locked
SQL Audit User Account Deleted RRS feed

  • Question

  • Is there a way to find out who and when was a SQL user account was deleted??
    Thursday, August 11, 2011 9:12 PM

Answers

  • If you did not have auditing set up at the time, probably not. But it may be in the default trace.


    Erland Sommarskog, SQL Server MVP, esquel@sommarskog.se
    • Marked as answer by Stephanie Lv Thursday, August 18, 2011 11:49 PM
    Thursday, August 11, 2011 10:01 PM

All replies

  • If you did not have auditing set up at the time, probably not. But it may be in the default trace.


    Erland Sommarskog, SQL Server MVP, esquel@sommarskog.se
    • Marked as answer by Stephanie Lv Thursday, August 18, 2011 11:49 PM
    Thursday, August 11, 2011 10:01 PM
  • ...so in addition to Erland's comment ...if you did have auditing setup you should be able to track through your logs to find out. However the reality is that you probably haven't so take this as an opportunity to implement auditing for all the important events you want to capture, the business will thank you for your forsight in the future!

    There is a lot of options for auditing in SQL Server so you should take a look at the following and implement something that fits your requirements.

    Understanding SQL Server Audit

    Regards,
    Mark Broadbent.

    Contact me through (twitter|blog)

    Please click "Propose As Answer" if a post solves your problem
    or "Vote As Helpful" if a post has been useful to you
    Sunday, August 14, 2011 6:39 PM