Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
Author |
Topic |
arunsqladmin
Yak Posting Veteran
74 Posts |
Posted - 2008-08-13 : 00:56:10
|
one of the user has deleted database ,, how to find out which user has deleted the database |
|
Sundaresan
Starting Member
28 Posts |
Posted - 2008-08-13 : 01:20:18
|
Hi,Have u checked the activity log present under Maintainance folder in sqlserverSundaresan.R |
|
|
GilaMonster
Master Smack Fu Yak Hacker
4507 Posts |
Posted - 2008-08-13 : 02:51:37
|
You could check the default trace. You'll find the trace files in the same directory as the error log. There's only a certain amount of data in there though, so if it happened a while back you may not find anything.Other than that, I think you would probably need to have had a trace of some form running at the time.Otherwise, you could check what users have enough rights to delete a database. It should be a small number if the security is set up correctly, and then go and question them.--Gail ShawSQL Server MVP |
|
|
sodeep
Master Smack Fu Yak Hacker
7174 Posts |
Posted - 2008-08-13 : 12:28:32
|
This is result of improper security when people have more rights than they need.Here is default trace:--to get locationSELECT * FROM fn_trace_getinfo(default)-- get infoSELECT * FROM fn_trace_gettable('tracefile location',default) ORDER BY starttimeWell it is limited to records. |
|
|
|
|
|