Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2005 Forums
 SQL Server Administration (2005)
 Question about recovering following a disaster

Author  Topic 

R
Constraint Violating Yak Guru

328 Posts

Posted - 2008-10-21 : 06:05:12
Hi all

I've got a theoretical question to ask about recovering a database following disaster. Let's take the following example:

I have a frequently used sql 2005 database that has the following backup schedule:

  • Weekly Full
  • Daily Differential
  • Hourly Transaction Log

Let's suppose that at some point somebody gets through the security mechanisms and truncates a huge amount of data from the database. Generally, how do admin's know which point to restore the database to? Is there some way to determine when the data was deleted?
Also, how do you keep any data entered into the database since the point where data was lost?

Thanks in advance.

sodeep
Master Smack Fu Yak Hacker

7174 Posts

Posted - 2008-10-21 : 09:52:34
Thats why security is important aspect if data in your company is very crucial.You shouldn't give unnecessary rights to people.For ex:
Alter table permission can let user truncate whole table.You should use DDL trigger and DML to track it down.Since you are also doing hourly,you can trackit down from there too.
Go to Top of Page

R
Constraint Violating Yak Guru

328 Posts

Posted - 2008-10-21 : 10:08:13
Hi

My security is extremely tight, since its an ASP.NET app and the only way to access the server using SQL is via VPN from a fixed IP.
Only my SA account can 'see' anything beyond executing simple stored procedures, and again only from my fixed location.

So its really theoretical for my own interest.

Can you explain what you mean by DML and DDL please? Is there a way to see what time certain commands executed?
Go to Top of Page

sodeep
Master Smack Fu Yak Hacker

7174 Posts

Posted - 2008-10-21 : 10:18:31
Search for DDL trigger to track system date and who did it.
Go to Top of Page
   

- Advertisement -