
quote:|||If the connection using SA is actually made this method will work. If the
> You help will be really aprecitated.
> Kind Regards.
> Hernan Vilar
connection fails then the method will not work bedause there is no entry in
sysprocesses. If the connection fails, I am not aware of a method to
determine who attempted the connection.
Rand
This posting is provided "as is" with no warranties and confers no rights.|||I would be carefull of this , I have 2 different servers that get hit
10-20,000 a night, it could get messy.
I would consolidate the logins or you may get a few emails 8-)..
Don
"Hernan Vilar" <hvilar@.corin.co.uk> wrote in message
news:0FE5FF70-C4F2-457B-8A68-F916DF6E3550@.microsoft.com...
quote:
> Hi!
> I just set up an alert to know when someone try to use the SA account.
> This morning I received the alert in my inbox. Is working fine.
> Do you know if there is any way that I can Know WHO is the user or
computer trying to use the SA account?
quote:
> You help will be really aprecitated.
> Kind Regards.
> Hernan Vilar
No comments:
Post a Comment