InstantForum.NET v2.9.0SQLServerCentralhttp://www.sqlservercentral.com/Forums/notifications@sqlservercentral.comFri, 24 May 2013 00:47:27 GMT20http://www.sqlservercentral.com/Forums/Topic1093984-161-1.aspxthanks Lowell.I may need a sample script to automatically know an attemp to use "SA" ID login in SQL2K was failed. I need to capture the HostName used.Mon, 18 Apr 2011 23:33:18 GMTescobal_lorhttp://www.sqlservercentral.com/Forums/Topic1093984-161-1.aspxif an application explicitly codes the "Workstation Id = " section to a connection string, then you can blank or or spoof the values you might expect:here's a connection string example,and here's how to do it in SSMS:Dim mySqlConnectionFormat As String = "data source={0};initial catalog={1};user id={2};password={3};Trusted_Connection=False;Connect Timeout=600;Workstation ID=FAKEMACHINE;Application Name=GhostInTheMachine;"[img]http://www.stormrage.com/SQLStuff/SSMS_AppNameHostName.gif[/img]Fri, 15 Apr 2011 06:17:37 GMTLowellhttp://www.sqlservercentral.com/Forums/Topic1093984-161-1.aspxWe used the trace file and saw an "SA" ID login in SQL2K was failed and the hostname is blank. Is it possible that the "SA" ID in SQL 2000 was able to login and you cannot capture the HostName?Fri, 15 Apr 2011 03:19:08 GMTescobal_lor