|
|
|
Valued Member
      
Group: General Forum Members
Last Login: Monday, April 29, 2013 11:29 AM
Points: 53,
Visits: 224
|
|
Hi all, is there an Event ID that gets written into Windows log when the db user is deleted? The only thing I find is sp_trace_setevent for the default trace, such as below.
130 Audit Database Principal Management Event Occurs when principals, such as users, are created, altered, or dropped from a database.
Also, I found Server Audit setting, but nothing like a general event ID in the App log that I can use for monitoring. Is that accurate?
|
|
|
|
|
Ten Centuries
      
Group: General Forum Members
Last Login: Yesterday @ 7:27 AM
Points: 1,259,
Visits: 4,260
|
|
| No, none of this information is written into the event log. If you want to track user deletions you'll need to use the default trace, as you've found.
|
|
|
|
|
Ten Centuries
      
Group: General Forum Members
Last Login: Monday, May 20, 2013 10:44 PM
Points: 1,143,
Visits: 229
|
|
There will no windows log, Sql manages internally and u can access it through sql only.
|
|
|
|