Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2005 Forums
 SQL Server Administration (2005)
 database deleted

Author  Topic 

arunsqladmin
Yak Posting Veteran

74 Posts

Posted - 2008-08-13 : 00:56:10
one of the user has deleted database ,, how to find out which user has deleted the database

Sundaresan
Starting Member

28 Posts

Posted - 2008-08-13 : 01:20:18
Hi,

Have u checked the activity log present under Maintainance folder in sqlserver

Sundaresan.R
Go to Top of Page

GilaMonster
Master Smack Fu Yak Hacker

4507 Posts

Posted - 2008-08-13 : 02:51:37
You could check the default trace. You'll find the trace files in the same directory as the error log. There's only a certain amount of data in there though, so if it happened a while back you may not find anything.

Other than that, I think you would probably need to have had a trace of some form running at the time.

Otherwise, you could check what users have enough rights to delete a database. It should be a small number if the security is set up correctly, and then go and question them.

--
Gail Shaw
SQL Server MVP
Go to Top of Page

sodeep
Master Smack Fu Yak Hacker

7174 Posts

Posted - 2008-08-13 : 12:28:32

This is result of improper security when people have more rights than they need.

Here is default trace:
--to get location
SELECT * FROM fn_trace_getinfo(default)
-- get info
SELECT * FROM fn_trace_gettable('tracefile location',default)
ORDER BY starttime

Well it is limited to records.
Go to Top of Page
   

- Advertisement -