Home Forums SQL Server 2008 Security (SS2K8) Determine *which* database an account failed to login to? RE: Determine *which* database an account failed to login to?

  • jasona.work (9/26/2013)


    Is there a way to determine, when an account attempts to open a DB and fails, which DB it was trying to open?

    Possibly via a server-side trace?

    ...

    If you are on >= SQL 2008 Enterprise you can use the Auditing feature.

    In SQL 2012 the Server level part is even available in standard edition.

    That would in my eyes be the easiest way plus have the least overhead.

    A SQL Trace is possible, too if you don't have that option. There you would use the "Audit Login Failed" event.

    It shoul all be in the Errorlog as well though. So if it is really missing completely, there might be something else going on..

    Andreas

    ---------------------------------------------------
    MVP SQL Server
    Microsoft Certified Master SQL Server 2008
    Microsoft Certified Solutions Master Data Platform, SQL Server 2012
    www.insidesql.org/blogs/andreaswolter
    www.andreas-wolter.com