Totally agree.

Thanks Eric, yea as soon as he turned off Tivoli, everything stopped. I am the DBA and yea the people that manage the server itself had turned this on....

the clientid indicates that the queries are coming from koqcoll.exe - that is the sql server agent right?

EDIT: my bad sorry... it appears the file is associated with IBM...

Yea it is really strange and most strange to me that the connection count just keeps growing and growing.

Its running all sorts of queries...

dbcc sqlperf(netstats)

set dateformat ymd select secdiff...

I restarted SQL and the number of connections went from 4000 to 30 and all seemed to be good. But as I sit here and monitor the server.... the...

LOL - then I guess we're screwed. 😉

I backup the transaction log and the database quite often though.... so, not entirely catastrophic. 🙂

No there is a rollback in the code. I would think that it would need to be captured in an actual transaction for the rollback to actually work though?

One more question - I got the procedure to work. And if I try to execute a DROP command I get the error message but its still allowing the...

Oh that would explain it. Didn't know it was case sensitive. Thanks! I like all my code to be capitalized... 🙂

And yup, I know I need to...

create table TBL_AUDIT_PROTECTEDTABLES(TABLENAME varchar(200) NOT NULL);

create table TBL_AUDIT_DROP_ERRORLOG([ID] [int] IDENTITY(1,1) NOT NULL,EVENT_DATE DATETIME,USERNAME NVARCHAR(50),OBJECTNAME NVARCHAR(100), COMMAND_TEXT NVARCHAR(MAX),EVENT_TYPE NVARCHAR(100));

GO

CREATE TRIGGER [TR_PROTECT_TABLES]

ON DATABASE

FOR

DROP_TABLE

AS

BEGIN

DECLARE @EVENTDATA XML,

@UNAME NVARCHAR(50),

@ONAME NVARCHAR(100),

@OTEXT VARCHAR(MAX),

@ETYPE NVARCHAR(100),

@EDATE DATETIME

SET...

LOL I would get fired if I did that. 🙂

Does one of the server audit specifications or db audit specs allow for tracking of things like dropping triggers/tables?

I know they just need sysadmin... was just saying we don't use the sa account.

I already have some server audits going on for certain things... but is it possible to...

Well gotta do what you gotta do. 🙂 Nobody is using the 'sa' account but these are people with dbo and or actual network administrators. Most of the...

I can't revoke the permissions. Our servers are managed by the government and people just have SA rights. I also cannot change permissions of users in the other...

Thanks for the reply! Yea I do not like this method one bit and I really hate the way it is coded. I am a bit at a...