Security audit - where account used


is there a way automate auditing where specific security principals -- sa or a domain service account -- are being used in sql instances accross multiple servers?  example, mydomain\myserviceacct have access databases, linked servers, jobs, operators, etc.?  thanks.

i think might asking multiple questions.

  • does account abc have access xyz?
  • has account abc been used access xyz? 

to answer when account has ability access can check permission tables , sql server role memberships. have posted queries on sql server wiki can started. see effective database engine permissions http://social.technet.microsoft.com/wiki/contents/articles/15180.effective-database-engine-permissions.aspx can complicated when windows user member of windows group , group has sql server login, member of sql server role, , role has permissions, etc.

as has used permissions, sql server audit designed that. full fine-grained auditing requires enterprise edition of sql server. see https://msdn.microsoft.com/en-us/library/cc280386.aspx

rick byham, microsoft, sql server books online, implies no warranty



SQL Server  >  SQL Server Security



Comments

Post a Comment

Popular posts from this blog

BIT Version

  hi,     knows how find out ther bit version in sql  , windows os (32 or 64)   regards, s.balavenkatesh   microsoft sql server 2005 - 9.00.1399.06 (intel x86) oct 14 2005 00:33:37 copyright (c) 1988-2005 microsoft corporation standard edition on windows nt 5.2 (build 3790: service pack 2)     intel x86)   -- says sql server 32 bit   madhu SQL Server  >  SQL Server Tools
Read more

SQL server replication error Cannot find the dbo or user defined function........

hi there, i ran problem while deploying sql 2008 transactional replication between 2 servers lets assume server , b. actually created  both distributor , publisher on server , after created subscriber pointed server b, launch replication monitor , found big red cross. when click on tab "distributor subscriber history" error says "cannot find either column "dbo" or user defined-function or aggregate "dbo.ufnleadingzeros", or name ambiguous". can body regarding issue. regards, ishuv hi, you need compare data , others reseved, index size, unused should not compared. differs. here server - data - 87896 kb server b - data - 78152 kb server data size includes publication tables, can't compare directly. need check article article know exact data size. SQL Server  >  ...
Read more

Admin Permissions

hi need create new 'role' following permissions, 1. access sql server logs. 2. access maintenance plans ( can avoid access) 3. access activity monitor 4. normal access product databases , not system db´s need guidance on how it, can point me in right direction please? thanks 1.grant  execute on xp_readerrorlog [domainname\ad user or group]; 2. http://technet.microsoft.com/en-us/library/ms191002.aspx 3.view server state permission 4. make user member of dbo_owner database role. best regards,uri dimant sql server mvp, http://sqlblog.com/blogs/uri_dimant/ ms sql optimization: ms sql development , optimization ms sql consulting: large scale of database , data cleansing remote dba services: improves ms sql database performance sql server integration services: business intelligence SQL Server  >  ...
Read more