I am looking for a simplified way to track which user created which login, Surprisingly enough, the sys.logins table does not have this information. My company has SQL environments ranging from 2008 R2 - 2017. So this is going to be challenging. At the moment, we have no way in knowing who created logins on our production environments.
So, since our outdated environment goes back as far as 2008 R2, I figured instance level triggers would do the trick. I am not sure if SQL has that capability on 2008 R2, 2012, 2014, 2016, or 2017. I know there are DLL triggers, but are they instance level?
Also, what would SSC recommend for this, if not triggers? Extended events is an option, but it's doubtful that my company will approve this method.
Any help would be greatly appreciated!
Everyone has a plan until they get punched in the mouth. --Mike Tyson