How can I monitor SQL Server 2000 for failed login attempts? I've tried simulating a failed SA login attempt then checking the logs but nothing seems to be captured.
Sadly, failed login error reporting is disabled by default (gasp!). I don't know why Microsoft has it setup that way, but it is. Pop into SQL Enterprise Manager, choose your server, go to properties, go to the Security tab and enable it. Once this has been activated, you'll start seeing them show up in your log files. A note of caution, the errors are notoriously brief and don't provide the amount of information that I would want if I was performing forensics on the server.
Dig deeper on SQL Server Security
Get the code to connect SQL Server version 7.0 to Visual Basic 6.0.continue reading
Learn why SQL Server 2000 connection is lost on the client side when database administrator changes 'SA' password on the SQL Server domain.continue reading
Learn how to create a SQL Server user authentication schema having password and tracked data changes requirements and how it involves Windows ...continue reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.