Ask the Expert

Monitoring failed login attempts in SQL Server 2000

How can I monitor SQL Server 2000 for failed login attempts? I've tried simulating a failed SA login attempt then checking the logs but nothing seems to be captured.

    Requires Free Membership to View

Sadly, failed login error reporting is disabled by default (gasp!). I don't know why Microsoft has it setup that way, but it is. Pop into SQL Enterprise Manager, choose your server, go to properties, go to the Security tab and enable it. Once this has been activated, you'll start seeing them show up in your log files. A note of caution, the errors are notoriously brief and don't provide the amount of information that I would want if I was performing forensics on the server.

This was first published in June 2006

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: